ts.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000024c0)=r2, 0x4) (rerun: 32) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002440)={&(0x7f0000001340)="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", &(0x7f0000000140)=""/206, &(0x7f0000000240)="fa699feb7c5176341b7323736b3c0fbf84dd84530d19dacf3b0d5dd12946f7cd9aa44bb2266bc6559b3f5951d76961f870e138c3d4d37e94da81297110b33142908a73fcad0ad1c27134c151cb0c8b", &(0x7f0000002340)="233e33f268ebba84cde87310626fe690f2621c11a7b91ea875f9f619e1ac77dbe6b90843d3f1e08eaf751c34344d89f57b2dfb38154e53ad850dfcf5f1433e8aa4118c2ac8bc6f5de04861190c385a05eaeb81f27e0428ccf00d52d3f2efa3af1626d34efb783c7aed44a087c5e77e5bd4cf7eb573ff93eeb3e97a4b9f6bfe3c588cfe57dbace9f8368c695546f4985226eaf3fc02d67471b9431ddd0d95dface1262610a35a4c9a839a5c6a7db3459237ec273c812f328c1a3b969e8fcb4a12d63b14f5db3985c6464e06", 0x81, r0}, 0x38) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:16 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:16 executing program 0: syz_clone(0x0, &(0x7f0000003900)="ec8dec2c7bbe1494bf94122cc84eedd6869bd9575f3075a7c6cf32c336173c18a5533b2c50823264b10a9640d002134d7e628d5753066e98a94845cc5f6c5b17c961224e3d8706da2b7a16e1af9182abe61908b8e75f94d720c06aeb2f14efc6f18be3baa2200977fe6b59a249360796d6b2899374014d012ab56885d532631242e527494cb5e1a00592236a922d9e042c5d6b27f860ca8ccefc2b4d8b3957ab626ca1adedac2a1a2ec932ea7854af721ea57cd6e93bc209c18e7de8a03e19d0b2202b0253e195b57355b53369064afd43eb21c4c591c956", 0xd8, &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3dc, 0xffffffffffffffff, 0x0) 11:06:16 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="2fc4a7683d274ff47f645ad1e6d9d6f187e7203af685761a822072d4315a5d12b357daf727a3bd6ff20f3bcfe8815337b4ea816f1460aa075f347f13b47c9e63e4c9f6be472b2da62890d5ee59c1054785b46632476b1957a5e07fc3d55b5a4384fa6524c96d211d14676ea1c69ceedc9370fa3be65b7e820f38e30bfbc8351997abb501d4e0dca03e12868e20019f2b0649cbe62c5c84a3b8f270481d0d8fcb7419638aa02779581b84962b76a4ce1d1e6711e8a68a6bbe99627eb6", &(0x7f0000000340)=""/4096}, 0x20) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) socketpair(0x0, 0x1, 0x5, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000024c0)=r2, 0x4) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002440)={&(0x7f0000001340)="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", &(0x7f0000000140)=""/206, &(0x7f0000000240)="fa699feb7c5176341b7323736b3c0fbf84dd84530d19dacf3b0d5dd12946f7cd9aa44bb2266bc6559b3f5951d76961f870e138c3d4d37e94da81297110b33142908a73fcad0ad1c27134c151cb0c8b", &(0x7f0000002340)="233e33f268ebba84cde87310626fe690f2621c11a7b91ea875f9f619e1ac77dbe6b90843d3f1e08eaf751c34344d89f57b2dfb38154e53ad850dfcf5f1433e8aa4118c2ac8bc6f5de04861190c385a05eaeb81f27e0428ccf00d52d3f2efa3af1626d34efb783c7aed44a087c5e77e5bd4cf7eb573ff93eeb3e97a4b9f6bfe3c588cfe57dbace9f8368c695546f4985226eaf3fc02d67471b9431ddd0d95dface1262610a35a4c9a839a5c6a7db3459237ec273c812f328c1a3b969e8fcb4a12d63b14f5db3985c6464e06", 0x81, r0}, 0x38) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:16 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:16 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3de, 0xffffffffffffffff, 0x0) 11:06:16 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0xf, 0x0, 0x4, &(0x7f0000000040)=[0x0], 0x1}, 0x20) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 11:06:16 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:16 executing program 2: syz_clone(0x10001000, 0x0, 0x0, &(0x7f0000003780), 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 0: syz_clone(0x0, &(0x7f0000003900)="ec8dec2c7bbe1494bf94122cc84eedd6869bd9575f3075a7c6cf32c336173c18a5533b2c50823264b10a9640d002134d7e628d5753066e98a94845cc5f6c5b17c961224e3d8706da2b7a16e1af9182abe61908b8e75f94d720c06aeb2f14efc6f18be3baa2200977fe6b59a249360796d6b2899374014d012ab56885d532631242e527494cb5e1a00592236a922d9e042c5d6b27f860ca8ccefc2b4d8b3957ab626ca1adedac2a1a2ec932ea7854af721ea57cd6e93bc209c18e7de8a03e19d0b2202b0253e195b57355b53369064afd43eb21c4c591c956", 0xd8, &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x700, 0xffffffffffffffff, 0x0) 11:06:16 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0xf, 0x0, 0x4, &(0x7f0000000040)=[0x0], 0x1}, 0x20) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 11:06:16 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:16 executing program 2: syz_clone(0x10001000, 0x0, 0x0, &(0x7f0000003780), 0x0, 0x0) 11:06:16 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0xf, 0x0, 0x4, &(0x7f0000000040)=[0x0], 0x1}, 0x20) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0xf, 0x0, 0x4, &(0x7f0000000040)=[0x0], 0x1}, 0x20) (async) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) 11:06:16 executing program 0: syz_clone(0x10001000, 0x0, 0x0, &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xc00, 0xffffffffffffffff, 0x0) 11:06:16 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:16 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x1500, 0xffffffffffffffff, 0x0) 11:06:16 executing program 5: close(0xffffffffffffffff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0xffffffffffffffff, 0x20, 0x6}, 0x2f) 11:06:16 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x262, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:16 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x2d03, 0xffffffffffffffff, 0x0) 11:06:16 executing program 5: close(0xffffffffffffffff) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0xffffffffffffffff, 0x20, 0x6}, 0x2f) 11:06:16 executing program 5: close(0xffffffffffffffff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0xffffffffffffffff, 0x20, 0x6}, 0x2f) (async) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0xffffffffffffffff, 0x20, 0x6}, 0x2f) 11:06:16 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3203, 0xffffffffffffffff, 0x0) 11:06:16 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x263, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:16 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4000, 0xffffffffffffffff, 0x0) 11:06:16 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:16 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x8, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) 11:06:16 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4800, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x8, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) 11:06:17 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x265, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x8, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x266, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4901, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4a00, 0xffffffffffffffff, 0x0) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, &(0x7f0000003780), 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x267, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) (async) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x5400, 0xffffffffffffffff, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x5402, 0xffffffffffffffff, 0x0) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, &(0x7f0000003780), 0x0, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x269, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x5a03, 0xffffffffffffffff, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x6403, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x1d}, 0x10) 11:06:17 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x1d}, 0x10) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x6a02, 0xffffffffffffffff, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x1d}, 0x10) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x7602, 0xffffffffffffffff, 0x0) 11:06:17 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x7e02, 0xffffffffffffffff, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x8900, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x9500, 0xffffffffffffffff, 0x0) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, r0, 0x8) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x9602, 0xffffffffffffffff, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x270, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, r0, 0x8) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xc403, 0xffffffffffffffff, 0x0) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, r0, 0x8) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, r0, 0x8) (async) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xc803, 0xffffffffffffffff, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x272, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x273, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xd003, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000000)="9b18e92193243722ef9942a5f618e4e83cfeb185218c3ac904ad2660063b191b0f8cd8220878452b2269281d30ec15848cbdaef6034badacd317522545bf7bace090aacadc75f0b033a199765a389caed9c19b4cffba93df6e3c488730d68c1735e79039c917b792f4804833eeef8274b980a505e3d7fdd22f363818ac687a121b1e83cd90ed77a4fc346390dcfbb6b4be6b61cdb165c474f8fbd210e7f3f33c01adf83c4370ed1c74259ab947d56b0acee3a075b31e8f52c15437ccbce5c7353c9dd3cf7929cca52b8a6ee8ae37cabf4a03", &(0x7f0000000100)=""/2, &(0x7f0000000140)="1f8240160428a7599d5a3ef128283a0edbe6cc476549505d348d9a6ceeb94afc10a7149d4810ec389ae43d6dbc987967e63f3f704c1f32c3d309e131b29620ddc4087e1457585d369cd52da8e6d291b0a34a139e0ba3ba07dc26fc81b6ab7daba47ea66d1902b1ecc0193f0d9462380816441f5236f632647cdefa6ab6a49f83e4af17d979935ab0741febbeb67a9912ce105d9e28045c8500ca1a0d126c73390bbf39efbb00a1a44e5706dca51a5acfa149c6ae06e0ca7b407373a49d4cb7b2912be884275b1979c97b964958045814dddef1fc1dcf1d8d055944555587944e9293", &(0x7f0000000340)="7fe717b3640a9f4cb9c2f772e9f09f5dede0574a313344343de4802e44ff44df92b8d41d9c659901887047bf9553edef6becdfdf5ab1fc63f9e73ea33e081d34bed1d538c880f558bb9e65098206d16b5590ec5935ad6a28fdb6b544c68a9b12ecb6139ed7ef9fab678621277521df8e717c89b7cfd51e16f222d2b1fc1a668944a85e6e8d5b48e2c862cdafb6e8671f535ab83ec9d2f41bf2f13c1eadca0bc036c8ce7d66008d8eedc78f1c27550ef25e7b96ae25a50c4bf1449ebf", 0xffff, r0}, 0x38) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xdc03, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000000)="9b18e92193243722ef9942a5f618e4e83cfeb185218c3ac904ad2660063b191b0f8cd8220878452b2269281d30ec15848cbdaef6034badacd317522545bf7bace090aacadc75f0b033a199765a389caed9c19b4cffba93df6e3c488730d68c1735e79039c917b792f4804833eeef8274b980a505e3d7fdd22f363818ac687a121b1e83cd90ed77a4fc346390dcfbb6b4be6b61cdb165c474f8fbd210e7f3f33c01adf83c4370ed1c74259ab947d56b0acee3a075b31e8f52c15437ccbce5c7353c9dd3cf7929cca52b8a6ee8ae37cabf4a03", &(0x7f0000000100)=""/2, &(0x7f0000000140)="1f8240160428a7599d5a3ef128283a0edbe6cc476549505d348d9a6ceeb94afc10a7149d4810ec389ae43d6dbc987967e63f3f704c1f32c3d309e131b29620ddc4087e1457585d369cd52da8e6d291b0a34a139e0ba3ba07dc26fc81b6ab7daba47ea66d1902b1ecc0193f0d9462380816441f5236f632647cdefa6ab6a49f83e4af17d979935ab0741febbeb67a9912ce105d9e28045c8500ca1a0d126c73390bbf39efbb00a1a44e5706dca51a5acfa149c6ae06e0ca7b407373a49d4cb7b2912be884275b1979c97b964958045814dddef1fc1dcf1d8d055944555587944e9293", &(0x7f0000000340)="7fe717b3640a9f4cb9c2f772e9f09f5dede0574a313344343de4802e44ff44df92b8d41d9c659901887047bf9553edef6becdfdf5ab1fc63f9e73ea33e081d34bed1d538c880f558bb9e65098206d16b5590ec5935ad6a28fdb6b544c68a9b12ecb6139ed7ef9fab678621277521df8e717c89b7cfd51e16f222d2b1fc1a668944a85e6e8d5b48e2c862cdafb6e8671f535ab83ec9d2f41bf2f13c1eadca0bc036c8ce7d66008d8eedc78f1c27550ef25e7b96ae25a50c4bf1449ebf", 0xffff, r0}, 0x38) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x275, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xde03, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf344675798") 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x276, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000000)="9b18e92193243722ef9942a5f618e4e83cfeb185218c3ac904ad2660063b191b0f8cd8220878452b2269281d30ec15848cbdaef6034badacd317522545bf7bace090aacadc75f0b033a199765a389caed9c19b4cffba93df6e3c488730d68c1735e79039c917b792f4804833eeef8274b980a505e3d7fdd22f363818ac687a121b1e83cd90ed77a4fc346390dcfbb6b4be6b61cdb165c474f8fbd210e7f3f33c01adf83c4370ed1c74259ab947d56b0acee3a075b31e8f52c15437ccbce5c7353c9dd3cf7929cca52b8a6ee8ae37cabf4a03", &(0x7f0000000100)=""/2, &(0x7f0000000140)="1f8240160428a7599d5a3ef128283a0edbe6cc476549505d348d9a6ceeb94afc10a7149d4810ec389ae43d6dbc987967e63f3f704c1f32c3d309e131b29620ddc4087e1457585d369cd52da8e6d291b0a34a139e0ba3ba07dc26fc81b6ab7daba47ea66d1902b1ecc0193f0d9462380816441f5236f632647cdefa6ab6a49f83e4af17d979935ab0741febbeb67a9912ce105d9e28045c8500ca1a0d126c73390bbf39efbb00a1a44e5706dca51a5acfa149c6ae06e0ca7b407373a49d4cb7b2912be884275b1979c97b964958045814dddef1fc1dcf1d8d055944555587944e9293", &(0x7f0000000340)="7fe717b3640a9f4cb9c2f772e9f09f5dede0574a313344343de4802e44ff44df92b8d41d9c659901887047bf9553edef6becdfdf5ab1fc63f9e73ea33e081d34bed1d538c880f558bb9e65098206d16b5590ec5935ad6a28fdb6b544c68a9b12ecb6139ed7ef9fab678621277521df8e717c89b7cfd51e16f222d2b1fc1a668944a85e6e8d5b48e2c862cdafb6e8671f535ab83ec9d2f41bf2f13c1eadca0bc036c8ce7d66008d8eedc78f1c27550ef25e7b96ae25a50c4bf1449ebf", 0xffff, r0}, 0x38) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x20000, 0xffffffffffffffff, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x277, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x40000, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ip6gretap0\x00', 0x600}) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x278, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x400000, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ip6gretap0\x00', 0x600}) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x400001, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ip6gretap0\x00', 0x600}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ip6gretap0\x00', 0x600}) (async) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x80ffff, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7ffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a7422e9, 0x2, @perf_config_ext={0x29ae, 0xfffffffffffffffc}, 0x10090, 0x200000000, 0xfffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x100, 0xffffffffffffffff, 0x3) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf344675798") 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x1000000, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7ffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a7422e9, 0x2, @perf_config_ext={0x29ae, 0xfffffffffffffffc}, 0x10090, 0x200000000, 0xfffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x100, 0xffffffffffffffff, 0x3) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x1004000, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc") 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7ffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a7422e9, 0x2, @perf_config_ext={0x29ae, 0xfffffffffffffffc}, 0x10090, 0x200000000, 0xfffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x100, 0xffffffffffffffff, 0x3) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x2000000, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc") 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3000000, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)='\n') 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4000000, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="c78422d2d9c285bb7c577cbe4f53bbcffb34ccea252413c4f9f043e25f092e01b1b7eb", 0x23}, {&(0x7f00000000c0)="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", 0xfe}, {&(0x7f00000001c0)="10418cd4f93dd36f9e10e10fbfd05e5ccbf1eb140fd4687823a794eab8ce17d483c1a752467406dbdc0522974dd0669babc737fe504e1a4449e83a597ede617f7bb5aa155492f4dd2f14eab94c4b209797", 0x51}], 0x3}, 0x20000004) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='devices.list\x00', 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3cc7c2a5, 0x3, 0x40, 0x1204, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x7}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000400000000000000050000009500000000000000950000000000000000b7050006000000852000000300000018130000", @ANYRES32, @ANYBLOB="00000800000000006d72ffffffffffff9500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x7f, 0x83, &(0x7f0000000400)=""/131, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r0, r1, r2, r3, r4]}, 0x80) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000007c0)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="c78422d2d9c285bb7c577cbe4f53bbcffb34ccea252413c4f9f043e25f092e01b1b7eb", 0x23}, {&(0x7f00000000c0)="fe73e29cc522297675e085998cb14d865c90b68c56e73819e933a7bf499303607cd030bb84cfaca49c614cd582f946f99d4fca0bb266264c0eb21422487be0232d87e0a12caccc5fe21e2ca8f8f156f8f6f25ffb665884ddd40a9a15cd0926cd94e29fd0be18e0aae4779fac095db30ef73b2771eec1866d95182e58d2109e2b5a6dd67d9c5873f732b5a0c71962c6a2f09da9636bbbbab3812218000b24f1625c101f54c813ebfc25785d493125bae15dcd3f4654a3ebc4f4df141a14d59d91adf26513839953763fe4f73c088ff1fbd412057c75386a7c7786361021877a380bc3283e01600198399cab19d54866d67dccaf7e89062b8a9eb316831ab7", 0xfe}, {&(0x7f00000001c0)="10418cd4f93dd36f9e10e10fbfd05e5ccbf1eb140fd4687823a794eab8ce17d483c1a752467406dbdc0522974dd0669babc737fe504e1a4449e83a597ede617f7bb5aa155492f4dd2f14eab94c4b209797", 0x51}], 0x3}, 0x20000004) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='devices.list\x00', 0x0, 0x0) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3cc7c2a5, 0x3, 0x40, 0x1204, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x7}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000400000000000000050000009500000000000000950000000000000000b7050006000000852000000300000018130000", @ANYRES32, @ANYBLOB="00000800000000006d72ffffffffffff9500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x7f, 0x83, &(0x7f0000000400)=""/131, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r0, r1, r2, r3, r4]}, 0x80) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000007c0)) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) 11:06:17 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:17 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf344675798") 11:06:17 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x7000000, 0xffffffffffffffff, 0x0) 11:06:17 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:17 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="c78422d2d9c285bb7c577cbe4f53bbcffb34ccea252413c4f9f043e25f092e01b1b7eb", 0x23}, {&(0x7f00000000c0)="fe73e29cc522297675e085998cb14d865c90b68c56e73819e933a7bf499303607cd030bb84cfaca49c614cd582f946f99d4fca0bb266264c0eb21422487be0232d87e0a12caccc5fe21e2ca8f8f156f8f6f25ffb665884ddd40a9a15cd0926cd94e29fd0be18e0aae4779fac095db30ef73b2771eec1866d95182e58d2109e2b5a6dd67d9c5873f732b5a0c71962c6a2f09da9636bbbbab3812218000b24f1625c101f54c813ebfc25785d493125bae15dcd3f4654a3ebc4f4df141a14d59d91adf26513839953763fe4f73c088ff1fbd412057c75386a7c7786361021877a380bc3283e01600198399cab19d54866d67dccaf7e89062b8a9eb316831ab7", 0xfe}, {&(0x7f00000001c0)="10418cd4f93dd36f9e10e10fbfd05e5ccbf1eb140fd4687823a794eab8ce17d483c1a752467406dbdc0522974dd0669babc737fe504e1a4449e83a597ede617f7bb5aa155492f4dd2f14eab94c4b209797", 0x51}], 0x3}, 0x20000004) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='devices.list\x00', 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3cc7c2a5, 0x3, 0x40, 0x1204, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x7}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000400000000000000050000009500000000000000950000000000000000b7050006000000852000000300000018130000", @ANYRES32, @ANYBLOB="00000800000000006d72ffffffffffff9500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x7f, 0x83, &(0x7f0000000400)=""/131, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r0, r1, r2, r3, r4]}, 0x80) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000007c0)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="c78422d2d9c285bb7c577cbe4f53bbcffb34ccea252413c4f9f043e25f092e01b1b7eb", 0x23}, {&(0x7f00000000c0)="fe73e29cc522297675e085998cb14d865c90b68c56e73819e933a7bf499303607cd030bb84cfaca49c614cd582f946f99d4fca0bb266264c0eb21422487be0232d87e0a12caccc5fe21e2ca8f8f156f8f6f25ffb665884ddd40a9a15cd0926cd94e29fd0be18e0aae4779fac095db30ef73b2771eec1866d95182e58d2109e2b5a6dd67d9c5873f732b5a0c71962c6a2f09da9636bbbbab3812218000b24f1625c101f54c813ebfc25785d493125bae15dcd3f4654a3ebc4f4df141a14d59d91adf26513839953763fe4f73c088ff1fbd412057c75386a7c7786361021877a380bc3283e01600198399cab19d54866d67dccaf7e89062b8a9eb316831ab7", 0xfe}, {&(0x7f00000001c0)="10418cd4f93dd36f9e10e10fbfd05e5ccbf1eb140fd4687823a794eab8ce17d483c1a752467406dbdc0522974dd0669babc737fe504e1a4449e83a597ede617f7bb5aa155492f4dd2f14eab94c4b209797", 0x51}], 0x3}, 0x20000004) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='devices.list\x00', 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3cc7c2a5, 0x3, 0x40, 0x1204, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x7}, 0x48) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000400000000000000050000009500000000000000950000000000000000b7050006000000852000000300000018130000", @ANYRES32, @ANYBLOB="00000800000000006d72ffffffffffff9500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x7f, 0x83, &(0x7f0000000400)=""/131, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r0, r1, r2, r3, r4]}, 0x80) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000007c0)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup(r5, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) (async) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x8000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xc000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf344675798") 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x10000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 5: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x200000000, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc") 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x15000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x285, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x200000000, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25}, 0x10) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x200000000, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x20000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x286, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)='\n') 11:06:18 executing program 5: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x200000000, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25}, 0x10) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x200000000, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x2d030000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x32030000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)='\n') 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x287, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x16, 0x0, 0xff, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)='\n') 11:06:18 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x16, 0x0, 0xff, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x40000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x48000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x16, 0x0, 0xff, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x49010000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x8}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x1, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1]}, 0x80) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4a000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc") 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x8}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x1, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1]}, 0x80) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) (async) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x54000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x54020000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (rerun: 32) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x8}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x1, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1]}, 0x80) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x5a030000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)='\n') 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x64030000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x6a020000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x290, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x76020000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x7e020000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x291, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x89000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x292, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000025c0)={r1, r3, 0x2}, 0x10) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) recvmsg$unix(r2, &(0x7f0000002580)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000002340)=""/252, 0xfc}, {&(0x7f0000000280)=""/41, 0x29}], 0x6, &(0x7f00000024c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x143) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x81, 0x9, 0xc1, 0x26, 0x0, 0x80000000, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x8001, 0x6e4}, 0x84300, 0x828, 0x4, 0x0, 0x5, 0x1, 0x400, 0x0, 0x2, 0x0, 0x3}, r1, 0x6, r0, 0x1) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r1, 0x4) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x95000000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x293, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000025c0)={r1, r3, 0x2}, 0x10) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) recvmsg$unix(r2, &(0x7f0000002580)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000002340)=""/252, 0xfc}, {&(0x7f0000000280)=""/41, 0x29}], 0x6, &(0x7f00000024c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x143) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x81, 0x9, 0xc1, 0x26, 0x0, 0x80000000, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x8001, 0x6e4}, 0x84300, 0x828, 0x4, 0x0, 0x5, 0x1, 0x400, 0x0, 0x2, 0x0, 0x3}, r1, 0x6, r0, 0x1) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r1, 0x4) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x96020000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:18 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x294, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (rerun: 64) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000025c0)={r1, r3, 0x2}, 0x10) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) recvmsg$unix(r2, &(0x7f0000002580)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000002340)=""/252, 0xfc}, {&(0x7f0000000280)=""/41, 0x29}], 0x6, &(0x7f00000024c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x143) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x81, 0x9, 0xc1, 0x26, 0x0, 0x80000000, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x8001, 0x6e4}, 0x84300, 0x828, 0x4, 0x0, 0x5, 0x1, 0x400, 0x0, 0x2, 0x0, 0x3}, r1, 0x6, r0, 0x1) (async, rerun: 64) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r1, 0x4) (rerun: 64) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xc4030000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x295, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:18 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x92, 0x7f, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x1}, 0x844, 0x6, 0x4, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7058d335, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1ff) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xc8030000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:18 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x92, 0x7f, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x1}, 0x844, 0x6, 0x4, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7058d335, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x0) (async) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1ff) 11:06:18 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x297, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x92, 0x7f, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x1}, 0x844, 0x6, 0x4, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7058d335, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1ff) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x92, 0x7f, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x1}, 0x844, 0x6, 0x4, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7058d335, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x0) (async) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1ff) (async) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xd0030000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xdc030000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000040)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0xffff7fff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) 11:06:18 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x299, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xde030000, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000040)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0xffff7fff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) 11:06:18 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:18 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:18 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xfeffffff, 0xffffffffffffffff, 0x0) 11:06:18 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:19 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000040)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0xffff7fff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'veth0_to_hsr\x00'}) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffff8000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xfffffffe, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/122) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:19 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x200000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/122) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/122) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x800000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/122) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x1000001000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='##\x00') 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x2000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='##\x00') perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='##\x00') (async) 11:06:19 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='##\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='##\x00') 11:06:19 executing program 4: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, r0, 0x8) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x2000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, r0, 0x8) 11:06:19 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) getpid() r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='#\'+%{#&}\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='svcrdma_decode_rseg\x00'}, 0x10) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='#\'+%{#&}\x00'}, 0x30) 11:06:19 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, r0, 0x8) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x10000010000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) getpid() r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='#\'+%{#&}\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='svcrdma_decode_rseg\x00'}, 0x10) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='#\'+%{#&}\x00'}, 0x30) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) getpid() (async) getpid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='#\'+%{#&}\x00'}, 0x30) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='svcrdma_decode_rseg\x00'}, 0x10) (async) gettid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='#\'+%{#&}\x00'}, 0x30) (async) 11:06:19 executing program 4: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, r0, 0x8) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 5: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) getpid() (async) getpid() r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='#\'+%{#&}\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='#\'+%{#&}\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='svcrdma_decode_rseg\x00'}, 0x10) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='#\'+%{#&}\x00'}, 0x30) 11:06:19 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200800000, 0x0, 0x6, 0xe0000000000, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x40000100000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 0: syz_clone(0x10001000, 0x0, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:19 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200800000, 0x0, 0x6, 0xe0000000000, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: syz_clone(0x10001000, 0x0, 0x0, &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:19 executing program 4: perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x80ffff00000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200800000, 0x0, 0x6, 0xe0000000000, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x6, 0x1, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1, 0x5, 0x6, 0x4, 0xb4, 0x0, 0x8, 0x0, 0x80000, 0x0, 0x8}) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x100000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 0: perf_event_open(&(0x7f0000003600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0xb) 11:06:19 executing program 2: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) mkdirat$cgroup(r2, &(0x7f0000003540)='syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) syz_clone(0x10001000, &(0x7f0000003900)="ec8dec2c7bbe1494bf94122cc84eedd6869bd9575f3075a7c6cf32c336173c18a5533b2c50823264b10a9640d002134d7e628d5753066e98a94845cc5f6c5b17c961224e3d8706da2b7a16e1af9182abe61908b8e75f94d720c06aeb2f14efc6f18be3baa2200977fe6b59a249360796d6b2899374014d012ab56885d532631242e527494cb5e1a00592236a922d9e042c5d6b27f860ca8ccefc2b4d8b3957ab626ca1adedac2a1a2ec932ea7854af721ea57cd6e93bc209c18e7de8a03e19d0b2202b0253e195b57355b53369064afd43eb21c4c591c956", 0xd8, &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") 11:06:19 executing program 4: perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x6, 0x1, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1, 0x5, 0x6, 0x4, 0xb4, 0x0, 0x8, 0x0, 0x80000, 0x0, 0x8}) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x200000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x4, 0x6, 0x1, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1, 0x5, 0x6, 0x4, 0xb4, 0x0, 0x8, 0x0, 0x80000, 0x0, 0x8}) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x41, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x300000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 0: perf_event_open(&(0x7f0000003600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0xb) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: perf_event_open(&(0x7f0000003600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f00000035c0), 0x1}, 0x210, 0x7, 0x0, 0x6, 0x5, 0xf0b4, 0x9, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0xb) 11:06:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x6, 0x1ff, 0x3, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xf}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) write$cgroup_type(r1, &(0x7f0000000180), 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000000)="9b1b8867bd1e38bf49d0e20c4c3f4423470b9fc0cdf851090025ea98c9e7469e55ee176f1d1965f033b3957e848e23826610cc10ed58838195be667cf0bd0d9de154a13d75cc45076de3dd1d3a460c6285dc29d140e715366db19cf8e10b95464ab3e482756d33dc7b76d29a883e8fbfa45338221b09eb8343e9bb36ba1f2c324045d4321392674dba918719d4ff810707758b9180c9cc365cdc70cbaf4b00922a4bfacdd37fc2fe00461eeade18ae5fd51cc0d1d730edd2043946183d", &(0x7f00000000c0)=""/94, &(0x7f0000000480)="1ec9bc0860fc7fae9954914e1af18b4ae3c36826e6bc942ef0cf4ea110dd7d0127fa8ca2b6f398cdb55be27593eaee8228e30e5f09a6240b95bfe2b7253789e324913163944cd3781cb318f739fde73720e3b3fcce3bc09a92b59998890eb15bf9310717321c966c487ed471115ad79e906f8565e0556187f70099a7815082edc206d775a54a264b8b80546e54361af7cd04f265c6d3fa37ac90256eb9832092aa3420819d4f6825edd11707b88ec799ab4f9c7241417362f65be5f490f6897aae9ea592e6043f6b2e359963871f641caa", &(0x7f0000000340)="6925963394e8967768b5290f85dff50403dcbecbaae8f46215ba29909a63823f68392a0c709fb4fec38a965350eb40ed99882c9e81dd9dfaafb10d09b2f3f9978446c8b15a439053bb1a1607abd04a002f2bda4cce1da7eb5ad9520dd86f07fd133fb2bac1e43684ed2ba988ffad1f47cad5d940b342511caaf997f22c887c54924d4412e77cf114fa8fb89c330e44869d45843e9872fcd5607b472df055f9877974cce76c3baeb198a8dfebf39f6a251af6282c3faca5dc3e61dd8c0d6ea6b4a8f8b4", 0xc143, r0, 0x4}, 0x38) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x400000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x7, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNSETLINK(r1, 0x400454cd, 0x108) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{0x6, 0x4, 0x2, 0x20}, {0x1, 0x3f, 0x40, 0x80000000}, {0x68, 0x3f, 0x7, 0x7}, {0x8, 0x1, 0x40, 0x200}, {0x8001, 0x9, 0x40, 0xeb}, {0x2, 0x3f, 0x9, 0x2}, {0xfffc, 0x3f, 0x0, 0xc}, {0x8, 0x6, 0x2, 0x2}, {0xc42, 0x1, 0xff, 0x52557ece}, {0x80, 0x70, 0x40}]}) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x700000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x5, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x6, 0x1ff, 0x3, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xf}, 0x48) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) write$cgroup_type(r1, &(0x7f0000000180), 0x9) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000000)="9b1b8867bd1e38bf49d0e20c4c3f4423470b9fc0cdf851090025ea98c9e7469e55ee176f1d1965f033b3957e848e23826610cc10ed58838195be667cf0bd0d9de154a13d75cc45076de3dd1d3a460c6285dc29d140e715366db19cf8e10b95464ab3e482756d33dc7b76d29a883e8fbfa45338221b09eb8343e9bb36ba1f2c324045d4321392674dba918719d4ff810707758b9180c9cc365cdc70cbaf4b00922a4bfacdd37fc2fe00461eeade18ae5fd51cc0d1d730edd2043946183d", &(0x7f00000000c0)=""/94, &(0x7f0000000480)="1ec9bc0860fc7fae9954914e1af18b4ae3c36826e6bc942ef0cf4ea110dd7d0127fa8ca2b6f398cdb55be27593eaee8228e30e5f09a6240b95bfe2b7253789e324913163944cd3781cb318f739fde73720e3b3fcce3bc09a92b59998890eb15bf9310717321c966c487ed471115ad79e906f8565e0556187f70099a7815082edc206d775a54a264b8b80546e54361af7cd04f265c6d3fa37ac90256eb9832092aa3420819d4f6825edd11707b88ec799ab4f9c7241417362f65be5f490f6897aae9ea592e6043f6b2e359963871f641caa", &(0x7f0000000340)="6925963394e8967768b5290f85dff50403dcbecbaae8f46215ba29909a63823f68392a0c709fb4fec38a965350eb40ed99882c9e81dd9dfaafb10d09b2f3f9978446c8b15a439053bb1a1607abd04a002f2bda4cce1da7eb5ad9520dd86f07fd133fb2bac1e43684ed2ba988ffad1f47cad5d940b342511caaf997f22c887c54924d4412e77cf114fa8fb89c330e44869d45843e9872fcd5607b472df055f9877974cce76c3baeb198a8dfebf39f6a251af6282c3faca5dc3e61dd8c0d6ea6b4a8f8b4", 0xc143, r0, 0x4}, 0x38) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) mkdirat$cgroup(r2, &(0x7f0000003540)='syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)) r4 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r5}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, 0x0) r7 = syz_clone(0x10001000, &(0x7f0000003900)="ec8dec2c7bbe1494bf94122cc84eedd6869bd9575f3075a7c6cf32c336173c18a5533b2c50823264b10a9640d002134d7e628d5753066e98a94845cc5f6c5b17c961224e3d8706da2b7a16e1af9182abe61908b8e75f94d720c06aeb2f14efc6f18be3baa2200977fe6b59a249360796d6b2899374014d012ab56885d532631242e527494cb5e1a00592236a922d9e042c5d6b27f860ca8ccefc2b4d8b3957ab626ca1adedac2a1a2ec932ea7854af721ea57cd6e93bc209c18e7de8a03e19d0b2202b0253e195b57355b53369064afd43eb21c4c591c956", 0xd8, &(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)="0a9393ba6f23cbe7f77c439ae4295ca9caffc38a0f292483a15f473d38eeb84b6b7b62fc8c3ed39cfb8b9592113bb4727cac0a9fcc0c735c105291062482f65fd7bcf3446757988d31455c2ff6d9b334cca0622a2c64c8960a9940d0db9e9e89b2150d098bb8877136360492593de8e0f6de13b6fec1398167dc15a7099f43849e295fa7c046f7ecfdda94c0e841") perf_event_open(&(0x7f0000003600)={0x1, 0x80, 0xff, 0xff, 0x8d, 0x0, 0x0, 0xa55, 0x9800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f00000035c0), 0x1}, 0x210, 0x7, 0x0, 0x6, 0x5, 0xf0b4, 0x9, 0x0, 0x4, 0x0, 0x8}, r7, 0x1, r3, 0xb) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000038c0)={'ip6gretap0\x00'}) recvmsg$unix(r6, &(0x7f0000003580)={&(0x7f00000001c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/142, 0x8e}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/90, 0x5a}], 0x6, &(0x7f0000003540)}, 0x40002041) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x6, 0x1ff, 0x3, 0x8, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0xf}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) write$cgroup_type(r1, &(0x7f0000000180), 0x9) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000000)="9b1b8867bd1e38bf49d0e20c4c3f4423470b9fc0cdf851090025ea98c9e7469e55ee176f1d1965f033b3957e848e23826610cc10ed58838195be667cf0bd0d9de154a13d75cc45076de3dd1d3a460c6285dc29d140e715366db19cf8e10b95464ab3e482756d33dc7b76d29a883e8fbfa45338221b09eb8343e9bb36ba1f2c324045d4321392674dba918719d4ff810707758b9180c9cc365cdc70cbaf4b00922a4bfacdd37fc2fe00461eeade18ae5fd51cc0d1d730edd2043946183d", &(0x7f00000000c0)=""/94, &(0x7f0000000480)="1ec9bc0860fc7fae9954914e1af18b4ae3c36826e6bc942ef0cf4ea110dd7d0127fa8ca2b6f398cdb55be27593eaee8228e30e5f09a6240b95bfe2b7253789e324913163944cd3781cb318f739fde73720e3b3fcce3bc09a92b59998890eb15bf9310717321c966c487ed471115ad79e906f8565e0556187f70099a7815082edc206d775a54a264b8b80546e54361af7cd04f265c6d3fa37ac90256eb9832092aa3420819d4f6825edd11707b88ec799ab4f9c7241417362f65be5f490f6897aae9ea592e6043f6b2e359963871f641caa", &(0x7f0000000340)="6925963394e8967768b5290f85dff50403dcbecbaae8f46215ba29909a63823f68392a0c709fb4fec38a965350eb40ed99882c9e81dd9dfaafb10d09b2f3f9978446c8b15a439053bb1a1607abd04a002f2bda4cce1da7eb5ad9520dd86f07fd133fb2bac1e43684ed2ba988ffad1f47cad5d940b342511caaf997f22c887c54924d4412e77cf114fa8fb89c330e44869d45843e9872fcd5607b472df055f9877974cce76c3baeb198a8dfebf39f6a251af6282c3faca5dc3e61dd8c0d6ea6b4a8f8b4", 0xc143, r0, 0x4}, 0x38) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x5, 0x3f, 0x2c, 0x40, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x5, 0x2ec400c}, 0xa02, 0x1, 0x5, 0x5, 0xffff, 0xea, 0x7f, 0x0, 0x5, 0x0, 0x2}) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x37, 0x4, 0x2, 0x2, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r1, r1, 0x15}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1000, 0x9, 0x5, 0x40, r2, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x9}, 0x48) r3 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x1, 0x0, 0x40000000, 0x0, 0x9e, 0xfffffffc}, 0xffffffffffffffff, 0x80000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x800000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) 11:06:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x80000000, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x80000000, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xc00000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:19 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x37, 0x4, 0x2, 0x2, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r1, r1, 0x15}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1000, 0x9, 0x5, 0x40, r2, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x9}, 0x48) r3 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x1, 0x0, 0x40000000, 0x0, 0x9e, 0xfffffffc}, 0xffffffffffffffff, 0x80000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x1000000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x37, 0x4, 0x2, 0x2, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r1, r1, 0x15}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1000, 0x9, 0x5, 0x40, r2, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x9}, 0x48) r3 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x1, 0x0, 0x40000000, 0x0, 0x9e, 0xfffffffc}, 0xffffffffffffffff, 0x80000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, 0x0) 11:06:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x80000000, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x37, 0x4, 0x2, 0x2, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r1, r1, 0x15}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1000, 0x9, 0x5, 0x40, r2, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x9}, 0x48) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x1, 0x0, 0x40000000, 0x0, 0x9e, 0xfffffffc}, 0xffffffffffffffff, 0x80000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x1500000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x15, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x15, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:19 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x37, 0x4, 0x2, 0x2, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r1, r1, 0x15}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1000, 0x9, 0x5, 0x40, r2, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x9}, 0x48) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x37, 0x4, 0x2, 0x2, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r1, r1, 0x15}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:19 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x15, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x2d03000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 0: close(0xffffffffffffffff) 11:06:19 executing program 0: close(0xffffffffffffffff) 11:06:19 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x37, 0x4, 0x2, 0x2, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:19 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3203000000000000, 0xffffffffffffffff, 0x0) 11:06:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:19 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 11:06:19 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:19 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x37, 0x4, 0x2, 0x2, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x4, 0x2, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:19 executing program 0: close(0xffffffffffffffff) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4000000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 11:06:20 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 0: r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 11:06:20 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4800000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 0: r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4901000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f00000000c0)="1bd7468ef07b33f33f376d8263969a3f2965ce3c4dd956202f5d3b66a11c347b77a28acf1c653e626c757da9b58015241ac35720f7cc85271b8d846caa9c64561d7e4292b5d26fe604eb55de2f7a0bef2dcc046678d39e6c45102ab5ee", &(0x7f0000000140)=""/72, &(0x7f00000001c0)="003d3e0ec4aaba718a9b936588458e584ec450741cc88dd9eeaaee855071aecabbb9f2e5da9e9610710bee342caefe9dbd2d74ded2ef1f38d51062458c0a33bc79985c6a62956a9bf545f325c0256e157890c364062de1887ae3358b11ca32089b19dc00739ffe372cb4376e56b6dcc83ba0791adc70ac190fb13020cc772128869fe1fe5f2ec4f879b93a1363332b495fda29376db041a2a7624138106f9cb73dc114ce722c7f91997baaea54d6d284fd0c2b28fb", &(0x7f0000000280)="7618c352794aeffa7d6bc07c6de328cb953d654db7bfdafb19d9eda032e8ac92c103fcd32bf2fd49b1e58f28b6cdc315f9092bf970f1c37a5cb0eee815b9", 0x3ff, 0x1}, 0x38) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r0, 0x22}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000400)=r1, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) openat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x68}, 0x48010) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r5, r6, 0x0, 0x4, 0x3}, 0x48) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000480)=r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'bond0\x00', 0x2e11}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000340)) 11:06:20 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f00000000c0)="1bd7468ef07b33f33f376d8263969a3f2965ce3c4dd956202f5d3b66a11c347b77a28acf1c653e626c757da9b58015241ac35720f7cc85271b8d846caa9c64561d7e4292b5d26fe604eb55de2f7a0bef2dcc046678d39e6c45102ab5ee", &(0x7f0000000140)=""/72, &(0x7f00000001c0)="003d3e0ec4aaba718a9b936588458e584ec450741cc88dd9eeaaee855071aecabbb9f2e5da9e9610710bee342caefe9dbd2d74ded2ef1f38d51062458c0a33bc79985c6a62956a9bf545f325c0256e157890c364062de1887ae3358b11ca32089b19dc00739ffe372cb4376e56b6dcc83ba0791adc70ac190fb13020cc772128869fe1fe5f2ec4f879b93a1363332b495fda29376db041a2a7624138106f9cb73dc114ce722c7f91997baaea54d6d284fd0c2b28fb", &(0x7f0000000280)="7618c352794aeffa7d6bc07c6de328cb953d654db7bfdafb19d9eda032e8ac92c103fcd32bf2fd49b1e58f28b6cdc315f9092bf970f1c37a5cb0eee815b9", 0x3ff, 0x1}, 0x38) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r0, 0x22}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000400)=r1, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) openat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x68}, 0x48010) (async, rerun: 64) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r5, r6, 0x0, 0x4, 0x3}, 0x48) (async, rerun: 32) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000480)=r5) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'bond0\x00', 0x2e11}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000340)) 11:06:20 executing program 0: r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4a00000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 5: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f00000000c0)="1bd7468ef07b33f33f376d8263969a3f2965ce3c4dd956202f5d3b66a11c347b77a28acf1c653e626c757da9b58015241ac35720f7cc85271b8d846caa9c64561d7e4292b5d26fe604eb55de2f7a0bef2dcc046678d39e6c45102ab5ee", &(0x7f0000000140)=""/72, &(0x7f00000001c0)="003d3e0ec4aaba718a9b936588458e584ec450741cc88dd9eeaaee855071aecabbb9f2e5da9e9610710bee342caefe9dbd2d74ded2ef1f38d51062458c0a33bc79985c6a62956a9bf545f325c0256e157890c364062de1887ae3358b11ca32089b19dc00739ffe372cb4376e56b6dcc83ba0791adc70ac190fb13020cc772128869fe1fe5f2ec4f879b93a1363332b495fda29376db041a2a7624138106f9cb73dc114ce722c7f91997baaea54d6d284fd0c2b28fb", &(0x7f0000000280)="7618c352794aeffa7d6bc07c6de328cb953d654db7bfdafb19d9eda032e8ac92c103fcd32bf2fd49b1e58f28b6cdc315f9092bf970f1c37a5cb0eee815b9", 0x3ff, 0x1}, 0x38) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r0, 0x22}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000400)=r1, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) openat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x68}, 0x48010) (async) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x68}, 0x48010) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1, &(0x7f0000000040)=@raw=[@exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = openat$cgroup_ro(r2, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r5, r6, 0x0, 0x4, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r5, r6, 0x0, 0x4, 0x3}, 0x48) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000480)=r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'bond0\x00', 0x2e11}) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000340)) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 11:06:20 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x60, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x5400000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x60, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x5402000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:06:20 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x60, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x5a03000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x6403000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) (async) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) (async) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x6a02000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) (async) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) 11:06:20 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x9, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xd4, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x7602000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x602000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) socketpair(0x21, 0x0, 0x0, &(0x7f0000000100)) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x9) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x5, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x400, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 5: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x602000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) socketpair(0x21, 0x0, 0x0, &(0x7f0000000100)) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x9) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x5, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) 11:06:20 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x7e02000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x602000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async, rerun: 64) socketpair(0x21, 0x0, 0x0, &(0x7f0000000100)) (rerun: 64) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x9) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x5, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) 11:06:20 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x8900000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) (async) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x48) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x9500000000000000, 0xffffffffffffffff, 0x0) [ 1786.630676][ T30] audit: type=1400 audit(1689332780.494:131): avc: denied { sys_admin } for pid=15728 comm="syz-executor.5" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x9602000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xc403000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xc803000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x48) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xd003000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000a00)='THAWED\x00', 0x7) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r0, r1, 0x0, 0x4, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000005c0)=[{0xfffffffffffffffd}, {&(0x7f0000000080)="491f8986a0a217ffd2b8a921aad37d3026255d2ed36c3b697787d9f7766346731017478bb6ab2833717e6966ee2f05c7863364ba88e60c8841717c944b23af3e6265bf889fb618ea0a08f66becaf91c335a4d4eba322acaf8146f7c304cadcc53432a73b5e46264f6472b8572dbe433a78f62e4e0ad4b60164547de5a4d4a1098e06de91ce05fc9389e8fe577acb17c64dbe87ed00f4114359b3d7e2b3f808dae4d03b1e03a1ed66756783169589661303da93ffb9e2b3990d38e030232166bcd01121cc127bb5d960cfda5db3140056515e0659eb0037525d8b7c8b759e35fcf295103185a3c6cdbcc58af47a5d0879390369b2d0f3", 0xf6}, {&(0x7f0000000180)="a9b6bc5eaeac76dcf459183d06fb55c85cece4e12eeac9fcfb8a90f54c40cb4509fbcf6bfa47", 0x26}, {&(0x7f00000001c0)="f725017a924b6ac86b8f8acda00c727f3f08d999bec1e8f25312d073ca12a0255f703d58ebfe7dd0dfcdf91ec491df900b771b2330200c51ca775d2f6fa1f078f7d8d529135bc609a7a846dcff1fc2", 0x4f}, {&(0x7f0000000340)="6dc319be3320465800be6a6eaadfa891d96bed03f22188f475b1288652a2c7ad711af4764d02105e62622b4a36ce159f39a1800355ee3e6aab8e25fd786bb9b1453c69d473365afd6cd6c7aab08c905ade21d838cdc9fe643198ad21e9363d31d8b7247ccdc2d014fa1b5ce171c1df141604fc32d4aa02c39cb8413d905b7817c893953df9", 0x85}, {&(0x7f0000000400)="e6f25810886a89158f483eb81b83bc3e6de76b6ebd625729bc5a8662fdc1cfe977e11e45dd8a198a55fd2ba5e9521cf3e31724106ebb95634dc8195c62d08846df3e2c6b922fda9428222d5efc25582fd744e522c1d63fcf7ad3c62c827e3937f50d150db16916ac1a332303d8b573744adb6095c64da6ca4410938ae39f001d0b8c50103709c8a43196f78a3c9d8635880585f0a10f9a3177e5f32e756fb6d41825ef8aeb122a67648905fe7f436efd0df32560ee0bbab9c1e650014a4db242348854592f20a718f86b8cce472c8d88bcaf113fa0dfdb9a2e95233c8c4baea339d3a23c28c7c80c36d54aad64cb194be012e2aa9ff9aedf08284756e6", 0xfd}, {&(0x7f0000000500)="bba492250ecc797bb9b6f90ba47cbb6a864c065cea1b6942f743e24cf0fbb4df60d3a43c7fde2e6aa57134e732d71f83fe77376fa4e4e3058b8d4f883165dd9291191417a57eec1a061396d522ecc503a3e7b7666efce2aa875ba75407b3e1b7dd84bac2161aef7cd675298f896e621a65e0d711093bf90bf85afe680cd484de6f91f4dbe5bd72a845d75bfd534e2f8aebac99c3907611a13eef58e07c90af57a853172615017fd88963e470ff543daff2dcb7ce1a", 0xb5}, {&(0x7f0000000240)="8a95aa115049bbcb2c7d9416d9e5e38fe2d541160bf1f5f81f34a716961da514dc1129c0ee8d848e46271dbc1f4870b4061b99165e153f23546259f5def07539262b4b97af74", 0x46}], 0x8, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @empty, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @broadcast}}}], 0x40}, 0x4000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffc01, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xdc03000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000a00)='THAWED\x00', 0x7) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r0, r1, 0x0, 0x4, 0x3}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000005c0)=[{0xfffffffffffffffd}, {&(0x7f0000000080)="491f8986a0a217ffd2b8a921aad37d3026255d2ed36c3b697787d9f7766346731017478bb6ab2833717e6966ee2f05c7863364ba88e60c8841717c944b23af3e6265bf889fb618ea0a08f66becaf91c335a4d4eba322acaf8146f7c304cadcc53432a73b5e46264f6472b8572dbe433a78f62e4e0ad4b60164547de5a4d4a1098e06de91ce05fc9389e8fe577acb17c64dbe87ed00f4114359b3d7e2b3f808dae4d03b1e03a1ed66756783169589661303da93ffb9e2b3990d38e030232166bcd01121cc127bb5d960cfda5db3140056515e0659eb0037525d8b7c8b759e35fcf295103185a3c6cdbcc58af47a5d0879390369b2d0f3", 0xf6}, {&(0x7f0000000180)="a9b6bc5eaeac76dcf459183d06fb55c85cece4e12eeac9fcfb8a90f54c40cb4509fbcf6bfa47", 0x26}, {&(0x7f00000001c0)="f725017a924b6ac86b8f8acda00c727f3f08d999bec1e8f25312d073ca12a0255f703d58ebfe7dd0dfcdf91ec491df900b771b2330200c51ca775d2f6fa1f078f7d8d529135bc609a7a846dcff1fc2", 0x4f}, {&(0x7f0000000340)="6dc319be3320465800be6a6eaadfa891d96bed03f22188f475b1288652a2c7ad711af4764d02105e62622b4a36ce159f39a1800355ee3e6aab8e25fd786bb9b1453c69d473365afd6cd6c7aab08c905ade21d838cdc9fe643198ad21e9363d31d8b7247ccdc2d014fa1b5ce171c1df141604fc32d4aa02c39cb8413d905b7817c893953df9", 0x85}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000500)="bba492250ecc797bb9b6f90ba47cbb6a864c065cea1b6942f743e24cf0fbb4df60d3a43c7fde2e6aa57134e732d71f83fe77376fa4e4e3058b8d4f883165dd9291191417a57eec1a061396d522ecc503a3e7b7666efce2aa875ba75407b3e1b7dd84bac2161aef7cd675298f896e621a65e0d711093bf90bf85afe680cd484de6f91f4dbe5bd72a845d75bfd534e2f8aebac99c3907611a13eef58e07c90af57a853172615017fd88963e470ff543daff2dcb7ce1a", 0xb5}, {&(0x7f0000000240)="8a95aa115049bbcb2c7d9416d9e5e38fe2d541160bf1f5f81f34a716961da514dc1129c0ee8d848e46271dbc1f4870b4061b99165e153f23546259f5def07539262b4b97af74", 0x46}], 0x8, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @empty, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @broadcast}}}], 0x40}, 0x4000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xde03000000000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xfeffffff00000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:20 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffff00000000, 0xffffffffffffffff, 0x0) 11:06:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000a00)='THAWED\x00', 0x7) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r0, r1, 0x0, 0x4, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000005c0)=[{0xfffffffffffffffd}, {&(0x7f0000000080)="491f8986a0a217ffd2b8a921aad37d3026255d2ed36c3b697787d9f7766346731017478bb6ab2833717e6966ee2f05c7863364ba88e60c8841717c944b23af3e6265bf889fb618ea0a08f66becaf91c335a4d4eba322acaf8146f7c304cadcc53432a73b5e46264f6472b8572dbe433a78f62e4e0ad4b60164547de5a4d4a1098e06de91ce05fc9389e8fe577acb17c64dbe87ed00f4114359b3d7e2b3f808dae4d03b1e03a1ed66756783169589661303da93ffb9e2b3990d38e030232166bcd01121cc127bb5d960cfda5db3140056515e0659eb0037525d8b7c8b759e35fcf295103185a3c6cdbcc58af47a5d0879390369b2d0f3", 0xf6}, {&(0x7f0000000180)="a9b6bc5eaeac76dcf459183d06fb55c85cece4e12eeac9fcfb8a90f54c40cb4509fbcf6bfa47", 0x26}, {&(0x7f00000001c0)="f725017a924b6ac86b8f8acda00c727f3f08d999bec1e8f25312d073ca12a0255f703d58ebfe7dd0dfcdf91ec491df900b771b2330200c51ca775d2f6fa1f078f7d8d529135bc609a7a846dcff1fc2", 0x4f}, {&(0x7f0000000340)="6dc319be3320465800be6a6eaadfa891d96bed03f22188f475b1288652a2c7ad711af4764d02105e62622b4a36ce159f39a1800355ee3e6aab8e25fd786bb9b1453c69d473365afd6cd6c7aab08c905ade21d838cdc9fe643198ad21e9363d31d8b7247ccdc2d014fa1b5ce171c1df141604fc32d4aa02c39cb8413d905b7817c893953df9", 0x85}, {&(0x7f0000000400)="e6f25810886a89158f483eb81b83bc3e6de76b6ebd625729bc5a8662fdc1cfe977e11e45dd8a198a55fd2ba5e9521cf3e31724106ebb95634dc8195c62d08846df3e2c6b922fda9428222d5efc25582fd744e522c1d63fcf7ad3c62c827e3937f50d150db16916ac1a332303d8b573744adb6095c64da6ca4410938ae39f001d0b8c50103709c8a43196f78a3c9d8635880585f0a10f9a3177e5f32e756fb6d41825ef8aeb122a67648905fe7f436efd0df32560ee0bbab9c1e650014a4db242348854592f20a718f86b8cce472c8d88bcaf113fa0dfdb9a2e95233c8c4baea339d3a23c28c7c80c36d54aad64cb194be012e2aa9ff9aedf08284756e6", 0xfd}, {&(0x7f0000000500)="bba492250ecc797bb9b6f90ba47cbb6a864c065cea1b6942f743e24cf0fbb4df60d3a43c7fde2e6aa57134e732d71f83fe77376fa4e4e3058b8d4f883165dd9291191417a57eec1a061396d522ecc503a3e7b7666efce2aa875ba75407b3e1b7dd84bac2161aef7cd675298f896e621a65e0d711093bf90bf85afe680cd484de6f91f4dbe5bd72a845d75bfd534e2f8aebac99c3907611a13eef58e07c90af57a853172615017fd88963e470ff543daff2dcb7ce1a", 0xb5}, {&(0x7f0000000240)="8a95aa115049bbcb2c7d9416d9e5e38fe2d541160bf1f5f81f34a716961da514dc1129c0ee8d848e46271dbc1f4870b4061b99165e153f23546259f5def07539262b4b97af74", 0x46}], 0x8, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @empty, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @broadcast}}}], 0x40}, 0x4000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:21 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xac0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000060000000b00000005000004010000000200000005000066020000000d00000001000000080000000a00000000000000ff0700000000000004000000020000000000000004000000040000000e0000000000000700000000070000000000000a01000000050000000000000804000000002e5f615f00"], &(0x7f00000001c0)=""/29, 0x8a, 0x1d}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0x23, &(0x7f00000000c0)=""/35, 0x41100, 0x18, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x3, 0x7121}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x80, 0x3, 0x81, 0x1000, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xb}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r2, 0x0) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000060000000b00000005000004010000000200000005000066020000000d00000001000000080000000a00000000000000ff0700000000000004000000020000000000000004000000040000000e0000000000000700000000070000000000000a01000000050000000000000804000000002e5f615f00"], &(0x7f00000001c0)=""/29, 0x8a, 0x1d}, 0x20) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0x23, &(0x7f00000000c0)=""/35, 0x41100, 0x18, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x3, 0x7121}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1]}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x80, 0x3, 0x81, 0x1000, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xb}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r2, 0x0) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x10) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x15) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 0: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000060000000b00000005000004010000000200000005000066020000000d00000001000000080000000a00000000000000ff0700000000000004000000020000000000000004000000040000000e0000000000000700000000070000000000000a01000000050000000000000804000000002e5f615f00"], &(0x7f00000001c0)=""/29, 0x8a, 0x1d}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0x23, &(0x7f00000000c0)=""/35, 0x41100, 0x18, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x3, 0x7121}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x80, 0x3, 0x81, 0x1000, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xb}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x80, 0x3, 0x81, 0x1000, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xb}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r2, 0x0) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x48) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4a) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x8) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x54) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) 11:06:21 executing program 0: syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x89) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:21 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x4, 0xb3, 0x0, 0x0, 0x6, 0x2a045, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x591, 0x9}, 0x50a, 0x7fff, 0x9, 0x7, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x1, 0x4, 0x5, 0x3, 0x100, 0x1}, @ldst={0x0, 0x0, 0x6, 0x6, 0x5, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5b14}, @alu={0x7, 0x1, 0xfe91062e5c98fbf2, 0x1, 0x9, 0xc, 0x10}, @generic={0x1, 0x1, 0x9, 0x4, 0x7ff}]}, &(0x7f0000000200)='GPL\x00', 0xfff, 0x21, &(0x7f0000000240)=""/33, 0x41000, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xfffffffe, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0xfffff29e, 0x8, 0x2, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="8520000003000000bb7a3ef328401ffa45235bec5acc832af96de8af56d500"/40], &(0x7f0000000480)='syzkaller\x00', 0x80, 0xef, &(0x7f00000004c0)=""/239, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xc, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={r1, r2, 0x4, r3}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200010000}, 0xffffffffffffffff, 0x0, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x521040, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/54) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x95) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x149) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 0: syz_clone(0x0, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x254) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x4, 0xb3, 0x0, 0x0, 0x6, 0x2a045, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x591, 0x9}, 0x50a, 0x7fff, 0x9, 0x7, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x1, 0x4, 0x5, 0x3, 0x100, 0x1}, @ldst={0x0, 0x0, 0x6, 0x6, 0x5, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5b14}, @alu={0x7, 0x1, 0xfe91062e5c98fbf2, 0x1, 0x9, 0xc, 0x10}, @generic={0x1, 0x1, 0x9, 0x4, 0x7ff}]}, &(0x7f0000000200)='GPL\x00', 0xfff, 0x21, &(0x7f0000000240)=""/33, 0x41000, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xfffffffe, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0xfffff29e, 0x8, 0x2, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="8520000003000000bb7a3ef328401ffa45235bec5acc832af96de8af56d500"/40], &(0x7f0000000480)='syzkaller\x00', 0x80, 0xef, &(0x7f00000004c0)=""/239, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xc, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={r1, r2, 0x4, r3}, 0x10) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200010000}, 0xffffffffffffffff, 0x0, r0, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (rerun: 32) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x521040, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/54) 11:06:21 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x26a) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 11:06:21 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x276) 11:06:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 11:06:22 executing program 0: syz_clone(0x0, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x27e) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 11:06:22 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x4, 0xb3, 0x0, 0x0, 0x6, 0x2a045, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x591, 0x9}, 0x50a, 0x7fff, 0x9, 0x7, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x1, 0x4, 0x5, 0x3, 0x100, 0x1}, @ldst={0x0, 0x0, 0x6, 0x6, 0x5, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5b14}, @alu={0x7, 0x1, 0xfe91062e5c98fbf2, 0x1, 0x9, 0xc, 0x10}, @generic={0x1, 0x1, 0x9, 0x4, 0x7ff}]}, &(0x7f0000000200)='GPL\x00', 0xfff, 0x21, &(0x7f0000000240)=""/33, 0x41000, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xfffffffe, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0xfffff29e, 0x8, 0x2, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="8520000003000000bb7a3ef328401ffa45235bec5acc832af96de8af56d500"/40], &(0x7f0000000480)='syzkaller\x00', 0x80, 0xef, &(0x7f00000004c0)=""/239, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xc, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={r1, r2, 0x4, r3}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200010000}, 0xffffffffffffffff, 0x0, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) (async) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000000)) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x521040, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000080)=""/54) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:06:22 executing program 2: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x296) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x300) 11:06:22 executing program 0: syz_clone(0x0, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 2: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x32d) 11:06:22 executing program 5: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x29, 0x1, r0}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000000c0)=""/103) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/28) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)={0x1, 0x3, [@empty, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x332) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:22 executing program 0: syz_clone(0x30000000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x35a) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 2: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3f, 0x1, 0x1, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0x2, 0x10001, 0x4, 0x4, 0x2, 0x4, 0x0, 0x401, 0x0, 0x100000000}, r0, 0xc, r1, 0x2) 11:06:22 executing program 5: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x29, 0x1, r0}, 0x14) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000000c0)=""/103) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/28) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)={0x1, 0x3, [@empty, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x364) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3c4) 11:06:22 executing program 0: syz_clone(0x30000000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 5: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x29, 0x1, r0}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000000c0)=""/103) (async) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000000)=""/28) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)={0x1, 0x3, [@empty, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3c8) 11:06:22 executing program 2: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1}, 0x48) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3d0) 11:06:22 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1}, 0x48) 11:06:22 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3dc) 11:06:23 executing program 0: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:23 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3de) 11:06:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1}, 0x48) 11:06:23 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3ff) 11:06:23 executing program 2: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 11:06:23 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x700) 11:06:23 executing program 4: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4a00000000000000, 0xffffffffffffffff, 0x0) 11:06:23 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc00) 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1500) 11:06:23 executing program 0: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:23 executing program 4: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x4800000000000000, 0xffffffffffffffff, 0x0) 11:06:23 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3ff) 11:06:23 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2d03) 11:06:23 executing program 2: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3203) 11:06:23 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3ff) 11:06:23 executing program 4: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="050000000000000000f2ffffff0000000000000002000000"]) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='.%\\\x00') r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) close(r4) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) 11:06:23 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4000) 11:06:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) (fail_nth: 1) [ 1789.441895][T16168] FAULT_INJECTION: forcing a failure. [ 1789.441895][T16168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.482981][T16168] CPU: 1 PID: 16168 Comm: syz-executor.4 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1789.493431][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1789.503327][T16168] Call Trace: [ 1789.506446][T16168] [ 1789.509232][T16168] dump_stack_lvl+0x151/0x1b7 [ 1789.513747][T16168] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1789.519207][T16168] dump_stack+0x15/0x17 [ 1789.523197][T16168] should_fail+0x3c6/0x510 [ 1789.527456][T16168] should_fail_usercopy+0x1a/0x20 [ 1789.532307][T16168] _copy_from_user+0x20/0xd0 [ 1789.536823][T16168] __sys_bpf+0x1e9/0x760 [ 1789.540913][T16168] ? fput_many+0x160/0x1b0 [ 1789.545166][T16168] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1789.550368][T16168] ? debug_smp_processor_id+0x17/0x20 [ 1789.555579][T16168] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1789.561471][T16168] __x64_sys_bpf+0x7c/0x90 [ 1789.565728][T16168] do_syscall_64+0x3d/0xb0 [ 1789.569979][T16168] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1789.575969][T16168] RIP: 0033:0x7f8720e38b29 [ 1789.580310][T16168] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1789.599750][T16168] RSP: 002b:00007f871fbbb0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1789.607995][T16168] RAX: ffffffffffffffda RBX: 00007f8720f57f80 RCX: 00007f8720e38b29 [ 1789.615895][T16168] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 0000000000000000 [ 1789.623702][T16168] RBP: 00007f871fbbb120 R08: 0000000000000000 R09: 0000000000000000 [ 1789.631524][T16168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.639325][T16168] R13: 000000000000000b R14: 00007f8720f57f80 R15: 00007ffc67f32168 [ 1789.647142][T16168] 11:06:23 executing program 2: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4800) 11:06:23 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) 11:06:23 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:23 executing program 0: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11:06:23 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:23 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4901) 11:06:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) (fail_nth: 2) 11:06:23 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) 11:06:23 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4a00) 11:06:23 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1789.763481][T16186] FAULT_INJECTION: forcing a failure. [ 1789.763481][T16186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.813027][T16186] CPU: 1 PID: 16186 Comm: syz-executor.4 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1789.823565][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1789.833474][T16186] Call Trace: [ 1789.836582][T16186] [ 1789.839361][T16186] dump_stack_lvl+0x151/0x1b7 [ 1789.843875][T16186] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1789.849342][T16186] ? kstrtouint_from_user+0x20a/0x2a0 [ 1789.854551][T16186] dump_stack+0x15/0x17 [ 1789.858547][T16186] should_fail+0x3c6/0x510 11:06:23 executing program 2: syz_clone(0x30000000, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:23 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x6, 0x39, 0x9, 0x0, 0xffff800000000000, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x400, 0xb0, 0x200, 0x7, 0x9, 0x229b73aa, 0x7f, 0x0, 0xfed2, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0xb) 11:06:23 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1789.862797][T16186] should_fail_usercopy+0x1a/0x20 [ 1789.867659][T16186] _copy_to_user+0x20/0x90 [ 1789.871911][T16186] simple_read_from_buffer+0xc7/0x150 [ 1789.877118][T16186] proc_fail_nth_read+0x1a3/0x210 [ 1789.881987][T16186] ? proc_fault_inject_write+0x390/0x390 [ 1789.887445][T16186] ? fsnotify_perm+0x470/0x5d0 [ 1789.892045][T16186] ? security_file_permission+0x86/0xb0 [ 1789.897429][T16186] ? proc_fault_inject_write+0x390/0x390 [ 1789.902897][T16186] vfs_read+0x27d/0xd40 [ 1789.906887][T16186] ? kernel_read+0x1f0/0x1f0 11:06:23 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x6, 0x39, 0x9, 0x0, 0xffff800000000000, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x400, 0xb0, 0x200, 0x7, 0x9, 0x229b73aa, 0x7f, 0x0, 0xfed2, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0xb) [ 1789.911326][T16186] ? __kasan_check_write+0x14/0x20 [ 1789.916272][T16186] ? mutex_lock+0xb6/0x1e0 [ 1789.920520][T16186] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1789.927025][T16186] ? __fdget_pos+0x278/0x310 [ 1789.931449][T16186] ? ksys_read+0x77/0x2c0 [ 1789.935616][T16186] ksys_read+0x199/0x2c0 [ 1789.939704][T16186] ? vfs_write+0x1110/0x1110 [ 1789.944121][T16186] ? debug_smp_processor_id+0x17/0x20 [ 1789.949332][T16186] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1789.955240][T16186] __x64_sys_read+0x7b/0x90 [ 1789.959693][T16186] do_syscall_64+0x3d/0xb0 [ 1789.963914][T16186] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1789.969642][T16186] RIP: 0033:0x7f8720e377cc [ 1789.974141][T16186] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1789.993592][T16186] RSP: 002b:00007f871fbbb0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1790.001840][T16186] RAX: ffffffffffffffda RBX: 00007f8720f57f80 RCX: 00007f8720e377cc [ 1790.009642][T16186] RDX: 000000000000000f RSI: 00007f871fbbb130 RDI: 0000000000000003 [ 1790.017452][T16186] RBP: 00007f871fbbb120 R08: 0000000000000000 R09: 0000000000000000 [ 1790.025272][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.033076][T16186] R13: 000000000000000b R14: 00007f8720f57f80 R15: 00007ffc67f32168 [ 1790.040900][T16186] [ 1790.114619][T16210] FAULT_INJECTION: forcing a failure. [ 1790.114619][T16210] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.250073][T16210] CPU: 0 PID: 16210 Comm: syz-executor.0 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1790.260517][T16210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1790.270413][T16210] Call Trace: [ 1790.273532][T16210] [ 1790.276307][T16210] dump_stack_lvl+0x151/0x1b7 [ 1790.280824][T16210] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1790.286296][T16210] dump_stack+0x15/0x17 [ 1790.290284][T16210] should_fail+0x3c6/0x510 [ 1790.294539][T16210] __should_failslab+0xa4/0xe0 [ 1790.299221][T16210] ? dup_task_struct+0x53/0xc60 [ 1790.303911][T16210] should_failslab+0x9/0x20 [ 1790.308251][T16210] slab_pre_alloc_hook+0x37/0xd0 [ 1790.313031][T16210] ? dup_task_struct+0x53/0xc60 [ 1790.317793][T16210] kmem_cache_alloc+0x44/0x200 [ 1790.322391][T16210] dup_task_struct+0x53/0xc60 [ 1790.326930][T16210] ? __kasan_check_write+0x14/0x20 [ 1790.331856][T16210] copy_process+0x5c4/0x3260 [ 1790.336927][T16210] ? __kasan_check_write+0x14/0x20 [ 1790.341833][T16210] ? proc_fail_nth_write+0x20b/0x290 [ 1790.346953][T16210] ? selinux_file_permission+0x2c4/0x570 [ 1790.352422][T16210] ? fsnotify_perm+0x6a/0x5d0 [ 1790.356936][T16210] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1790.362415][T16210] ? vfs_write+0x9ec/0x1110 [ 1790.366744][T16210] kernel_clone+0x21e/0x9e0 [ 1790.371082][T16210] ? file_end_write+0x1c0/0x1c0 [ 1790.375768][T16210] ? create_io_thread+0x1e0/0x1e0 [ 1790.380631][T16210] ? mutex_unlock+0xb2/0x1b0 [ 1790.385054][T16210] ? __mutex_lock_slowpath+0x10/0x10 [ 1790.390380][T16210] __x64_sys_clone+0x23f/0x290 [ 1790.395240][T16210] ? __do_sys_vfork+0x130/0x130 [ 1790.399992][T16210] ? ksys_write+0x260/0x2c0 [ 1790.404501][T16210] ? debug_smp_processor_id+0x17/0x20 [ 1790.409709][T16210] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1790.415611][T16210] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1790.421110][T16210] do_syscall_64+0x3d/0xb0 [ 1790.425334][T16210] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1790.431062][T16210] RIP: 0033:0x7f100a3ddb29 [ 1790.435350][T16210] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1790.454875][T16210] RSP: 002b:00007f1009160078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1790.463198][T16210] RAX: ffffffffffffffda RBX: 00007f100a4fcf80 RCX: 00007f100a3ddb29 [ 1790.471109][T16210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1790.478921][T16210] RBP: 00007f1009160120 R08: 0000000000000000 R09: 0000000000000000 [ 1790.486733][T16210] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1790.494554][T16210] R13: 000000000000000b R14: 00007f100a4fcf80 R15: 00007ffd321e68b8 [ 1790.502361][T16210] 11:06:24 executing program 0: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 11:06:24 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x78, 0x6, 0x39, 0x9, 0x0, 0xffff800000000000, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xfffffffffffffffd, 0x3}, 0x400, 0xb0, 0x200, 0x7, 0x9, 0x229b73aa, 0x7f, 0x0, 0xfed2, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0xb) 11:06:24 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5400) 11:06:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:24 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:24 executing program 2: syz_clone(0x0, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:24 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:24 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000, 0x4}, 0x0, 0x200000000, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:24 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:24 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5402) 11:06:24 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000, 0x4}, 0x0, 0x200000000, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:24 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1790.806948][T16232] FAULT_INJECTION: forcing a failure. [ 1790.806948][T16232] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.990073][T16232] CPU: 1 PID: 16232 Comm: syz-executor.0 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1791.000627][T16232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1791.010527][T16232] Call Trace: [ 1791.013643][T16232] [ 1791.016424][T16232] dump_stack_lvl+0x151/0x1b7 [ 1791.020936][T16232] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1791.026417][T16232] dump_stack+0x15/0x17 [ 1791.030395][T16232] should_fail+0x3c6/0x510 [ 1791.034656][T16232] __should_failslab+0xa4/0xe0 [ 1791.039264][T16232] ? prepare_creds+0x2f/0x6a0 [ 1791.043762][T16232] should_failslab+0x9/0x20 [ 1791.050970][T16232] slab_pre_alloc_hook+0x37/0xd0 [ 1791.055833][T16232] ? prepare_creds+0x2f/0x6a0 [ 1791.060455][T16232] kmem_cache_alloc+0x44/0x200 [ 1791.065026][T16232] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1791.070322][T16232] prepare_creds+0x2f/0x6a0 [ 1791.074663][T16232] copy_creds+0xf0/0x630 [ 1791.078739][T16232] ? dup_task_struct+0x7e6/0xc60 [ 1791.083518][T16232] copy_process+0x7c3/0x3260 [ 1791.087946][T16232] ? __kasan_check_write+0x14/0x20 [ 1791.092887][T16232] ? proc_fail_nth_write+0x20b/0x290 [ 1791.098008][T16232] ? selinux_file_permission+0x2c4/0x570 [ 1791.103478][T16232] ? fsnotify_perm+0x6a/0x5d0 [ 1791.107994][T16232] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1791.112940][T16232] ? vfs_write+0x9ec/0x1110 [ 1791.117288][T16232] kernel_clone+0x21e/0x9e0 [ 1791.121615][T16232] ? file_end_write+0x1c0/0x1c0 [ 1791.126306][T16232] ? create_io_thread+0x1e0/0x1e0 [ 1791.131163][T16232] ? mutex_unlock+0xb2/0x1b0 [ 1791.135600][T16232] ? __mutex_lock_slowpath+0x10/0x10 [ 1791.140716][T16232] __x64_sys_clone+0x23f/0x290 [ 1791.145313][T16232] ? __do_sys_vfork+0x130/0x130 [ 1791.150007][T16232] ? ksys_write+0x260/0x2c0 [ 1791.154343][T16232] ? debug_smp_processor_id+0x17/0x20 [ 1791.159547][T16232] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1791.165449][T16232] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1791.170917][T16232] do_syscall_64+0x3d/0xb0 [ 1791.175171][T16232] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1791.180898][T16232] RIP: 0033:0x7f100a3ddb29 [ 1791.185151][T16232] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1791.204596][T16232] RSP: 002b:00007f1009160078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1791.212838][T16232] RAX: ffffffffffffffda RBX: 00007f100a4fcf80 RCX: 00007f100a3ddb29 [ 1791.220651][T16232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1791.228461][T16232] RBP: 00007f1009160120 R08: 0000000000000000 R09: 0000000000000000 [ 1791.236272][T16232] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1791.244082][T16232] R13: 000000000000000b R14: 00007f100a4fcf80 R15: 00007ffd321e68b8 [ 1791.252003][T16232] 11:06:26 executing program 0: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:26 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:26 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5a03) 11:06:26 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:26 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000, 0x4}, 0x0, 0x200000000, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000, 0x4}, 0x0, 0x200000000, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) 11:06:26 executing program 2: syz_clone(0x0, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6403) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 4: bpf$MAP_CREATE(0x4, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 11:06:27 executing program 4: bpf$MAP_CREATE(0x5, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6a02) 11:06:27 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7602) 11:06:27 executing program 4: bpf$MAP_CREATE(0x6, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7e02) 11:06:27 executing program 2: syz_clone(0x0, &(0x7f00000000c0)="8970b340e17cdbf912cdc9f97edf0884a753f3acbcdfd8d69feceb05e10a2d1d16b1b230c9de919d706621115cc2bc97e825bcbe1ccb0a", 0x37, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 0: syz_clone(0x30000002, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:27 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 11:06:27 executing program 4: bpf$MAP_CREATE(0x7, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8900) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x1d}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x4}, 0x10) 11:06:27 executing program 4: bpf$MAP_CREATE(0x8, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9500) 11:06:27 executing program 4: bpf$MAP_CREATE(0x9, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 2: syz_clone(0x30000000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x1d}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x4}, 0x10) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9602) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 4: bpf$MAP_CREATE(0xa, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 0: syz_clone(0x30000004, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc403) 11:06:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x1d}, 0x10) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x4}, 0x10) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc803) 11:06:27 executing program 4: bpf$MAP_CREATE(0xb, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:27 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x1, 0x2, 0x8, 0x0, 0x8, 0x210, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x280, 0x8, 0x20, 0x8, 0x0, 0x7ff, 0x9, 0x0, 0x7, 0x0, 0x100}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x6) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd003) 11:06:27 executing program 4: bpf$MAP_CREATE(0xc, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 0: syz_clone(0x30000007, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xdc03) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x1, 0x2, 0x8, 0x0, 0x8, 0x210, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x280, 0x8, 0x20, 0x8, 0x0, 0x7ff, 0x9, 0x0, 0x7, 0x0, 0x100}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x6) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) 11:06:27 executing program 4: bpf$MAP_CREATE(0xd, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x1, 0x2, 0x8, 0x0, 0x8, 0x210, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x280, 0x8, 0x20, 0x8, 0x0, 0x7ff, 0x9, 0x0, 0x7, 0x0, 0x100}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x6) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_migrate\x00', 0x2, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xde03) 11:06:27 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000) 11:06:27 executing program 0: syz_clone(0x30000008, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:27 executing program 5: write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="c90e5223dd06bd420000"], 0xa) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'some', 0x20, 0x8, 0x20, 0x20}, 0x2f) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x233aa265f265eee9, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x14000, 0x200000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) 11:06:27 executing program 4: bpf$MAP_CREATE(0xf, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x40000) 11:06:27 executing program 5: write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="c90e5223dd06bd420000"], 0xa) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'some', 0x20, 0x8, 0x20, 0x20}, 0x2f) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) (async, rerun: 64) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 32) perf_event_open$cgroup(&(0x7f0000000000)={0x233aa265f265eee9, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x14000, 0x200000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async, rerun: 32) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x400000) 11:06:27 executing program 4: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x400001) 11:06:27 executing program 5: write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="c90e5223dd06bd420000"], 0xa) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'some', 0x20, 0x8, 0x20, 0x20}, 0x2f) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) (async, rerun: 32) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) (rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x233aa265f265eee9, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x14000, 0x200000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) 11:06:27 executing program 4: bpf$MAP_CREATE(0x11, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 0: syz_clone(0x30000009, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x80ffff) 11:06:27 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x10000000000, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0xad, 0x6, 0x5, 0x6, 0x0, 0xe9, 0x64050, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb5a8, 0x3, @perf_bp={&(0x7f0000000080), 0x1}, 0x8091, 0x4, 0xfffffffd, 0x9, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x14, 0x1, 0xfffffff7, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) 11:06:27 executing program 4: bpf$MAP_CREATE(0x12, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:27 executing program 0: syz_clone(0x3000000f, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:27 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:27 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1000000) 11:06:28 executing program 0: syz_clone(0x30000011, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:28 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x10000000000, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0xad, 0x6, 0x5, 0x6, 0x0, 0xe9, 0x64050, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb5a8, 0x3, @perf_bp={&(0x7f0000000080), 0x1}, 0x8091, 0x4, 0xfffffffd, 0x9, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x7}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x14, 0x1, 0xfffffff7, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) 11:06:28 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:28 executing program 4: bpf$MAP_CREATE(0x13, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:28 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1004000) 11:06:28 executing program 2: syz_clone(0x30000000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="41890263945377cae844a1e6e1ef22be690ab1a1c422172ff98071ce6749c68dbbf3c26f") 11:06:28 executing program 4: bpf$MAP_CREATE(0x14, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:28 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:28 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000, 0x0, 0x0, 0x10000000000, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0xad, 0x6, 0x5, 0x6, 0x0, 0xe9, 0x64050, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb5a8, 0x3, @perf_bp={&(0x7f0000000080), 0x1}, 0x8091, 0x4, 0xfffffffd, 0x9, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x14, 0x1, 0xfffffff7, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) 11:06:28 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000000) 11:06:28 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:28 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000) 11:06:28 executing program 0: syz_clone(0x30000041, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:28 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%:-(%\'\x00') 11:06:28 executing program 4: bpf$MAP_CREATE(0x15, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:28 executing program 4: bpf$MAP_CREATE(0x16, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:28 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:28 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11:06:28 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4000000) 11:06:28 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%:-(%\'\x00') 11:06:28 executing program 0: syz_clone(0x30000070, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:28 executing program 4: bpf$MAP_CREATE(0x17, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:28 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:28 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:28 executing program 4: bpf$MAP_CREATE(0x18, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:28 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%:-(%\'\x00') 11:06:28 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7000000) 11:06:28 executing program 0: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1794.590274][T16492] FAULT_INJECTION: forcing a failure. [ 1794.590274][T16492] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.643880][T16492] CPU: 0 PID: 16492 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1794.654317][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1794.664233][T16492] Call Trace: [ 1794.667337][T16492] [ 1794.670114][T16492] dump_stack_lvl+0x151/0x1b7 [ 1794.674637][T16492] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1794.680374][T16492] dump_stack+0x15/0x17 [ 1794.684360][T16492] should_fail+0x3c6/0x510 [ 1794.688607][T16492] __should_failslab+0xa4/0xe0 [ 1794.693224][T16492] ? dup_task_struct+0x53/0xc60 [ 1794.697896][T16492] should_failslab+0x9/0x20 [ 1794.702229][T16492] slab_pre_alloc_hook+0x37/0xd0 [ 1794.707002][T16492] ? dup_task_struct+0x53/0xc60 [ 1794.711691][T16492] kmem_cache_alloc+0x44/0x200 [ 1794.716294][T16492] dup_task_struct+0x53/0xc60 [ 1794.720927][T16492] ? __kasan_check_write+0x14/0x20 [ 1794.725870][T16492] copy_process+0x5c4/0x3260 [ 1794.730292][T16492] ? __kasan_check_write+0x14/0x20 [ 1794.735240][T16492] ? proc_fail_nth_write+0x20b/0x290 [ 1794.740361][T16492] ? selinux_file_permission+0x2c4/0x570 [ 1794.745827][T16492] ? fsnotify_perm+0x6a/0x5d0 [ 1794.750428][T16492] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1794.755444][T16492] ? vfs_write+0x9ec/0x1110 [ 1794.759718][T16492] kernel_clone+0x21e/0x9e0 [ 1794.764053][T16492] ? file_end_write+0x1c0/0x1c0 [ 1794.768740][T16492] ? create_io_thread+0x1e0/0x1e0 [ 1794.773600][T16492] ? mutex_unlock+0xb2/0x1b0 [ 1794.778031][T16492] ? __mutex_lock_slowpath+0x10/0x10 [ 1794.783155][T16492] __x64_sys_clone+0x23f/0x290 [ 1794.787762][T16492] ? __do_sys_vfork+0x130/0x130 [ 1794.792439][T16492] ? ksys_write+0x260/0x2c0 [ 1794.796780][T16492] ? debug_smp_processor_id+0x17/0x20 [ 1794.802072][T16492] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1794.807981][T16492] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1794.813441][T16492] do_syscall_64+0x3d/0xb0 [ 1794.817698][T16492] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1794.823507][T16492] RIP: 0033:0x7f72394e6b29 [ 1794.827770][T16492] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1794.847374][T16492] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1794.855616][T16492] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1794.863427][T16492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1794.871381][T16492] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1794.879234][T16492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1794.887131][T16492] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1794.894950][T16492] 11:06:29 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 11:06:29 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:29 executing program 4: bpf$MAP_CREATE(0x19, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:29 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8000000) 11:06:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:29 executing program 0: syz_clone(0x30000900, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:29 executing program 0: syz_clone(0x30000f00, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:29 executing program 4: bpf$MAP_CREATE(0x1a, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:29 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:29 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc000000) 11:06:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:29 executing program 0: syz_clone(0x30001100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1795.401099][T16518] FAULT_INJECTION: forcing a failure. [ 1795.401099][T16518] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.434446][T16518] CPU: 0 PID: 16518 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1795.444899][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1795.454791][T16518] Call Trace: [ 1795.457911][T16518] [ 1795.460689][T16518] dump_stack_lvl+0x151/0x1b7 [ 1795.465207][T16518] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1795.470684][T16518] dump_stack+0x15/0x17 [ 1795.474757][T16518] should_fail+0x3c6/0x510 [ 1795.479005][T16518] __should_failslab+0xa4/0xe0 [ 1795.483613][T16518] ? prepare_creds+0x2f/0x6a0 [ 1795.488122][T16518] should_failslab+0x9/0x20 [ 1795.492458][T16518] slab_pre_alloc_hook+0x37/0xd0 [ 1795.497239][T16518] ? prepare_creds+0x2f/0x6a0 [ 1795.501739][T16518] kmem_cache_alloc+0x44/0x200 [ 1795.506342][T16518] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1795.511641][T16518] prepare_creds+0x2f/0x6a0 [ 1795.516094][T16518] copy_creds+0xf0/0x630 [ 1795.520142][T16518] ? dup_task_struct+0x7e6/0xc60 [ 1795.524919][T16518] copy_process+0x7c3/0x3260 [ 1795.529348][T16518] ? __kasan_check_write+0x14/0x20 [ 1795.534293][T16518] ? proc_fail_nth_write+0x20b/0x290 [ 1795.540022][T16518] ? selinux_file_permission+0x2c4/0x570 [ 1795.545494][T16518] ? fsnotify_perm+0x6a/0x5d0 [ 1795.550008][T16518] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1795.554950][T16518] ? vfs_write+0x9ec/0x1110 [ 1795.559289][T16518] kernel_clone+0x21e/0x9e0 [ 1795.563628][T16518] ? file_end_write+0x1c0/0x1c0 [ 1795.568318][T16518] ? create_io_thread+0x1e0/0x1e0 [ 1795.573180][T16518] ? mutex_unlock+0xb2/0x1b0 [ 1795.577729][T16518] ? __mutex_lock_slowpath+0x10/0x10 [ 1795.582811][T16518] __x64_sys_clone+0x23f/0x290 [ 1795.587411][T16518] ? __do_sys_vfork+0x130/0x130 [ 1795.592098][T16518] ? ksys_write+0x260/0x2c0 [ 1795.596436][T16518] ? debug_smp_processor_id+0x17/0x20 [ 1795.601640][T16518] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1795.607541][T16518] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1795.613009][T16518] do_syscall_64+0x3d/0xb0 [ 1795.617268][T16518] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1795.622994][T16518] RIP: 0033:0x7f72394e6b29 [ 1795.627245][T16518] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:29 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 11:06:29 executing program 4: bpf$MAP_CREATE(0x1b, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:29 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:29 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x10000000) 11:06:29 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:29 executing program 0: syz_clone(0x30001f00, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:29 executing program 4: bpf$MAP_CREATE(0x1c, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1795.646696][T16518] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1795.654932][T16518] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1795.662741][T16518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1795.670554][T16518] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1795.678374][T16518] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1795.686184][T16518] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1795.694000][T16518] 11:06:29 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:29 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:29 executing program 0: syz_clone(0x30002000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:29 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x15000000) [ 1795.727498][T16532] FAULT_INJECTION: forcing a failure. [ 1795.727498][T16532] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.746793][T16532] CPU: 0 PID: 16532 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1795.757242][T16532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1795.767140][T16532] Call Trace: [ 1795.770263][T16532] [ 1795.773043][T16532] dump_stack_lvl+0x151/0x1b7 11:06:29 executing program 4: bpf$MAP_CREATE(0x1d, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1795.777550][T16532] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1795.783026][T16532] dump_stack+0x15/0x17 [ 1795.787015][T16532] should_fail+0x3c6/0x510 [ 1795.791267][T16532] __should_failslab+0xa4/0xe0 [ 1795.795881][T16532] ? alloc_vmap_area+0x19e/0x1a80 [ 1795.800721][T16532] should_failslab+0x9/0x20 [ 1795.805067][T16532] slab_pre_alloc_hook+0x37/0xd0 [ 1795.809979][T16532] ? alloc_vmap_area+0x19e/0x1a80 [ 1795.814836][T16532] kmem_cache_alloc+0x44/0x200 [ 1795.819438][T16532] alloc_vmap_area+0x19e/0x1a80 [ 1795.824130][T16532] ? vm_map_ram+0xa90/0xa90 [ 1795.828464][T16532] ? kmem_cache_alloc_trace+0x115/0x210 [ 1795.833840][T16532] ? __get_vm_area_node+0x117/0x360 [ 1795.838876][T16532] __get_vm_area_node+0x158/0x360 [ 1795.843729][T16532] __vmalloc_node_range+0xe2/0x8d0 [ 1795.848685][T16532] ? copy_process+0x5c4/0x3260 [ 1795.853275][T16532] ? slab_post_alloc_hook+0x72/0x2c0 [ 1795.858397][T16532] ? dup_task_struct+0x53/0xc60 [ 1795.863083][T16532] dup_task_struct+0x416/0xc60 [ 1795.867684][T16532] ? copy_process+0x5c4/0x3260 [ 1795.872284][T16532] ? __kasan_check_write+0x14/0x20 [ 1795.877231][T16532] copy_process+0x5c4/0x3260 [ 1795.881659][T16532] ? __kasan_check_write+0x14/0x20 [ 1795.886699][T16532] ? proc_fail_nth_write+0x20b/0x290 [ 1795.891822][T16532] ? selinux_file_permission+0x2c4/0x570 [ 1795.897288][T16532] ? fsnotify_perm+0x6a/0x5d0 [ 1795.901801][T16532] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1795.906752][T16532] ? vfs_write+0x9ec/0x1110 [ 1795.911088][T16532] kernel_clone+0x21e/0x9e0 [ 1795.915428][T16532] ? file_end_write+0x1c0/0x1c0 [ 1795.920117][T16532] ? create_io_thread+0x1e0/0x1e0 [ 1795.924975][T16532] ? mutex_unlock+0xb2/0x1b0 [ 1795.929405][T16532] ? __mutex_lock_slowpath+0x10/0x10 [ 1795.934683][T16532] __x64_sys_clone+0x23f/0x290 [ 1795.939413][T16532] ? __do_sys_vfork+0x130/0x130 [ 1795.944061][T16532] ? ksys_write+0x260/0x2c0 [ 1795.948399][T16532] ? debug_smp_processor_id+0x17/0x20 [ 1795.953693][T16532] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1795.959595][T16532] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1795.965499][T16532] do_syscall_64+0x3d/0xb0 [ 1795.969750][T16532] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1795.975565][T16532] RIP: 0033:0x7f72394e6b29 [ 1795.979828][T16532] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1795.999265][T16532] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1796.007508][T16532] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1796.015334][T16532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1796.023131][T16532] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1796.030942][T16532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1796.038752][T16532] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1796.046567][T16532] [ 1796.050680][T16532] syz-executor.2: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 1796.065927][T16532] CPU: 0 PID: 16532 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1796.076250][T16532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1796.086137][T16532] Call Trace: [ 1796.089264][T16532] [ 1796.092045][T16532] dump_stack_lvl+0x151/0x1b7 [ 1796.096550][T16532] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1796.102022][T16532] ? pr_cont_kernfs_name+0xf0/0x100 [ 1796.107061][T16532] dump_stack+0x15/0x17 [ 1796.111058][T16532] warn_alloc+0x21a/0x390 [ 1796.115214][T16532] ? zone_watermark_ok_safe+0x270/0x270 [ 1796.120593][T16532] ? __get_vm_area_node+0x16e/0x360 [ 1796.125627][T16532] __vmalloc_node_range+0x2c1/0x8d0 [ 1796.130661][T16532] ? slab_post_alloc_hook+0x72/0x2c0 [ 1796.135784][T16532] ? dup_task_struct+0x53/0xc60 [ 1796.140469][T16532] dup_task_struct+0x416/0xc60 [ 1796.145096][T16532] ? copy_process+0x5c4/0x3260 [ 1796.149672][T16532] ? __kasan_check_write+0x14/0x20 [ 1796.154615][T16532] copy_process+0x5c4/0x3260 [ 1796.159046][T16532] ? __kasan_check_write+0x14/0x20 [ 1796.163992][T16532] ? proc_fail_nth_write+0x20b/0x290 [ 1796.169113][T16532] ? selinux_file_permission+0x2c4/0x570 [ 1796.174588][T16532] ? fsnotify_perm+0x6a/0x5d0 [ 1796.179103][T16532] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1796.184048][T16532] ? vfs_write+0x9ec/0x1110 [ 1796.188384][T16532] kernel_clone+0x21e/0x9e0 [ 1796.192728][T16532] ? file_end_write+0x1c0/0x1c0 [ 1796.197412][T16532] ? create_io_thread+0x1e0/0x1e0 [ 1796.202364][T16532] ? mutex_unlock+0xb2/0x1b0 [ 1796.206795][T16532] ? __mutex_lock_slowpath+0x10/0x10 [ 1796.212008][T16532] __x64_sys_clone+0x23f/0x290 [ 1796.216609][T16532] ? __do_sys_vfork+0x130/0x130 [ 1796.221288][T16532] ? ksys_write+0x260/0x2c0 [ 1796.225724][T16532] ? debug_smp_processor_id+0x17/0x20 [ 1796.230923][T16532] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1796.236824][T16532] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1796.242303][T16532] do_syscall_64+0x3d/0xb0 [ 1796.246550][T16532] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1796.252278][T16532] RIP: 0033:0x7f72394e6b29 [ 1796.256528][T16532] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1796.276105][T16532] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1796.284348][T16532] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1796.292161][T16532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1796.299973][T16532] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1796.307810][T16532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1796.315598][T16532] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1796.323411][T16532] [ 1796.327153][T16532] Mem-Info: [ 1796.330182][T16532] active_anon:15492 inactive_anon:16384 isolated_anon:0 [ 1796.330182][T16532] active_file:8460 inactive_file:8821 isolated_file:0 [ 1796.330182][T16532] unevictable:0 dirty:64 writeback:0 [ 1796.330182][T16532] slab_reclaimable:23755 slab_unreclaimable:66680 [ 1796.330182][T16532] mapped:28364 shmem:15549 pagetables:493 bounce:0 [ 1796.330182][T16532] kernel_misc_reclaimable:0 [ 1796.330182][T16532] free:1527804 free_pcp:24277 free_cma:0 [ 1796.372037][T16532] Node 0 active_anon:61968kB inactive_anon:65536kB active_file:33840kB inactive_file:35284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113456kB dirty:256kB writeback:0kB shmem:62196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4420kB pagetables:1972kB all_unreclaimable? no [ 1796.402905][T16532] DMA32 free:2976724kB min:62592kB low:78240kB high:93888kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2981660kB mlocked:0kB bounce:0kB free_pcp:4936kB local_pcp:56kB free_cma:0kB [ 1796.430568][T16532] lowmem_reserve[]: 0 3941 3941 [ 1796.435328][T16532] Normal free:3134492kB min:84860kB low:106072kB high:127284kB reserved_highatomic:0KB active_anon:61968kB inactive_anon:65536kB active_file:33840kB inactive_file:35284kB unevictable:0kB writepending:256kB present:5242880kB managed:4035848kB mlocked:0kB bounce:0kB free_pcp:92168kB local_pcp:49780kB free_cma:0kB [ 1796.464718][T16532] lowmem_reserve[]: 0 0 0 [ 1796.468872][T16532] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 723*4096kB (M) = 2976724kB [ 1796.484262][T16532] Normal: 19891*4kB (UME) 9134*8kB (UME) 7152*16kB (UME) 4011*32kB (UME) 3012*64kB (UME) 1817*128kB (UME) 886*256kB (UME) 256*512kB (UME) 56*1024kB (UM) 7*2048kB (UE) 460*4096kB (UM) = 3134492kB [ 1796.503320][T16532] 32830 total pagecache pages [ 1796.507800][T16532] 0 pages in swap cache [ 1796.511852][T16532] Swap cache stats: add 0, delete 0, find 0/0 [ 1796.517771][T16532] Free swap = 124996kB [ 1796.521784][T16532] Total swap = 124996kB [ 1796.525753][T16532] 2097051 pages RAM 11:06:30 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 11:06:30 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:30 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x20000000) 11:06:30 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:30 executing program 4: bpf$MAP_CREATE(0x1e, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:30 executing program 0: syz_clone(0x30003f00, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:30 executing program 4: bpf$MAP_CREATE(0x21, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:30 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1796.529391][T16532] 0 pages HighMem/MovableOnly [ 1796.533939][T16532] 342674 pages reserved [ 1796.538095][T16532] 0 pages cma reserved 11:06:30 executing program 0: syz_clone(0x30004000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:30 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13e99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x10100, 0x200000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xf967}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) 11:06:30 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2d030000) 11:06:30 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1796.575079][T16560] FAULT_INJECTION: forcing a failure. [ 1796.575079][T16560] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.590079][T16560] CPU: 1 PID: 16560 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1796.600519][T16560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1796.610412][T16560] Call Trace: [ 1796.613538][T16560] [ 1796.616314][T16560] dump_stack_lvl+0x151/0x1b7 [ 1796.620838][T16560] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1796.626299][T16560] ? lockref_get+0x184/0x220 [ 1796.630721][T16560] ? __io_wq_cpu_online+0x1d0/0x1d0 [ 1796.635760][T16560] ? _raw_spin_lock+0xa4/0x1b0 [ 1796.640407][T16560] dump_stack+0x15/0x17 [ 1796.644352][T16560] should_fail+0x3c6/0x510 [ 1796.648605][T16560] __should_failslab+0xa4/0xe0 [ 1796.653206][T16560] ? create_user_ns+0x55a/0x19d0 [ 1796.657999][T16560] should_failslab+0x9/0x20 [ 1796.662482][T16560] slab_pre_alloc_hook+0x37/0xd0 [ 1796.667244][T16560] ? create_user_ns+0x55a/0x19d0 [ 1796.672017][T16560] kmem_cache_alloc+0x44/0x200 [ 1796.676622][T16560] create_user_ns+0x55a/0x19d0 [ 1796.681221][T16560] ? utsns_owner+0x40/0x40 [ 1796.685477][T16560] ? security_prepare_creds+0x102/0x140 [ 1796.690890][T16560] ? prepare_creds+0x486/0x6a0 [ 1796.695451][T16560] copy_creds+0x20e/0x630 [ 1796.699617][T16560] ? dup_task_struct+0x7e6/0xc60 [ 1796.704393][T16560] copy_process+0x7c3/0x3260 [ 1796.708907][T16560] ? __kasan_check_write+0x14/0x20 [ 1796.713854][T16560] ? proc_fail_nth_write+0x20b/0x290 [ 1796.718975][T16560] ? selinux_file_permission+0x2c4/0x570 [ 1796.724440][T16560] ? fsnotify_perm+0x6a/0x5d0 [ 1796.728961][T16560] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1796.733899][T16560] ? vfs_write+0x9ec/0x1110 [ 1796.738240][T16560] kernel_clone+0x21e/0x9e0 [ 1796.742582][T16560] ? file_end_write+0x1c0/0x1c0 [ 1796.747265][T16560] ? create_io_thread+0x1e0/0x1e0 [ 1796.752126][T16560] ? mutex_unlock+0xb2/0x1b0 [ 1796.756554][T16560] ? __mutex_lock_slowpath+0x10/0x10 [ 1796.761684][T16560] __x64_sys_clone+0x23f/0x290 [ 1796.766277][T16560] ? __do_sys_vfork+0x130/0x130 [ 1796.770966][T16560] ? ksys_write+0x260/0x2c0 [ 1796.775311][T16560] ? debug_smp_processor_id+0x17/0x20 [ 1796.780507][T16560] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1796.786414][T16560] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1796.791883][T16560] do_syscall_64+0x3d/0xb0 [ 1796.796132][T16560] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1796.801864][T16560] RIP: 0033:0x7f72394e6b29 [ 1796.806117][T16560] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:30 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 11:06:30 executing program 4: bpf$MAP_CREATE(0x22, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:30 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:30 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13e99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x10100, 0x200000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xf967}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) 11:06:30 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x32030000) 11:06:30 executing program 0: syz_clone(0x30004100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:30 executing program 4: bpf$MAP_CREATE(0x23, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1796.825558][T16560] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1796.834150][T16560] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1796.841960][T16560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1796.849874][T16560] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1796.857690][T16560] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1796.865494][T16560] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1796.873311][T16560] 11:06:30 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x40000000) 11:06:30 executing program 4: bpf$MAP_CREATE(0x300, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:30 executing program 4: bpf$MAP_CREATE(0x500, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:30 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13e99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x10100, 0x200000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xf967}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13e99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x10100, 0x200000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xf967}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) 11:06:30 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1796.914666][T16587] FAULT_INJECTION: forcing a failure. [ 1796.914666][T16587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1796.942673][T16587] CPU: 0 PID: 16587 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1796.953113][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1796.963010][T16587] Call Trace: [ 1796.966126][T16587] [ 1796.968904][T16587] dump_stack_lvl+0x151/0x1b7 [ 1796.973678][T16587] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1796.979143][T16587] ? stack_trace_snprint+0xf0/0xf0 [ 1796.984091][T16587] dump_stack+0x15/0x17 [ 1796.988432][T16587] should_fail+0x3c6/0x510 [ 1796.992683][T16587] should_fail_alloc_page+0x5a/0x80 [ 1796.997714][T16587] __alloc_pages+0x1e6/0x7b0 [ 1797.002142][T16587] ? dup_task_struct+0x416/0xc60 [ 1797.006922][T16587] ? __x64_sys_clone+0x23f/0x290 [ 1797.011806][T16587] ? zone_watermark_fast+0x220/0x220 [ 1797.016926][T16587] __get_free_pages+0xe/0x30 [ 1797.021348][T16587] kasan_populate_vmalloc_pte+0x39/0x130 [ 1797.026813][T16587] ? __apply_to_page_range+0x8ca/0xbe0 [ 1797.032119][T16587] __apply_to_page_range+0x8dd/0xbe0 [ 1797.037229][T16587] ? kasan_populate_vmalloc+0x70/0x70 [ 1797.042439][T16587] ? kasan_populate_vmalloc+0x70/0x70 [ 1797.047645][T16587] apply_to_page_range+0x3b/0x50 [ 1797.052419][T16587] kasan_populate_vmalloc+0x65/0x70 [ 1797.057458][T16587] alloc_vmap_area+0x192f/0x1a80 [ 1797.062226][T16587] ? vm_map_ram+0xa90/0xa90 [ 1797.066569][T16587] ? kmem_cache_alloc_trace+0x115/0x210 [ 1797.072045][T16587] ? __get_vm_area_node+0x117/0x360 [ 1797.077080][T16587] __get_vm_area_node+0x158/0x360 [ 1797.082200][T16587] __vmalloc_node_range+0xe2/0x8d0 [ 1797.087148][T16587] ? copy_process+0x5c4/0x3260 [ 1797.091747][T16587] ? slab_post_alloc_hook+0x72/0x2c0 [ 1797.096875][T16587] ? dup_task_struct+0x53/0xc60 [ 1797.101554][T16587] ? dup_task_struct+0x53/0xc60 [ 1797.106267][T16587] dup_task_struct+0x416/0xc60 [ 1797.110841][T16587] ? copy_process+0x5c4/0x3260 [ 1797.115444][T16587] ? __kasan_check_write+0x14/0x20 [ 1797.120391][T16587] copy_process+0x5c4/0x3260 [ 1797.124942][T16587] ? __kasan_check_write+0x14/0x20 [ 1797.129856][T16587] ? proc_fail_nth_write+0x20b/0x290 [ 1797.135056][T16587] ? selinux_file_permission+0x2c4/0x570 [ 1797.140533][T16587] ? fsnotify_perm+0x6a/0x5d0 [ 1797.145037][T16587] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1797.149984][T16587] ? vfs_write+0x9ec/0x1110 [ 1797.154326][T16587] kernel_clone+0x21e/0x9e0 [ 1797.158666][T16587] ? file_end_write+0x1c0/0x1c0 [ 1797.163356][T16587] ? create_io_thread+0x1e0/0x1e0 [ 1797.168210][T16587] ? mutex_unlock+0xb2/0x1b0 [ 1797.172636][T16587] ? __mutex_lock_slowpath+0x10/0x10 [ 1797.177786][T16587] __x64_sys_clone+0x23f/0x290 [ 1797.182357][T16587] ? __do_sys_vfork+0x130/0x130 [ 1797.187051][T16587] ? ksys_write+0x260/0x2c0 [ 1797.191396][T16587] ? debug_smp_processor_id+0x17/0x20 [ 1797.196593][T16587] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1797.202506][T16587] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1797.207970][T16587] do_syscall_64+0x3d/0xb0 [ 1797.212228][T16587] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1797.218035][T16587] RIP: 0033:0x7f72394e6b29 [ 1797.222288][T16587] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1797.241852][T16587] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1797.250091][T16587] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1797.257907][T16587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:31 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 11:06:31 executing program 4: bpf$MAP_CREATE(0x600, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:31 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x311, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:31 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x48000000) 11:06:31 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=0x1, r1, 0x1a, 0x2}, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfa06) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'rwm\x00'}, 0xa) 11:06:31 executing program 0: syz_clone(0x30007000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:31 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:31 executing program 4: bpf$MAP_CREATE(0x700, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:31 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x49010000) [ 1797.265720][T16587] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1797.273541][T16587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1797.281341][T16587] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1797.289158][T16587] 11:06:31 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=0x1, r1, 0x1a, 0x2}, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfa06) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'rwm\x00'}, 0xa) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=0x1, r1, 0x1a, 0x2}, 0x14) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfa06) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async) 11:06:31 executing program 4: bpf$MAP_CREATE(0x900, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1797.338806][T16611] FAULT_INJECTION: forcing a failure. [ 1797.338806][T16611] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.370841][T16611] CPU: 0 PID: 16611 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 11:06:31 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4a000000) [ 1797.381300][T16611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1797.391192][T16611] Call Trace: [ 1797.394317][T16611] [ 1797.397100][T16611] dump_stack_lvl+0x151/0x1b7 [ 1797.401610][T16611] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1797.407073][T16611] dump_stack+0x15/0x17 [ 1797.411063][T16611] should_fail+0x3c6/0x510 [ 1797.415333][T16611] __should_failslab+0xa4/0xe0 [ 1797.419916][T16611] should_failslab+0x9/0x20 [ 1797.424253][T16611] slab_pre_alloc_hook+0x37/0xd0 [ 1797.429143][T16611] __kmalloc+0x6d/0x270 [ 1797.433138][T16611] ? __register_sysctl_table+0xea/0x1240 [ 1797.438595][T16611] __register_sysctl_table+0xea/0x1240 [ 1797.443902][T16611] ? memcpy+0x56/0x70 [ 1797.447719][T16611] setup_userns_sysctls+0x2b1/0x340 [ 1797.452743][T16611] create_user_ns+0x1230/0x19d0 [ 1797.457456][T16611] ? utsns_owner+0x40/0x40 [ 1797.461707][T16611] ? security_prepare_creds+0x102/0x140 [ 1797.467064][T16611] ? prepare_creds+0x486/0x6a0 [ 1797.471676][T16611] copy_creds+0x20e/0x630 [ 1797.475828][T16611] ? dup_task_struct+0x7e6/0xc60 [ 1797.480609][T16611] copy_process+0x7c3/0x3260 [ 1797.485561][T16611] ? __kasan_check_write+0x14/0x20 [ 1797.490496][T16611] ? proc_fail_nth_write+0x20b/0x290 [ 1797.495618][T16611] ? selinux_file_permission+0x2c4/0x570 [ 1797.501092][T16611] ? fsnotify_perm+0x6a/0x5d0 [ 1797.505605][T16611] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1797.510545][T16611] ? vfs_write+0x9ec/0x1110 [ 1797.514891][T16611] kernel_clone+0x21e/0x9e0 [ 1797.519258][T16611] ? file_end_write+0x1c0/0x1c0 [ 1797.523913][T16611] ? create_io_thread+0x1e0/0x1e0 [ 1797.528779][T16611] ? mutex_unlock+0xb2/0x1b0 [ 1797.533215][T16611] ? __mutex_lock_slowpath+0x10/0x10 [ 1797.538418][T16611] __x64_sys_clone+0x23f/0x290 [ 1797.543025][T16611] ? __do_sys_vfork+0x130/0x130 [ 1797.547705][T16611] ? ksys_write+0x260/0x2c0 [ 1797.552049][T16611] ? debug_smp_processor_id+0x17/0x20 [ 1797.557359][T16611] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1797.563256][T16611] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1797.568725][T16611] do_syscall_64+0x3d/0xb0 [ 1797.572981][T16611] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1797.578706][T16611] RIP: 0033:0x7f72394e6b29 [ 1797.582966][T16611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1797.602402][T16611] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1797.610642][T16611] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1797.618468][T16611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1797.626267][T16611] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 11:06:31 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 11:06:31 executing program 0: syz_clone(0x30000000, 0x0, 0x2, 0x0, 0x0, 0x0) 11:06:31 executing program 4: bpf$MAP_CREATE(0xa00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:31 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x54000000) 11:06:31 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=0x1, r1, 0x1a, 0x2}, 0x14) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfa06) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'rwm\x00'}, 0xa) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=0x1, r1, 0x1a, 0x2}, 0x14) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfa06) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) write$cgroup_devices(r2, &(0x7f0000000080)={'c', ' *:* ', 'rwm\x00'}, 0xa) (async) 11:06:31 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x313, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:31 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x54020000) [ 1797.634091][T16611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1797.641890][T16611] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1797.649716][T16611] 11:06:31 executing program 5: ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:31 executing program 5: ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:31 executing program 4: bpf$MAP_CREATE(0xb00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:31 executing program 0: syz_clone(0x30000000, 0x0, 0x4, 0x0, 0x0, 0x0) [ 1797.691854][T16651] FAULT_INJECTION: forcing a failure. [ 1797.691854][T16651] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.715066][T16651] CPU: 1 PID: 16651 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1797.725503][T16651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1797.735569][T16651] Call Trace: [ 1797.738698][T16651] 11:06:31 executing program 5: ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1797.741493][T16651] dump_stack_lvl+0x151/0x1b7 [ 1797.745987][T16651] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1797.751454][T16651] dump_stack+0x15/0x17 [ 1797.755444][T16651] should_fail+0x3c6/0x510 [ 1797.759701][T16651] __should_failslab+0xa4/0xe0 [ 1797.764306][T16651] should_failslab+0x9/0x20 [ 1797.768640][T16651] slab_pre_alloc_hook+0x37/0xd0 [ 1797.773407][T16651] __kmalloc+0x6d/0x270 [ 1797.777402][T16651] ? __register_sysctl_table+0x9de/0x1240 [ 1797.782958][T16651] __register_sysctl_table+0x9de/0x1240 [ 1797.788430][T16651] setup_userns_sysctls+0x2b1/0x340 [ 1797.793552][T16651] create_user_ns+0x1230/0x19d0 [ 1797.798243][T16651] ? utsns_owner+0x40/0x40 [ 1797.802482][T16651] ? security_prepare_creds+0x102/0x140 [ 1797.807865][T16651] ? prepare_creds+0x486/0x6a0 [ 1797.812477][T16651] copy_creds+0x20e/0x630 [ 1797.816629][T16651] ? dup_task_struct+0x7e6/0xc60 [ 1797.821412][T16651] copy_process+0x7c3/0x3260 [ 1797.825833][T16651] ? __kasan_check_write+0x14/0x20 [ 1797.830787][T16651] ? proc_fail_nth_write+0x20b/0x290 [ 1797.835984][T16651] ? selinux_file_permission+0x2c4/0x570 [ 1797.841453][T16651] ? fsnotify_perm+0x6a/0x5d0 [ 1797.845965][T16651] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1797.850915][T16651] ? vfs_write+0x9ec/0x1110 [ 1797.855253][T16651] kernel_clone+0x21e/0x9e0 [ 1797.859870][T16651] ? file_end_write+0x1c0/0x1c0 [ 1797.864547][T16651] ? create_io_thread+0x1e0/0x1e0 [ 1797.869399][T16651] ? mutex_unlock+0xb2/0x1b0 [ 1797.873832][T16651] ? __mutex_lock_slowpath+0x10/0x10 [ 1797.878950][T16651] __x64_sys_clone+0x23f/0x290 [ 1797.883548][T16651] ? __do_sys_vfork+0x130/0x130 [ 1797.888233][T16651] ? ksys_write+0x260/0x2c0 [ 1797.892614][T16651] ? debug_smp_processor_id+0x17/0x20 [ 1797.897780][T16651] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1797.903687][T16651] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1797.909151][T16651] do_syscall_64+0x3d/0xb0 [ 1797.913403][T16651] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1797.919136][T16651] RIP: 0033:0x7f72394e6b29 [ 1797.923561][T16651] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1797.943006][T16651] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1797.951251][T16651] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1797.959061][T16651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1797.966880][T16651] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1797.974682][T16651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1797.982495][T16651] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1797.990305][T16651] [ 1797.993642][T16651] sysctl could not get directory: //user -12 [ 1797.999759][T16651] CPU: 0 PID: 16651 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1798.010181][T16651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1798.020074][T16651] Call Trace: [ 1798.023196][T16651] [ 1798.026069][T16651] dump_stack_lvl+0x151/0x1b7 [ 1798.030574][T16651] ? slab_free_freelist_hook+0xbd/0x190 [ 1798.036041][T16651] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1798.041510][T16651] ? __register_sysctl_table+0x11a4/0x1240 [ 1798.047153][T16651] dump_stack+0x15/0x17 [ 1798.051144][T16651] __register_sysctl_table+0x11a9/0x1240 [ 1798.056728][T16651] setup_userns_sysctls+0x2b1/0x340 [ 1798.061759][T16651] create_user_ns+0x1230/0x19d0 [ 1798.066447][T16651] ? utsns_owner+0x40/0x40 [ 1798.070731][T16651] ? security_prepare_creds+0x102/0x140 [ 1798.076079][T16651] ? prepare_creds+0x486/0x6a0 [ 1798.080681][T16651] copy_creds+0x20e/0x630 [ 1798.084845][T16651] ? dup_task_struct+0x7e6/0xc60 [ 1798.089622][T16651] copy_process+0x7c3/0x3260 [ 1798.094056][T16651] ? __kasan_check_write+0x14/0x20 [ 1798.098994][T16651] ? proc_fail_nth_write+0x20b/0x290 [ 1798.104114][T16651] ? selinux_file_permission+0x2c4/0x570 [ 1798.109581][T16651] ? fsnotify_perm+0x6a/0x5d0 [ 1798.114098][T16651] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1798.119041][T16651] ? vfs_write+0x9ec/0x1110 [ 1798.123483][T16651] kernel_clone+0x21e/0x9e0 [ 1798.127808][T16651] ? file_end_write+0x1c0/0x1c0 [ 1798.132501][T16651] ? create_io_thread+0x1e0/0x1e0 [ 1798.137354][T16651] ? mutex_unlock+0xb2/0x1b0 [ 1798.142649][T16651] ? __mutex_lock_slowpath+0x10/0x10 [ 1798.147770][T16651] __x64_sys_clone+0x23f/0x290 [ 1798.152377][T16651] ? __do_sys_vfork+0x130/0x130 [ 1798.157143][T16651] ? ksys_write+0x260/0x2c0 [ 1798.161486][T16651] ? debug_smp_processor_id+0x17/0x20 [ 1798.166689][T16651] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1798.172598][T16651] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1798.178063][T16651] do_syscall_64+0x3d/0xb0 [ 1798.182439][T16651] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1798.188130][T16651] RIP: 0033:0x7f72394e6b29 [ 1798.192388][T16651] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1798.211844][T16651] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1798.220072][T16651] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1798.227881][T16651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1798.235693][T16651] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 11:06:32 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 11:06:32 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 11:06:32 executing program 0: syz_clone(0x30000000, 0x0, 0x7, 0x0, 0x0, 0x0) 11:06:32 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x314, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:32 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5a030000) 11:06:32 executing program 4: bpf$MAP_CREATE(0xc00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:32 executing program 4: bpf$MAP_CREATE(0xd00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:32 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) [ 1798.243507][T16651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1798.251317][T16651] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1798.259130][T16651] 11:06:32 executing program 0: syz_clone(0x30000000, 0x0, 0x8, 0x0, 0x0, 0x0) 11:06:32 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x315, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:32 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x64030000) 11:06:32 executing program 4: bpf$MAP_CREATE(0xe00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1798.296859][T16679] FAULT_INJECTION: forcing a failure. [ 1798.296859][T16679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1798.335531][T16679] CPU: 0 PID: 16679 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1798.346063][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1798.355949][T16679] Call Trace: [ 1798.359068][T16679] [ 1798.361847][T16679] dump_stack_lvl+0x151/0x1b7 [ 1798.366357][T16679] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1798.371825][T16679] ? __alloc_pages+0x7b0/0x7b0 [ 1798.376426][T16679] dump_stack+0x15/0x17 [ 1798.380457][T16679] should_fail+0x3c6/0x510 [ 1798.384672][T16679] should_fail_alloc_page+0x5a/0x80 [ 1798.389708][T16679] __alloc_pages+0x1e6/0x7b0 [ 1798.394132][T16679] ? zone_watermark_fast+0x220/0x220 [ 1798.399253][T16679] ? __kasan_kmalloc+0x9/0x10 [ 1798.403768][T16679] ? __kmalloc+0x13a/0x270 [ 1798.408021][T16679] ? __vmalloc_node_range+0x2d6/0x8d0 [ 1798.413228][T16679] __vmalloc_node_range+0x482/0x8d0 [ 1798.418261][T16679] dup_task_struct+0x416/0xc60 [ 1798.422860][T16679] ? copy_process+0x5c4/0x3260 [ 1798.427542][T16679] ? __kasan_check_write+0x14/0x20 [ 1798.432407][T16679] copy_process+0x5c4/0x3260 [ 1798.436843][T16679] ? __kasan_check_write+0x14/0x20 [ 1798.441797][T16679] ? proc_fail_nth_write+0x20b/0x290 [ 1798.447864][T16679] ? selinux_file_permission+0x2c4/0x570 [ 1798.453682][T16679] ? fsnotify_perm+0x6a/0x5d0 [ 1798.458188][T16679] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1798.463137][T16679] ? vfs_write+0x9ec/0x1110 [ 1798.467473][T16679] kernel_clone+0x21e/0x9e0 [ 1798.471823][T16679] ? file_end_write+0x1c0/0x1c0 [ 1798.476527][T16679] ? create_io_thread+0x1e0/0x1e0 [ 1798.481380][T16679] ? mutex_unlock+0xb2/0x1b0 [ 1798.485788][T16679] ? __mutex_lock_slowpath+0x10/0x10 [ 1798.490910][T16679] __x64_sys_clone+0x23f/0x290 [ 1798.495510][T16679] ? __do_sys_vfork+0x130/0x130 [ 1798.500199][T16679] ? ksys_write+0x260/0x2c0 [ 1798.504537][T16679] ? debug_smp_processor_id+0x17/0x20 [ 1798.509744][T16679] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1798.515644][T16679] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1798.521116][T16679] do_syscall_64+0x3d/0xb0 [ 1798.525365][T16679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1798.531092][T16679] RIP: 0033:0x7f72394e6b29 [ 1798.535369][T16679] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1798.555059][T16679] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1798.563295][T16679] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1798.571221][T16679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1798.579054][T16679] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1798.586852][T16679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 11:06:32 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 11:06:32 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 11:06:32 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:32 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6a020000) 11:06:32 executing program 0: syz_clone(0x30000000, 0x0, 0x9, 0x0, 0x0, 0x0) 11:06:32 executing program 4: bpf$MAP_CREATE(0xf00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:32 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:32 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x76020000) [ 1798.594913][T16679] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1798.603014][T16679] 11:06:32 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:32 executing program 0: syz_clone(0x30000000, 0x0, 0xf, 0x0, 0x0, 0x0) 11:06:32 executing program 4: bpf$MAP_CREATE(0x1100, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:32 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1798.647096][T16707] FAULT_INJECTION: forcing a failure. [ 1798.647096][T16707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1798.685820][T16707] CPU: 0 PID: 16707 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1798.696263][T16707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1798.706156][T16707] Call Trace: [ 1798.709276][T16707] [ 1798.712056][T16707] dump_stack_lvl+0x151/0x1b7 [ 1798.716569][T16707] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1798.722036][T16707] ? __alloc_pages+0x7b0/0x7b0 [ 1798.726638][T16707] dump_stack+0x15/0x17 [ 1798.730631][T16707] should_fail+0x3c6/0x510 [ 1798.734883][T16707] should_fail_alloc_page+0x5a/0x80 [ 1798.740059][T16707] __alloc_pages+0x1e6/0x7b0 [ 1798.744484][T16707] ? zone_watermark_fast+0x220/0x220 [ 1798.749610][T16707] ? __kasan_kmalloc+0x9/0x10 [ 1798.754112][T16707] ? __kmalloc+0x13a/0x270 [ 1798.758362][T16707] ? __vmalloc_node_range+0x2d6/0x8d0 [ 1798.763581][T16707] __vmalloc_node_range+0x482/0x8d0 [ 1798.768609][T16707] dup_task_struct+0x416/0xc60 [ 1798.773208][T16707] ? copy_process+0x5c4/0x3260 [ 1798.777808][T16707] ? __kasan_check_write+0x14/0x20 [ 1798.782871][T16707] copy_process+0x5c4/0x3260 [ 1798.787300][T16707] ? __kasan_check_write+0x14/0x20 [ 1798.792247][T16707] ? proc_fail_nth_write+0x20b/0x290 [ 1798.797364][T16707] ? selinux_file_permission+0x2c4/0x570 [ 1798.802840][T16707] ? fsnotify_perm+0x6a/0x5d0 [ 1798.807351][T16707] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1798.812295][T16707] ? vfs_write+0x9ec/0x1110 [ 1798.816637][T16707] kernel_clone+0x21e/0x9e0 [ 1798.820978][T16707] ? file_end_write+0x1c0/0x1c0 [ 1798.825661][T16707] ? create_io_thread+0x1e0/0x1e0 [ 1798.830523][T16707] ? mutex_unlock+0xb2/0x1b0 [ 1798.834946][T16707] ? __mutex_lock_slowpath+0x10/0x10 [ 1798.840075][T16707] __x64_sys_clone+0x23f/0x290 [ 1798.844678][T16707] ? __do_sys_vfork+0x130/0x130 [ 1798.849427][T16707] ? ksys_write+0x260/0x2c0 [ 1798.853701][T16707] ? debug_smp_processor_id+0x17/0x20 [ 1798.859349][T16707] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1798.865252][T16707] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1798.870709][T16707] do_syscall_64+0x3d/0xb0 [ 1798.874959][T16707] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1798.880686][T16707] RIP: 0033:0x7f72394e6b29 [ 1798.884947][T16707] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1798.904467][T16707] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1798.912713][T16707] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1798.920525][T16707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1798.928426][T16707] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1798.936232][T16707] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 11:06:32 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 11:06:32 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7e020000) 11:06:32 executing program 5: perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:32 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:32 executing program 0: syz_clone(0x30000000, 0x0, 0x11, 0x0, 0x0, 0x0) 11:06:32 executing program 4: bpf$MAP_CREATE(0x1200, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, r0, 0x0, 0xffffffffffffffff, 0x0) 11:06:32 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x89000000) 11:06:32 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:32 executing program 4: bpf$MAP_CREATE(0x1300, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1798.944047][T16707] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1798.951868][T16707] 11:06:32 executing program 0: syz_clone(0x30000000, 0x0, 0x41, 0x0, 0x0, 0x0) 11:06:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 1799.005202][T16737] FAULT_INJECTION: forcing a failure. [ 1799.005202][T16737] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.021863][T16737] CPU: 0 PID: 16737 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1799.032307][T16737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1799.042206][T16737] Call Trace: [ 1799.045408][T16737] [ 1799.048279][T16737] dump_stack_lvl+0x151/0x1b7 [ 1799.052802][T16737] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1799.058266][T16737] dump_stack+0x15/0x17 [ 1799.062252][T16737] should_fail+0x3c6/0x510 [ 1799.066508][T16737] __should_failslab+0xa4/0xe0 [ 1799.071104][T16737] should_failslab+0x9/0x20 [ 1799.075456][T16737] slab_pre_alloc_hook+0x37/0xd0 [ 1799.080248][T16737] kmem_cache_alloc_trace+0x48/0x210 [ 1799.085338][T16737] ? alloc_fdtable+0xaf/0x2a0 [ 1799.089857][T16737] alloc_fdtable+0xaf/0x2a0 [ 1799.094293][T16737] dup_fd+0x759/0xb00 [ 1799.098097][T16737] ? avc_has_perm+0x16f/0x260 [ 1799.102614][T16737] copy_files+0xe6/0x200 [ 1799.106700][T16737] ? perf_event_attrs+0x30/0x30 [ 1799.111399][T16737] ? dup_task_struct+0xc60/0xc60 [ 1799.116153][T16737] ? security_task_alloc+0xf9/0x130 [ 1799.121191][T16737] copy_process+0x11f3/0x3260 [ 1799.125702][T16737] ? proc_fail_nth_write+0x20b/0x290 [ 1799.130909][T16737] ? fsnotify_perm+0x6a/0x5d0 [ 1799.135419][T16737] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1799.140469][T16737] ? vfs_write+0x9ec/0x1110 [ 1799.144793][T16737] kernel_clone+0x21e/0x9e0 [ 1799.149141][T16737] ? file_end_write+0x1c0/0x1c0 [ 1799.153827][T16737] ? create_io_thread+0x1e0/0x1e0 [ 1799.158683][T16737] ? mutex_unlock+0xb2/0x1b0 [ 1799.163194][T16737] ? __mutex_lock_slowpath+0x10/0x10 [ 1799.168319][T16737] __x64_sys_clone+0x23f/0x290 [ 1799.172932][T16737] ? __do_sys_vfork+0x130/0x130 [ 1799.177601][T16737] ? ksys_write+0x260/0x2c0 [ 1799.181944][T16737] ? debug_smp_processor_id+0x17/0x20 [ 1799.187157][T16737] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1799.193139][T16737] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1799.198605][T16737] do_syscall_64+0x3d/0xb0 [ 1799.202858][T16737] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1799.208585][T16737] RIP: 0033:0x7f72394e6b29 [ 1799.212841][T16737] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1799.232286][T16737] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1799.240530][T16737] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1799.248431][T16737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:33 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 11:06:33 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:33 executing program 0: syz_clone(0x30000000, 0x0, 0x70, 0x0, 0x0, 0x0) 11:06:33 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x95000000) 11:06:33 executing program 4: bpf$MAP_CREATE(0x1400, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, r0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) [ 1799.256394][T16737] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1799.264291][T16737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1799.272127][T16737] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1799.279919][T16737] 11:06:33 executing program 4: bpf$MAP_CREATE(0x1500, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:33 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:33 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x96020000) 11:06:33 executing program 4: bpf$MAP_CREATE(0x1600, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000}, r0, 0x0, 0xffffffffffffffff, 0x0) [ 1799.321561][T16753] FAULT_INJECTION: forcing a failure. [ 1799.321561][T16753] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.370685][T16753] CPU: 1 PID: 16753 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1799.381222][T16753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1799.391199][T16753] Call Trace: [ 1799.396575][T16753] [ 1799.399354][T16753] dump_stack_lvl+0x151/0x1b7 [ 1799.403866][T16753] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1799.409341][T16753] dump_stack+0x15/0x17 [ 1799.413329][T16753] should_fail+0x3c6/0x510 11:06:33 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc4030000) [ 1799.417587][T16753] __should_failslab+0xa4/0xe0 [ 1799.422180][T16753] should_failslab+0x9/0x20 [ 1799.426522][T16753] slab_pre_alloc_hook+0x37/0xd0 [ 1799.431294][T16753] __kmalloc+0x6d/0x270 [ 1799.435284][T16753] ? kvmalloc_node+0x82/0x130 [ 1799.439802][T16753] kvmalloc_node+0x82/0x130 [ 1799.444230][T16753] alloc_fdtable+0xeb/0x2a0 [ 1799.448567][T16753] dup_fd+0x759/0xb00 [ 1799.452387][T16753] ? avc_has_perm+0x16f/0x260 [ 1799.456903][T16753] copy_files+0xe6/0x200 [ 1799.460977][T16753] ? perf_event_attrs+0x30/0x30 [ 1799.465663][T16753] ? dup_task_struct+0xc60/0xc60 [ 1799.470440][T16753] ? security_task_alloc+0xf9/0x130 [ 1799.475475][T16753] copy_process+0x11f3/0x3260 [ 1799.479991][T16753] ? proc_fail_nth_write+0x20b/0x290 [ 1799.485233][T16753] ? irqentry_exit_cond_resched+0x2a/0x30 [ 1799.492175][T16753] ? irqentry_exit+0x30/0x40 [ 1799.496602][T16753] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1799.501545][T16753] ? kernel_clone+0xcd/0x9e0 [ 1799.505972][T16753] kernel_clone+0x21e/0x9e0 [ 1799.510312][T16753] ? file_end_write+0x1c0/0x1c0 [ 1799.515001][T16753] ? create_io_thread+0x1e0/0x1e0 [ 1799.519859][T16753] ? mutex_unlock+0xb2/0x1b0 [ 1799.524284][T16753] ? __mutex_lock_slowpath+0x10/0x10 [ 1799.529408][T16753] __x64_sys_clone+0x23f/0x290 [ 1799.534008][T16753] ? __do_sys_vfork+0x130/0x130 [ 1799.538695][T16753] ? ksys_write+0x260/0x2c0 [ 1799.543037][T16753] ? debug_smp_processor_id+0x17/0x20 [ 1799.548244][T16753] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1799.554146][T16753] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1799.559615][T16753] do_syscall_64+0x3d/0xb0 [ 1799.563878][T16753] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1799.569592][T16753] RIP: 0033:0x7f72394e6b29 [ 1799.573847][T16753] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1799.593403][T16753] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1799.601620][T16753] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1799.609435][T16753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:33 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 11:06:33 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:33 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc8030000) 11:06:33 executing program 4: bpf$MAP_CREATE(0x1700, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:33 executing program 0: syz_clone(0x30000000, 0x0, 0x700, 0x0, 0x0, 0x0) 11:06:33 executing program 5: bpf$MAP_CREATE(0x300, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1799.617245][T16753] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1799.625053][T16753] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1799.632864][T16753] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1799.640680][T16753] 11:06:33 executing program 4: bpf$MAP_CREATE(0x1800, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:33 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd0030000) 11:06:33 executing program 5: bpf$MAP_CREATE(0x300, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:33 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1799.683415][T16782] FAULT_INJECTION: forcing a failure. [ 1799.683415][T16782] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.712554][T16782] CPU: 0 PID: 16782 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1799.723003][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1799.732895][T16782] Call Trace: [ 1799.736019][T16782] [ 1799.738796][T16782] dump_stack_lvl+0x151/0x1b7 [ 1799.743313][T16782] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1799.748783][T16782] dump_stack+0x15/0x17 [ 1799.752774][T16782] should_fail+0x3c6/0x510 [ 1799.757025][T16782] __should_failslab+0xa4/0xe0 [ 1799.761627][T16782] should_failslab+0x9/0x20 [ 1799.765961][T16782] slab_pre_alloc_hook+0x37/0xd0 [ 1799.770753][T16782] __kmalloc+0x6d/0x270 [ 1799.774729][T16782] ? kvmalloc_node+0x82/0x130 [ 1799.779243][T16782] kvmalloc_node+0x82/0x130 [ 1799.783590][T16782] alloc_fdtable+0x163/0x2a0 [ 1799.788012][T16782] dup_fd+0x759/0xb00 [ 1799.791827][T16782] ? avc_has_perm+0x16f/0x260 [ 1799.796341][T16782] copy_files+0xe6/0x200 [ 1799.800429][T16782] ? perf_event_attrs+0x30/0x30 [ 1799.805109][T16782] ? dup_task_struct+0xc60/0xc60 [ 1799.809886][T16782] ? security_task_alloc+0xf9/0x130 [ 1799.815173][T16782] copy_process+0x11f3/0x3260 [ 1799.819689][T16782] ? proc_fail_nth_write+0x20b/0x290 [ 1799.824816][T16782] ? fsnotify_perm+0x6a/0x5d0 [ 1799.829324][T16782] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1799.834268][T16782] ? vfs_write+0x9ec/0x1110 [ 1799.838617][T16782] kernel_clone+0x21e/0x9e0 [ 1799.842953][T16782] ? file_end_write+0x1c0/0x1c0 [ 1799.847649][T16782] ? create_io_thread+0x1e0/0x1e0 [ 1799.852496][T16782] ? mutex_unlock+0xb2/0x1b0 [ 1799.856924][T16782] ? __mutex_lock_slowpath+0x10/0x10 [ 1799.862051][T16782] __x64_sys_clone+0x23f/0x290 [ 1799.866645][T16782] ? __do_sys_vfork+0x130/0x130 [ 1799.872460][T16782] ? ksys_write+0x260/0x2c0 [ 1799.876821][T16782] ? debug_smp_processor_id+0x17/0x20 [ 1799.882015][T16782] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1799.887910][T16782] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1799.893376][T16782] do_syscall_64+0x3d/0xb0 [ 1799.897629][T16782] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1799.903357][T16782] RIP: 0033:0x7f72394e6b29 [ 1799.907616][T16782] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:33 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:33 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:33 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 11:06:33 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:33 executing program 5: bpf$MAP_CREATE(0x300, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:33 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xdc030000) [ 1799.927050][T16782] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1799.935297][T16782] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1799.943112][T16782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1799.950921][T16782] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1799.958729][T16782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1799.966546][T16782] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1799.974362][T16782] [ 1800.007186][T16801] FAULT_INJECTION: forcing a failure. [ 1800.007186][T16801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1800.030787][T16801] CPU: 0 PID: 16801 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1800.041225][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1800.051123][T16801] Call Trace: [ 1800.054238][T16801] [ 1800.057014][T16801] dump_stack_lvl+0x151/0x1b7 [ 1800.061534][T16801] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1800.066998][T16801] ? __alloc_pages+0x7b0/0x7b0 [ 1800.071605][T16801] dump_stack+0x15/0x17 [ 1800.075602][T16801] should_fail+0x3c6/0x510 [ 1800.079844][T16801] should_fail_alloc_page+0x5a/0x80 [ 1800.084885][T16801] __alloc_pages+0x1e6/0x7b0 [ 1800.089306][T16801] ? zone_watermark_fast+0x220/0x220 [ 1800.094424][T16801] ? __kasan_kmalloc+0x9/0x10 [ 1800.098939][T16801] ? __kmalloc+0x13a/0x270 [ 1800.103192][T16801] ? __vmalloc_node_range+0x2d6/0x8d0 [ 1800.108398][T16801] __vmalloc_node_range+0x482/0x8d0 [ 1800.113451][T16801] dup_task_struct+0x416/0xc60 [ 1800.118029][T16801] ? copy_process+0x5c4/0x3260 [ 1800.122634][T16801] ? __kasan_check_write+0x14/0x20 [ 1800.127579][T16801] copy_process+0x5c4/0x3260 [ 1800.132012][T16801] ? __kasan_check_write+0x14/0x20 [ 1800.136955][T16801] ? proc_fail_nth_write+0x20b/0x290 [ 1800.142075][T16801] ? selinux_file_permission+0x2c4/0x570 [ 1800.147630][T16801] ? fsnotify_perm+0x6a/0x5d0 [ 1800.152143][T16801] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1800.157092][T16801] ? vfs_write+0x9ec/0x1110 [ 1800.161430][T16801] kernel_clone+0x21e/0x9e0 [ 1800.165770][T16801] ? file_end_write+0x1c0/0x1c0 [ 1800.171242][T16801] ? create_io_thread+0x1e0/0x1e0 [ 1800.176099][T16801] ? mutex_unlock+0xb2/0x1b0 [ 1800.180524][T16801] ? __mutex_lock_slowpath+0x10/0x10 [ 1800.185644][T16801] __x64_sys_clone+0x23f/0x290 [ 1800.190332][T16801] ? __do_sys_vfork+0x130/0x130 [ 1800.195020][T16801] ? ksys_write+0x260/0x2c0 [ 1800.199361][T16801] ? debug_smp_processor_id+0x17/0x20 [ 1800.204564][T16801] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1800.210465][T16801] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1800.215935][T16801] do_syscall_64+0x3d/0xb0 [ 1800.220185][T16801] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1800.225916][T16801] RIP: 0033:0x7f72394e6b29 [ 1800.230168][T16801] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1800.249700][T16801] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:06:34 executing program 4: bpf$MAP_CREATE(0x1900, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:34 executing program 0: syz_clone(0x30000000, 0x0, 0x900, 0x0, 0x0, 0x0) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x321, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:34 executing program 5: bpf$MAP_CREATE(0x300, 0x0, 0x0) 11:06:34 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xde030000) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x322, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:34 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 11:06:34 executing program 4: bpf$MAP_CREATE(0x1a00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1800.257944][T16801] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1800.265757][T16801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1800.273575][T16801] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1800.281377][T16801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1800.289191][T16801] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1800.297005][T16801] 11:06:34 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfeffffff) [ 1800.335188][T16815] FAULT_INJECTION: forcing a failure. [ 1800.335188][T16815] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.362707][T16815] CPU: 0 PID: 16815 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1800.373249][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1800.383405][T16815] Call Trace: [ 1800.386535][T16815] [ 1800.389302][T16815] dump_stack_lvl+0x151/0x1b7 [ 1800.393824][T16815] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1800.399290][T16815] dump_stack+0x15/0x17 [ 1800.403281][T16815] should_fail+0x3c6/0x510 [ 1800.407547][T16815] __should_failslab+0xa4/0xe0 [ 1800.412142][T16815] ? copy_sighand+0x54/0x250 [ 1800.416557][T16815] should_failslab+0x9/0x20 [ 1800.420898][T16815] slab_pre_alloc_hook+0x37/0xd0 [ 1800.425676][T16815] ? copy_sighand+0x54/0x250 [ 1800.430097][T16815] kmem_cache_alloc+0x44/0x200 [ 1800.434704][T16815] copy_sighand+0x54/0x250 [ 1800.438950][T16815] copy_process+0x1249/0x3260 [ 1800.443467][T16815] ? proc_fail_nth_write+0x20b/0x290 [ 1800.448593][T16815] ? fsnotify_perm+0x6a/0x5d0 [ 1800.453097][T16815] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1800.458042][T16815] ? vfs_write+0x9ec/0x1110 [ 1800.462386][T16815] kernel_clone+0x21e/0x9e0 [ 1800.466728][T16815] ? file_end_write+0x1c0/0x1c0 [ 1800.471426][T16815] ? create_io_thread+0x1e0/0x1e0 [ 1800.476274][T16815] ? mutex_unlock+0xb2/0x1b0 [ 1800.480697][T16815] ? __mutex_lock_slowpath+0x10/0x10 [ 1800.485822][T16815] __x64_sys_clone+0x23f/0x290 [ 1800.490419][T16815] ? __do_sys_vfork+0x130/0x130 [ 1800.495105][T16815] ? ksys_write+0x260/0x2c0 [ 1800.499454][T16815] ? debug_smp_processor_id+0x17/0x20 [ 1800.504655][T16815] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1800.510562][T16815] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1800.516027][T16815] do_syscall_64+0x3d/0xb0 [ 1800.520273][T16815] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1800.526175][T16815] RIP: 0033:0x7f72394e6b29 [ 1800.530433][T16815] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1800.549873][T16815] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1800.558117][T16815] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1800.565931][T16815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1800.573765][T16815] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:34 executing program 5: syz_clone(0x30004000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:34 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000) 11:06:34 executing program 4: bpf$MAP_CREATE(0x1b00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x324, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:34 executing program 0: syz_clone(0x30000000, 0x0, 0xf00, 0x0, 0x0, 0x0) 11:06:34 executing program 4: bpf$MAP_CREATE(0x1c00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x325, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:34 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffe) 11:06:34 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 11:06:34 executing program 4: bpf$MAP_CREATE(0x1d00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x326, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1800.581555][T16815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1800.589366][T16815] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1800.597191][T16815] 11:06:34 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x200000000) [ 1800.667090][T16848] FAULT_INJECTION: forcing a failure. [ 1800.667090][T16848] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1800.690191][T16848] CPU: 0 PID: 16848 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1800.700678][T16848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1800.710666][T16848] Call Trace: [ 1800.713790][T16848] [ 1800.716565][T16848] dump_stack_lvl+0x151/0x1b7 [ 1800.721166][T16848] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1800.726660][T16848] ? __alloc_pages+0x7b0/0x7b0 [ 1800.731234][T16848] dump_stack+0x15/0x17 [ 1800.735230][T16848] should_fail+0x3c6/0x510 [ 1800.739480][T16848] should_fail_alloc_page+0x5a/0x80 [ 1800.744515][T16848] __alloc_pages+0x1e6/0x7b0 [ 1800.748941][T16848] ? zone_watermark_fast+0x220/0x220 [ 1800.754066][T16848] ? __kasan_kmalloc+0x9/0x10 [ 1800.758575][T16848] ? __kmalloc+0x13a/0x270 [ 1800.762828][T16848] ? __vmalloc_node_range+0x2d6/0x8d0 [ 1800.768040][T16848] __vmalloc_node_range+0x482/0x8d0 [ 1800.773074][T16848] dup_task_struct+0x416/0xc60 [ 1800.777757][T16848] ? copy_process+0x5c4/0x3260 [ 1800.782359][T16848] ? __kasan_check_write+0x14/0x20 [ 1800.787305][T16848] copy_process+0x5c4/0x3260 [ 1800.791738][T16848] ? __kasan_check_write+0x14/0x20 [ 1800.796689][T16848] ? proc_fail_nth_write+0x20b/0x290 [ 1800.801914][T16848] ? selinux_file_permission+0x2c4/0x570 [ 1800.807385][T16848] ? fsnotify_perm+0x6a/0x5d0 [ 1800.811895][T16848] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1800.816928][T16848] ? vfs_write+0x9ec/0x1110 [ 1800.821269][T16848] kernel_clone+0x21e/0x9e0 [ 1800.825784][T16848] ? file_end_write+0x1c0/0x1c0 [ 1800.830543][T16848] ? create_io_thread+0x1e0/0x1e0 [ 1800.835332][T16848] ? mutex_unlock+0xb2/0x1b0 [ 1800.839850][T16848] ? __mutex_lock_slowpath+0x10/0x10 [ 1800.844963][T16848] __x64_sys_clone+0x23f/0x290 [ 1800.849571][T16848] ? __do_sys_vfork+0x130/0x130 [ 1800.854251][T16848] ? ksys_write+0x260/0x2c0 [ 1800.858590][T16848] ? debug_smp_processor_id+0x17/0x20 [ 1800.863801][T16848] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1800.869712][T16848] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1800.875178][T16848] do_syscall_64+0x3d/0xb0 [ 1800.879425][T16848] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1800.885147][T16848] RIP: 0033:0x7f72394e6b29 [ 1800.889402][T16848] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1800.908845][T16848] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:06:34 executing program 5: syz_clone(0x30004000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:34 executing program 4: bpf$MAP_CREATE(0x1e00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:34 executing program 4: bpf$MAP_CREATE(0x1f00, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1800.917088][T16848] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1800.924899][T16848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1800.932712][T16848] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1800.940521][T16848] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1800.948336][T16848] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1800.956155][T16848] 11:06:34 executing program 0: syz_clone(0x30000000, 0x0, 0x1100, 0x0, 0x0, 0x0) 11:06:34 executing program 4: bpf$MAP_CREATE(0x2000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:34 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x328, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:34 executing program 5: syz_clone(0x30004000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:34 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x800000000) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:34 executing program 4: bpf$MAP_CREATE(0x2100, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1801.021163][T16866] FAULT_INJECTION: forcing a failure. [ 1801.021163][T16866] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.056791][T16866] CPU: 0 PID: 16866 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 11:06:34 executing program 4: bpf$MAP_CREATE(0x2200, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:34 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1801.067233][T16866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1801.077389][T16866] Call Trace: [ 1801.080516][T16866] [ 1801.083293][T16866] dump_stack_lvl+0x151/0x1b7 [ 1801.087811][T16866] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1801.093280][T16866] ? vmap_pages_range_noflush+0x7d5/0x800 [ 1801.098828][T16866] dump_stack+0x15/0x17 [ 1801.102820][T16866] should_fail+0x3c6/0x510 [ 1801.107068][T16866] __should_failslab+0xa4/0xe0 [ 1801.111678][T16866] ? prepare_creds+0x2f/0x6a0 [ 1801.116180][T16866] should_failslab+0x9/0x20 11:06:35 executing program 0: syz_clone(0x30000000, 0x0, 0x1f00, 0x0, 0x0, 0x0) 11:06:35 executing program 4: bpf$MAP_CREATE(0x2300, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1801.120524][T16866] slab_pre_alloc_hook+0x37/0xd0 [ 1801.125295][T16866] ? prepare_creds+0x2f/0x6a0 [ 1801.129808][T16866] kmem_cache_alloc+0x44/0x200 [ 1801.134434][T16866] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1801.139722][T16866] prepare_creds+0x2f/0x6a0 [ 1801.144045][T16866] copy_creds+0xf0/0x630 [ 1801.148135][T16866] ? dup_task_struct+0x7e6/0xc60 [ 1801.152900][T16866] copy_process+0x7c3/0x3260 [ 1801.157416][T16866] ? __kasan_check_write+0x14/0x20 [ 1801.162358][T16866] ? proc_fail_nth_write+0x20b/0x290 [ 1801.167485][T16866] ? selinux_file_permission+0x2c4/0x570 [ 1801.172949][T16866] ? fsnotify_perm+0x6a/0x5d0 [ 1801.177465][T16866] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1801.182409][T16866] ? vfs_write+0x9ec/0x1110 [ 1801.186748][T16866] kernel_clone+0x21e/0x9e0 [ 1801.191093][T16866] ? file_end_write+0x1c0/0x1c0 [ 1801.195862][T16866] ? create_io_thread+0x1e0/0x1e0 [ 1801.200823][T16866] ? mutex_unlock+0xb2/0x1b0 [ 1801.205234][T16866] ? __mutex_lock_slowpath+0x10/0x10 [ 1801.210355][T16866] __x64_sys_clone+0x23f/0x290 [ 1801.214954][T16866] ? __do_sys_vfork+0x130/0x130 [ 1801.219642][T16866] ? ksys_write+0x260/0x2c0 [ 1801.223984][T16866] ? debug_smp_processor_id+0x17/0x20 [ 1801.229190][T16866] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1801.235098][T16866] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1801.240577][T16866] do_syscall_64+0x3d/0xb0 [ 1801.244815][T16866] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1801.250660][T16866] RIP: 0033:0x7f72394e6b29 [ 1801.254911][T16866] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1801.274350][T16866] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1801.282602][T16866] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1801.290403][T16866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1801.298214][T16866] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1801.306030][T16866] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1801.313839][T16866] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1801.321667][T16866] 11:06:35 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 11:06:35 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:35 executing program 4: bpf$MAP_CREATE(0x1000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:35 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:35 executing program 0: syz_clone(0x30000000, 0x0, 0x2000, 0x0, 0x0, 0x0) 11:06:35 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1000001000) 11:06:35 executing program 4: bpf$MAP_CREATE(0x2000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:35 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000000000) 11:06:35 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:35 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:35 executing program 4: bpf$MAP_CREATE(0x3000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:35 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4000000000) [ 1801.464340][T16913] FAULT_INJECTION: forcing a failure. [ 1801.464340][T16913] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.506903][T16913] CPU: 0 PID: 16913 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1801.517340][T16913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1801.527244][T16913] Call Trace: [ 1801.530363][T16913] [ 1801.533141][T16913] dump_stack_lvl+0x151/0x1b7 [ 1801.537659][T16913] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1801.543121][T16913] ? lockref_get+0x184/0x220 [ 1801.547555][T16913] ? __io_wq_cpu_online+0x1d0/0x1d0 [ 1801.552581][T16913] ? _raw_spin_lock+0xa4/0x1b0 [ 1801.557193][T16913] dump_stack+0x15/0x17 [ 1801.561175][T16913] should_fail+0x3c6/0x510 [ 1801.565432][T16913] __should_failslab+0xa4/0xe0 [ 1801.570024][T16913] ? create_user_ns+0x55a/0x19d0 [ 1801.574800][T16913] should_failslab+0x9/0x20 [ 1801.579140][T16913] slab_pre_alloc_hook+0x37/0xd0 [ 1801.584002][T16913] ? create_user_ns+0x55a/0x19d0 [ 1801.588777][T16913] kmem_cache_alloc+0x44/0x200 [ 1801.593376][T16913] create_user_ns+0x55a/0x19d0 [ 1801.597977][T16913] ? utsns_owner+0x40/0x40 [ 1801.602227][T16913] ? security_prepare_creds+0x102/0x140 [ 1801.607608][T16913] ? prepare_creds+0x486/0x6a0 [ 1801.612209][T16913] copy_creds+0x20e/0x630 [ 1801.616371][T16913] ? dup_task_struct+0x7e6/0xc60 [ 1801.621145][T16913] copy_process+0x7c3/0x3260 [ 1801.625590][T16913] ? __kasan_check_write+0x14/0x20 [ 1801.630533][T16913] ? proc_fail_nth_write+0x20b/0x290 [ 1801.635652][T16913] ? selinux_file_permission+0x2c4/0x570 [ 1801.641111][T16913] ? fsnotify_perm+0x6a/0x5d0 [ 1801.645710][T16913] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1801.650656][T16913] ? vfs_write+0x9ec/0x1110 [ 1801.654999][T16913] kernel_clone+0x21e/0x9e0 [ 1801.659338][T16913] ? file_end_write+0x1c0/0x1c0 [ 1801.664049][T16913] ? create_io_thread+0x1e0/0x1e0 [ 1801.668890][T16913] ? mutex_unlock+0xb2/0x1b0 [ 1801.673313][T16913] ? __mutex_lock_slowpath+0x10/0x10 [ 1801.678437][T16913] __x64_sys_clone+0x23f/0x290 [ 1801.683038][T16913] ? __do_sys_vfork+0x130/0x130 [ 1801.687714][T16913] ? ksys_write+0x260/0x2c0 [ 1801.692085][T16913] ? debug_smp_processor_id+0x17/0x20 [ 1801.697265][T16913] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1801.703165][T16913] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1801.708634][T16913] do_syscall_64+0x3d/0xb0 [ 1801.712886][T16913] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1801.718704][T16913] RIP: 0033:0x7f72394e6b29 [ 1801.722956][T16913] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1801.742399][T16913] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:06:35 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 11:06:35 executing program 4: bpf$MAP_CREATE(0x4000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:35 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:35 executing program 0: syz_clone(0x30000000, 0x0, 0x3f00, 0x0, 0x0, 0x0) 11:06:35 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:35 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1000000000000) 11:06:35 executing program 4: bpf$MAP_CREATE(0x5000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:35 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:35 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000000000000) [ 1801.750643][T16913] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1801.758454][T16913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1801.766269][T16913] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1801.774083][T16913] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1801.781891][T16913] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1801.790228][T16913] 11:06:35 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x331, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:35 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4000000000000) 11:06:35 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x10000010000000) [ 1801.858013][T16935] FAULT_INJECTION: forcing a failure. [ 1801.858013][T16935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1801.908442][T16935] CPU: 1 PID: 16935 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1801.918967][T16935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1801.928865][T16935] Call Trace: [ 1801.931982][T16935] [ 1801.934765][T16935] dump_stack_lvl+0x151/0x1b7 [ 1801.939278][T16935] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1801.944743][T16935] ? pcpu_block_update_hint_alloc+0x948/0xcf0 [ 1801.950649][T16935] dump_stack+0x15/0x17 [ 1801.954641][T16935] should_fail+0x3c6/0x510 [ 1801.958889][T16935] should_fail_alloc_page+0x5a/0x80 [ 1801.963963][T16935] __alloc_pages+0x1e6/0x7b0 [ 1801.968350][T16935] ? zone_watermark_fast+0x220/0x220 [ 1801.973469][T16935] ? pcpu_alloc+0xda0/0x13e0 [ 1801.977901][T16935] __get_free_pages+0xe/0x30 [ 1801.982324][T16935] pgd_alloc+0x21/0x2c0 [ 1801.986317][T16935] mm_init+0x5c7/0x970 [ 1801.990220][T16935] dup_mm+0xe5/0x12c0 [ 1801.994043][T16935] ? __kasan_check_write+0x14/0x20 [ 1801.999016][T16935] ? copy_init_mm+0x20/0x20 [ 1802.003328][T16935] copy_mm+0x107/0x1b0 [ 1802.007235][T16935] copy_process+0x12bc/0x3260 [ 1802.011749][T16935] ? proc_fail_nth_write+0x20b/0x290 [ 1802.016873][T16935] ? fsnotify_perm+0x6a/0x5d0 [ 1802.021382][T16935] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1802.026331][T16935] ? vfs_write+0x9ec/0x1110 [ 1802.030670][T16935] kernel_clone+0x21e/0x9e0 [ 1802.035010][T16935] ? file_end_write+0x1c0/0x1c0 [ 1802.039694][T16935] ? create_io_thread+0x1e0/0x1e0 [ 1802.044556][T16935] ? mutex_unlock+0xb2/0x1b0 [ 1802.048989][T16935] ? __mutex_lock_slowpath+0x10/0x10 [ 1802.054107][T16935] __x64_sys_clone+0x23f/0x290 [ 1802.058706][T16935] ? __do_sys_vfork+0x130/0x130 [ 1802.063388][T16935] ? ksys_write+0x260/0x2c0 [ 1802.067738][T16935] ? debug_smp_processor_id+0x17/0x20 [ 1802.072939][T16935] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1802.078841][T16935] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1802.084311][T16935] do_syscall_64+0x3d/0xb0 [ 1802.088558][T16935] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1802.094292][T16935] RIP: 0033:0x7f72394e6b29 [ 1802.098548][T16935] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1802.117983][T16935] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1802.126228][T16935] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1802.134039][T16935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1802.141850][T16935] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1802.149840][T16935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 11:06:36 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 11:06:36 executing program 5: syz_clone(0x30002000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:36 executing program 4: bpf$MAP_CREATE(0x6000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:36 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x40000000000000) 11:06:36 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x332, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:36 executing program 0: syz_clone(0x30000000, 0x0, 0x4000, 0x0, 0x0, 0x0) 11:06:36 executing program 4: bpf$MAP_CREATE(0x7000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:36 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x40000100000000) [ 1802.157655][T16935] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1802.165475][T16935] 11:06:36 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x333, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:36 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:36 executing program 4: bpf$MAP_CREATE(0x8000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:36 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x80ffff00000000) [ 1802.210524][T16961] FAULT_INJECTION: forcing a failure. [ 1802.210524][T16961] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.266292][T16961] CPU: 0 PID: 16961 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1802.276739][T16961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1802.286638][T16961] Call Trace: [ 1802.289761][T16961] [ 1802.292539][T16961] dump_stack_lvl+0x151/0x1b7 [ 1802.297081][T16961] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1802.302519][T16961] ? __alloc_pages+0x386/0x7b0 [ 1802.307121][T16961] dump_stack+0x15/0x17 [ 1802.311228][T16961] should_fail+0x3c6/0x510 [ 1802.315573][T16961] __should_failslab+0xa4/0xe0 [ 1802.320163][T16961] ? vm_area_dup+0x26/0x230 [ 1802.324516][T16961] should_failslab+0x9/0x20 [ 1802.328842][T16961] slab_pre_alloc_hook+0x37/0xd0 [ 1802.333619][T16961] ? vm_area_dup+0x26/0x230 [ 1802.338064][T16961] kmem_cache_alloc+0x44/0x200 [ 1802.342670][T16961] vm_area_dup+0x26/0x230 [ 1802.346838][T16961] dup_mm+0x81b/0x12c0 [ 1802.350738][T16961] ? copy_init_mm+0x20/0x20 [ 1802.355087][T16961] copy_mm+0x107/0x1b0 [ 1802.358982][T16961] copy_process+0x12bc/0x3260 [ 1802.363508][T16961] ? proc_fail_nth_write+0x20b/0x290 [ 1802.368613][T16961] ? fsnotify_perm+0x6a/0x5d0 [ 1802.373247][T16961] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1802.378554][T16961] ? vfs_write+0x9ec/0x1110 [ 1802.382878][T16961] kernel_clone+0x21e/0x9e0 [ 1802.387214][T16961] ? file_end_write+0x1c0/0x1c0 [ 1802.391992][T16961] ? create_io_thread+0x1e0/0x1e0 [ 1802.396851][T16961] ? mutex_unlock+0xb2/0x1b0 [ 1802.401274][T16961] ? __mutex_lock_slowpath+0x10/0x10 [ 1802.406399][T16961] __x64_sys_clone+0x23f/0x290 [ 1802.411002][T16961] ? __do_sys_vfork+0x130/0x130 [ 1802.415684][T16961] ? ksys_write+0x260/0x2c0 [ 1802.420027][T16961] ? debug_smp_processor_id+0x17/0x20 [ 1802.425229][T16961] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1802.431223][T16961] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1802.436773][T16961] do_syscall_64+0x3d/0xb0 [ 1802.441031][T16961] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1802.446754][T16961] RIP: 0033:0x7f72394e6b29 [ 1802.451012][T16961] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1802.470461][T16961] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1802.478698][T16961] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1802.486506][T16961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1802.494416][T16961] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1802.502214][T16961] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1802.510047][T16961] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1802.517842][T16961] 11:06:36 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 11:06:36 executing program 5: syz_clone(0x30002000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:36 executing program 4: bpf$MAP_CREATE(0x9000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:36 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x100000000000000) 11:06:36 executing program 0: syz_clone(0x30000000, 0x0, 0x4100, 0x0, 0x0, 0x0) 11:06:36 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x335, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:36 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x336, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:36 executing program 4: bpf$MAP_CREATE(0xa000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:36 executing program 5: syz_clone(0x30002000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:36 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x200000000000000) 11:06:36 executing program 4: bpf$MAP_CREATE(0xb000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:36 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x300000000000000) [ 1802.700284][T16985] FAULT_INJECTION: forcing a failure. [ 1802.700284][T16985] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.742151][T16985] CPU: 0 PID: 16985 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1802.752596][T16985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1802.762504][T16985] Call Trace: [ 1802.765613][T16985] [ 1802.768389][T16985] dump_stack_lvl+0x151/0x1b7 [ 1802.772903][T16985] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1802.778371][T16985] ? avc_denied+0x1b0/0x1b0 [ 1802.782719][T16985] dump_stack+0x15/0x17 [ 1802.786699][T16985] should_fail+0x3c6/0x510 [ 1802.790957][T16985] __should_failslab+0xa4/0xe0 [ 1802.795556][T16985] ? vm_area_dup+0x26/0x230 [ 1802.799907][T16985] should_failslab+0x9/0x20 [ 1802.804241][T16985] slab_pre_alloc_hook+0x37/0xd0 [ 1802.809009][T16985] ? vm_area_dup+0x26/0x230 [ 1802.813359][T16985] kmem_cache_alloc+0x44/0x200 [ 1802.817953][T16985] vm_area_dup+0x26/0x230 [ 1802.822113][T16985] dup_mm+0x81b/0x12c0 [ 1802.826019][T16985] ? copy_init_mm+0x20/0x20 [ 1802.830366][T16985] copy_mm+0x107/0x1b0 [ 1802.834268][T16985] copy_process+0x12bc/0x3260 [ 1802.838784][T16985] ? proc_fail_nth_write+0x20b/0x290 [ 1802.844181][T16985] ? fsnotify_perm+0x6a/0x5d0 [ 1802.848820][T16985] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1802.853783][T16985] ? vfs_write+0x9ec/0x1110 [ 1802.858108][T16985] kernel_clone+0x21e/0x9e0 [ 1802.862616][T16985] ? file_end_write+0x1c0/0x1c0 [ 1802.867303][T16985] ? create_io_thread+0x1e0/0x1e0 [ 1802.872174][T16985] ? mutex_unlock+0xb2/0x1b0 [ 1802.876677][T16985] ? __mutex_lock_slowpath+0x10/0x10 [ 1802.881977][T16985] __x64_sys_clone+0x23f/0x290 [ 1802.886569][T16985] ? __do_sys_vfork+0x130/0x130 [ 1802.891263][T16985] ? ksys_write+0x260/0x2c0 [ 1802.895603][T16985] ? debug_smp_processor_id+0x17/0x20 [ 1802.900804][T16985] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1802.906709][T16985] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1802.912178][T16985] do_syscall_64+0x3d/0xb0 [ 1802.916425][T16985] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1802.922158][T16985] RIP: 0033:0x7f72394e6b29 [ 1802.926409][T16985] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1802.945851][T16985] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1802.954098][T16985] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1802.961910][T16985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1802.969719][T16985] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1802.977532][T16985] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1802.985350][T16985] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1802.993165][T16985] 11:06:36 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 11:06:36 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x337, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:36 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:36 executing program 4: bpf$MAP_CREATE(0xc000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:36 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x400000000000000) 11:06:36 executing program 0: syz_clone(0x30000000, 0x0, 0x7000, 0x0, 0x0, 0x0) 11:06:36 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:37 executing program 4: bpf$MAP_CREATE(0xd000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:37 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x700000000000000) 11:06:37 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x338, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:37 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1803.131056][T17016] FAULT_INJECTION: forcing a failure. [ 1803.131056][T17016] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.162580][T17016] CPU: 0 PID: 17016 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1803.173054][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1803.182949][T17016] Call Trace: [ 1803.186204][T17016] [ 1803.188934][T17016] dump_stack_lvl+0x151/0x1b7 [ 1803.193449][T17016] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1803.198919][T17016] dump_stack+0x15/0x17 [ 1803.202911][T17016] should_fail+0x3c6/0x510 [ 1803.207168][T17016] __should_failslab+0xa4/0xe0 [ 1803.211765][T17016] ? vm_area_dup+0x26/0x230 [ 1803.216186][T17016] should_failslab+0x9/0x20 [ 1803.220527][T17016] slab_pre_alloc_hook+0x37/0xd0 [ 1803.225301][T17016] ? vm_area_dup+0x26/0x230 [ 1803.229640][T17016] kmem_cache_alloc+0x44/0x200 [ 1803.234325][T17016] vm_area_dup+0x26/0x230 [ 1803.238494][T17016] dup_mm+0x81b/0x12c0 [ 1803.242404][T17016] ? copy_init_mm+0x20/0x20 [ 1803.246740][T17016] copy_mm+0x107/0x1b0 [ 1803.250647][T17016] copy_process+0x12bc/0x3260 [ 1803.255169][T17016] ? proc_fail_nth_write+0x20b/0x290 [ 1803.260292][T17016] ? fsnotify_perm+0x6a/0x5d0 [ 1803.264793][T17016] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1803.269743][T17016] ? vfs_write+0x9ec/0x1110 [ 1803.274096][T17016] kernel_clone+0x21e/0x9e0 [ 1803.278417][T17016] ? file_end_write+0x1c0/0x1c0 [ 1803.283104][T17016] ? create_io_thread+0x1e0/0x1e0 [ 1803.287964][T17016] ? mutex_unlock+0xb2/0x1b0 [ 1803.292397][T17016] ? __mutex_lock_slowpath+0x10/0x10 [ 1803.297519][T17016] __x64_sys_clone+0x23f/0x290 [ 1803.302113][T17016] ? __do_sys_vfork+0x130/0x130 [ 1803.306885][T17016] ? ksys_write+0x260/0x2c0 [ 1803.311228][T17016] ? debug_smp_processor_id+0x17/0x20 [ 1803.316522][T17016] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1803.322425][T17016] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1803.328327][T17016] do_syscall_64+0x3d/0xb0 [ 1803.332662][T17016] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1803.338392][T17016] RIP: 0033:0x7f72394e6b29 [ 1803.342647][T17016] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1803.362174][T17016] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1803.370422][T17016] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:06:37 executing program 4: bpf$MAP_CREATE(0xe000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1803.378232][T17016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1803.386047][T17016] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1803.393854][T17016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1803.401758][T17016] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1803.409569][T17016] 11:06:37 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 11:06:37 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:37 executing program 5: syz_clone(0x30000000, 0x0, 0x3f00, 0x0, 0x0, 0x0) 11:06:37 executing program 4: bpf$MAP_CREATE(0xf000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:37 executing program 0: syz_clone(0x30000000, 0x0, 0x10fff, 0x0, 0x0, 0x0) 11:06:37 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x800000000000000) 11:06:37 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:37 executing program 4: bpf$MAP_CREATE(0x10000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:37 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc00000000000000) 11:06:37 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:37 executing program 4: bpf$MAP_CREATE(0x11000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:37 executing program 5: syz_clone(0x30001100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:37 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1000000000000000) [ 1803.583495][T17048] FAULT_INJECTION: forcing a failure. [ 1803.583495][T17048] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.638849][T17048] CPU: 1 PID: 17048 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1803.649298][T17048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1803.659188][T17048] Call Trace: [ 1803.662320][T17048] [ 1803.665116][T17048] dump_stack_lvl+0x151/0x1b7 [ 1803.669696][T17048] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1803.675430][T17048] ? avc_has_perm_noaudit+0x348/0x430 [ 1803.680636][T17048] dump_stack+0x15/0x17 [ 1803.684623][T17048] should_fail+0x3c6/0x510 [ 1803.688873][T17048] __should_failslab+0xa4/0xe0 [ 1803.693471][T17048] ? dup_fd+0x72/0xb00 [ 1803.697466][T17048] should_failslab+0x9/0x20 [ 1803.701804][T17048] slab_pre_alloc_hook+0x37/0xd0 [ 1803.706580][T17048] ? dup_fd+0x72/0xb00 [ 1803.710482][T17048] kmem_cache_alloc+0x44/0x200 [ 1803.715088][T17048] dup_fd+0x72/0xb00 [ 1803.718814][T17048] ? avc_has_perm+0x16f/0x260 [ 1803.723329][T17048] ? avc_has_perm_noaudit+0x430/0x430 [ 1803.728537][T17048] copy_files+0xe6/0x200 [ 1803.732761][T17048] ? perf_event_attrs+0x30/0x30 [ 1803.737446][T17048] ? dup_task_struct+0xc60/0xc60 [ 1803.742238][T17048] ? security_task_alloc+0xf9/0x130 [ 1803.747543][T17048] copy_process+0x11f3/0x3260 [ 1803.752206][T17048] ? proc_fail_nth_write+0x20b/0x290 [ 1803.757594][T17048] ? fsnotify_perm+0x6a/0x5d0 [ 1803.762188][T17048] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1803.767739][T17048] ? vfs_write+0x9ec/0x1110 [ 1803.772308][T17048] kernel_clone+0x21e/0x9e0 [ 1803.776741][T17048] ? file_end_write+0x1c0/0x1c0 [ 1803.781761][T17048] ? create_io_thread+0x1e0/0x1e0 [ 1803.786645][T17048] ? mutex_unlock+0xb2/0x1b0 [ 1803.791048][T17048] ? __mutex_lock_slowpath+0x10/0x10 [ 1803.796309][T17048] __x64_sys_clone+0x23f/0x290 [ 1803.800908][T17048] ? __do_sys_vfork+0x130/0x130 [ 1803.805598][T17048] ? ksys_write+0x260/0x2c0 [ 1803.810057][T17048] ? debug_smp_processor_id+0x17/0x20 [ 1803.815771][T17048] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1803.821673][T17048] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1803.827231][T17048] do_syscall_64+0x3d/0xb0 [ 1803.831492][T17048] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1803.837334][T17048] RIP: 0033:0x7f72394e6b29 [ 1803.841549][T17048] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1803.862801][T17048] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1803.871240][T17048] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1803.879142][T17048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1803.886982][T17048] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1803.894942][T17048] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1803.903321][T17048] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1803.911731][T17048] 11:06:37 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 11:06:37 executing program 4: bpf$MAP_CREATE(0x12000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:37 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:37 executing program 0: syz_clone(0x30000000, 0x0, 0x20200, 0x0, 0x0, 0x0) 11:06:37 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1500000000000000) 11:06:37 executing program 5: syz_clone(0x30001100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:37 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2d03000000000000) 11:06:37 executing program 4: bpf$MAP_CREATE(0x13000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:37 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:37 executing program 4: bpf$MAP_CREATE(0x14000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:37 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3203000000000000) [ 1803.984263][T17070] FAULT_INJECTION: forcing a failure. [ 1803.984263][T17070] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.010355][T17070] CPU: 0 PID: 17070 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1804.020796][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1804.030701][T17070] Call Trace: 11:06:37 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4000000000000000) [ 1804.033830][T17070] [ 1804.036865][T17070] dump_stack_lvl+0x151/0x1b7 [ 1804.041409][T17070] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1804.047402][T17070] ? avc_denied+0x1b0/0x1b0 [ 1804.052129][T17070] dump_stack+0x15/0x17 [ 1804.056093][T17070] should_fail+0x3c6/0x510 [ 1804.060534][T17070] __should_failslab+0xa4/0xe0 [ 1804.065447][T17070] ? vm_area_dup+0x26/0x230 [ 1804.069769][T17070] should_failslab+0x9/0x20 [ 1804.074439][T17070] slab_pre_alloc_hook+0x37/0xd0 [ 1804.079352][T17070] ? vm_area_dup+0x26/0x230 [ 1804.083850][T17070] kmem_cache_alloc+0x44/0x200 [ 1804.088440][T17070] vm_area_dup+0x26/0x230 [ 1804.092810][T17070] dup_mm+0x81b/0x12c0 [ 1804.096712][T17070] ? copy_init_mm+0x20/0x20 [ 1804.101052][T17070] copy_mm+0x107/0x1b0 [ 1804.104959][T17070] copy_process+0x12bc/0x3260 [ 1804.109542][T17070] ? proc_fail_nth_write+0x20b/0x290 [ 1804.114634][T17070] ? fsnotify_perm+0x6a/0x5d0 [ 1804.119187][T17070] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1804.124342][T17070] ? vfs_write+0x9ec/0x1110 [ 1804.128755][T17070] kernel_clone+0x21e/0x9e0 [ 1804.133105][T17070] ? file_end_write+0x1c0/0x1c0 [ 1804.137865][T17070] ? create_io_thread+0x1e0/0x1e0 [ 1804.142728][T17070] ? mutex_unlock+0xb2/0x1b0 [ 1804.147154][T17070] ? __mutex_lock_slowpath+0x10/0x10 [ 1804.152737][T17070] __x64_sys_clone+0x23f/0x290 [ 1804.157417][T17070] ? __do_sys_vfork+0x130/0x130 [ 1804.162366][T17070] ? ksys_write+0x260/0x2c0 [ 1804.167256][T17070] ? debug_smp_processor_id+0x17/0x20 [ 1804.172633][T17070] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1804.178629][T17070] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1804.184220][T17070] do_syscall_64+0x3d/0xb0 [ 1804.188468][T17070] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1804.194280][T17070] RIP: 0033:0x7f72394e6b29 [ 1804.198621][T17070] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1804.218143][T17070] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1804.227006][T17070] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:06:38 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 11:06:38 executing program 4: bpf$MAP_CREATE(0x15000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:38 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4800000000000000) [ 1804.234982][T17070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1804.243636][T17070] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1804.251933][T17070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1804.260477][T17070] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1804.268650][T17070] [ 1804.309976][T17089] FAULT_INJECTION: forcing a failure. [ 1804.309976][T17089] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.360037][T17089] CPU: 1 PID: 17089 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1804.370484][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1804.380380][T17089] Call Trace: [ 1804.383531][T17089] [ 1804.386281][T17089] dump_stack_lvl+0x151/0x1b7 [ 1804.390800][T17089] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1804.396370][T17089] dump_stack+0x15/0x17 [ 1804.400475][T17089] should_fail+0x3c6/0x510 [ 1804.404737][T17089] __should_failslab+0xa4/0xe0 [ 1804.409328][T17089] should_failslab+0x9/0x20 [ 1804.413668][T17089] slab_pre_alloc_hook+0x37/0xd0 [ 1804.418444][T17089] __kmalloc+0x6d/0x270 [ 1804.422433][T17089] ? kvmalloc_node+0x82/0x130 [ 1804.426950][T17089] kvmalloc_node+0x82/0x130 [ 1804.431373][T17089] alloc_fdtable+0xeb/0x2a0 [ 1804.435712][T17089] dup_fd+0x759/0xb00 [ 1804.439546][T17089] ? avc_has_perm+0x16f/0x260 [ 1804.444045][T17089] copy_files+0xe6/0x200 [ 1804.448122][T17089] ? perf_event_attrs+0x30/0x30 [ 1804.452903][T17089] ? dup_task_struct+0xc60/0xc60 [ 1804.457670][T17089] ? security_task_alloc+0xf9/0x130 [ 1804.462702][T17089] copy_process+0x11f3/0x3260 [ 1804.467240][T17089] ? proc_fail_nth_write+0x20b/0x290 [ 1804.472339][T17089] ? fsnotify_perm+0x6a/0x5d0 [ 1804.476937][T17089] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1804.481883][T17089] ? vfs_write+0x9ec/0x1110 [ 1804.486339][T17089] kernel_clone+0x21e/0x9e0 [ 1804.490782][T17089] ? file_end_write+0x1c0/0x1c0 [ 1804.495467][T17089] ? create_io_thread+0x1e0/0x1e0 [ 1804.500332][T17089] ? mutex_unlock+0xb2/0x1b0 [ 1804.504762][T17089] ? __mutex_lock_slowpath+0x10/0x10 [ 1804.509879][T17089] __x64_sys_clone+0x23f/0x290 [ 1804.514475][T17089] ? __do_sys_vfork+0x130/0x130 [ 1804.519163][T17089] ? ksys_write+0x260/0x2c0 [ 1804.523509][T17089] ? debug_smp_processor_id+0x17/0x20 [ 1804.528712][T17089] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1804.534631][T17089] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1804.540081][T17089] do_syscall_64+0x3d/0xb0 [ 1804.544330][T17089] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1804.550147][T17089] RIP: 0033:0x7f72394e6b29 [ 1804.554403][T17089] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1804.573843][T17089] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1804.583045][T17089] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1804.590854][T17089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1804.598669][T17089] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1804.606475][T17089] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1804.614720][T17089] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1804.622542][T17089] 11:06:38 executing program 0: syz_clone(0x30000000, 0x0, 0x3ffff, 0x0, 0x0, 0x0) 11:06:38 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:38 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4901000000000000) 11:06:38 executing program 5: syz_clone(0x30001100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:38 executing program 4: bpf$MAP_CREATE(0x16000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:38 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 11:06:38 executing program 4: bpf$MAP_CREATE(0x17000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:38 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4a00000000000000) 11:06:38 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:38 executing program 4: bpf$MAP_CREATE(0x18000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:38 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5400000000000000) 11:06:38 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1804.842901][T17114] FAULT_INJECTION: forcing a failure. [ 1804.842901][T17114] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.855517][T17114] CPU: 1 PID: 17114 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1804.865860][T17114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1804.875752][T17114] Call Trace: [ 1804.878877][T17114] [ 1804.881651][T17114] dump_stack_lvl+0x151/0x1b7 [ 1804.886174][T17114] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1804.891633][T17114] dump_stack+0x15/0x17 [ 1804.895798][T17114] should_fail+0x3c6/0x510 [ 1804.900057][T17114] __should_failslab+0xa4/0xe0 [ 1804.904658][T17114] should_failslab+0x9/0x20 [ 1804.908992][T17114] slab_pre_alloc_hook+0x37/0xd0 [ 1804.913864][T17114] __kmalloc+0x6d/0x270 [ 1804.917844][T17114] ? kvmalloc_node+0x82/0x130 [ 1804.922359][T17114] kvmalloc_node+0x82/0x130 [ 1804.926694][T17114] alloc_fdtable+0x163/0x2a0 [ 1804.931125][T17114] dup_fd+0x759/0xb00 [ 1804.934939][T17114] ? avc_has_perm+0x16f/0x260 [ 1804.939459][T17114] copy_files+0xe6/0x200 [ 1804.943532][T17114] ? perf_event_attrs+0x30/0x30 [ 1804.948227][T17114] ? dup_task_struct+0xc60/0xc60 [ 1804.953001][T17114] ? security_task_alloc+0xf9/0x130 [ 1804.958028][T17114] copy_process+0x11f3/0x3260 [ 1804.962549][T17114] ? proc_fail_nth_write+0x20b/0x290 [ 1804.967675][T17114] ? fsnotify_perm+0x6a/0x5d0 [ 1804.972195][T17114] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1804.977127][T17114] ? vfs_write+0x9ec/0x1110 [ 1804.981494][T17114] kernel_clone+0x21e/0x9e0 [ 1804.985890][T17114] ? file_end_write+0x1c0/0x1c0 [ 1804.990668][T17114] ? create_io_thread+0x1e0/0x1e0 [ 1804.995528][T17114] ? mutex_unlock+0xb2/0x1b0 [ 1804.999962][T17114] ? __mutex_lock_slowpath+0x10/0x10 [ 1805.005118][T17114] __x64_sys_clone+0x23f/0x290 [ 1805.009761][T17114] ? __do_sys_vfork+0x130/0x130 [ 1805.014534][T17114] ? ksys_write+0x260/0x2c0 [ 1805.018877][T17114] ? debug_smp_processor_id+0x17/0x20 [ 1805.024076][T17114] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1805.029984][T17114] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1805.035631][T17114] do_syscall_64+0x3d/0xb0 [ 1805.039879][T17114] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1805.045612][T17114] RIP: 0033:0x7f72394e6b29 [ 1805.050039][T17114] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1805.069489][T17114] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1805.077720][T17114] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1805.085751][T17114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:39 executing program 0: syz_clone(0x30000000, 0x0, 0x40000, 0x0, 0x0, 0x0) 11:06:39 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5402000000000000) 11:06:39 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x341, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:39 executing program 4: bpf$MAP_CREATE(0x19000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:39 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:39 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 11:06:39 executing program 4: bpf$MAP_CREATE(0x1a000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:39 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5a03000000000000) 11:06:39 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x342, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1805.093555][T17114] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1805.101368][T17114] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1805.109187][T17114] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1805.116997][T17114] 11:06:39 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6403000000000000) 11:06:39 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x343, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:39 executing program 4: bpf$MAP_CREATE(0x1b000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1805.203288][T17135] FAULT_INJECTION: forcing a failure. [ 1805.203288][T17135] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.235311][T17135] CPU: 1 PID: 17135 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1805.245927][T17135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1805.255924][T17135] Call Trace: [ 1805.259047][T17135] [ 1805.261814][T17135] dump_stack_lvl+0x151/0x1b7 [ 1805.266334][T17135] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1805.271800][T17135] dump_stack+0x15/0x17 [ 1805.275793][T17135] should_fail+0x3c6/0x510 [ 1805.280043][T17135] __should_failslab+0xa4/0xe0 [ 1805.284644][T17135] ? anon_vma_clone+0x9a/0x500 [ 1805.289249][T17135] should_failslab+0x9/0x20 [ 1805.293595][T17135] slab_pre_alloc_hook+0x37/0xd0 [ 1805.298462][T17135] ? anon_vma_clone+0x9a/0x500 [ 1805.303328][T17135] kmem_cache_alloc+0x44/0x200 [ 1805.307927][T17135] anon_vma_clone+0x9a/0x500 [ 1805.312458][T17135] anon_vma_fork+0x91/0x4e0 [ 1805.316793][T17135] ? anon_vma_name+0x4c/0x70 [ 1805.321219][T17135] ? vm_area_dup+0x17a/0x230 [ 1805.325644][T17135] dup_mm+0x8c5/0x12c0 [ 1805.329557][T17135] ? copy_init_mm+0x20/0x20 [ 1805.333896][T17135] copy_mm+0x107/0x1b0 [ 1805.337797][T17135] copy_process+0x12bc/0x3260 [ 1805.342313][T17135] ? proc_fail_nth_write+0x20b/0x290 [ 1805.347437][T17135] ? fsnotify_perm+0x6a/0x5d0 [ 1805.351949][T17135] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1805.356891][T17135] ? vfs_write+0x9ec/0x1110 [ 1805.361236][T17135] kernel_clone+0x21e/0x9e0 [ 1805.365576][T17135] ? file_end_write+0x1c0/0x1c0 [ 1805.370261][T17135] ? create_io_thread+0x1e0/0x1e0 [ 1805.375118][T17135] ? mutex_unlock+0xb2/0x1b0 [ 1805.379545][T17135] ? __mutex_lock_slowpath+0x10/0x10 [ 1805.384672][T17135] __x64_sys_clone+0x23f/0x290 [ 1805.389279][T17135] ? __do_sys_vfork+0x130/0x130 [ 1805.393970][T17135] ? ksys_write+0x260/0x2c0 [ 1805.398385][T17135] ? debug_smp_processor_id+0x17/0x20 [ 1805.403590][T17135] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1805.409491][T17135] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1805.415139][T17135] do_syscall_64+0x3d/0xb0 [ 1805.419388][T17135] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1805.425546][T17135] RIP: 0033:0x7f72394e6b29 [ 1805.429798][T17135] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:39 executing program 0: syz_clone(0x30000000, 0x0, 0x80000, 0x0, 0x0, 0x0) 11:06:39 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:39 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:39 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6a02000000000000) 11:06:39 executing program 4: bpf$MAP_CREATE(0x1c000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1805.449428][T17135] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1805.457683][T17135] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1805.465484][T17135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1805.473297][T17135] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1805.481138][T17135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1805.489004][T17135] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1805.496825][T17135] 11:06:39 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 11:06:39 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:39 executing program 4: bpf$MAP_CREATE(0x1d000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:39 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7602000000000000) 11:06:39 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:39 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x346, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:39 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7e02000000000000) [ 1805.672277][T17172] FAULT_INJECTION: forcing a failure. [ 1805.672277][T17172] name failslab, interval 1, probability 0, space 0, times 0 11:06:39 executing program 0: syz_clone(0x30000000, 0x0, 0x101000, 0x0, 0x0, 0x0) 11:06:39 executing program 4: bpf$MAP_CREATE(0x1e000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:39 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:39 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8900000000000000) 11:06:39 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1805.713555][T17172] CPU: 0 PID: 17172 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1805.723991][T17172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1805.733887][T17172] Call Trace: [ 1805.737006][T17172] [ 1805.739786][T17172] dump_stack_lvl+0x151/0x1b7 [ 1805.744302][T17172] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1805.749774][T17172] dump_stack+0x15/0x17 [ 1805.753765][T17172] should_fail+0x3c6/0x510 [ 1805.758017][T17172] __should_failslab+0xa4/0xe0 [ 1805.762613][T17172] ? anon_vma_fork+0xf7/0x4e0 [ 1805.767143][T17172] should_failslab+0x9/0x20 [ 1805.771469][T17172] slab_pre_alloc_hook+0x37/0xd0 [ 1805.776239][T17172] ? anon_vma_fork+0xf7/0x4e0 [ 1805.780752][T17172] kmem_cache_alloc+0x44/0x200 [ 1805.785357][T17172] anon_vma_fork+0xf7/0x4e0 [ 1805.789697][T17172] ? anon_vma_name+0x4c/0x70 [ 1805.794239][T17172] ? vm_area_dup+0x17a/0x230 [ 1805.798662][T17172] dup_mm+0x8c5/0x12c0 [ 1805.802571][T17172] ? copy_init_mm+0x20/0x20 [ 1805.806911][T17172] copy_mm+0x107/0x1b0 [ 1805.810820][T17172] copy_process+0x12bc/0x3260 [ 1805.815330][T17172] ? proc_fail_nth_write+0x20b/0x290 [ 1805.820449][T17172] ? fsnotify_perm+0x6a/0x5d0 [ 1805.824961][T17172] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1805.829907][T17172] ? vfs_write+0x9ec/0x1110 [ 1805.834249][T17172] kernel_clone+0x21e/0x9e0 [ 1805.838586][T17172] ? file_end_write+0x1c0/0x1c0 [ 1805.843276][T17172] ? create_io_thread+0x1e0/0x1e0 [ 1805.848140][T17172] ? mutex_unlock+0xb2/0x1b0 [ 1805.852564][T17172] ? __mutex_lock_slowpath+0x10/0x10 [ 1805.857687][T17172] __x64_sys_clone+0x23f/0x290 [ 1805.862286][T17172] ? __do_sys_vfork+0x130/0x130 [ 1805.866971][T17172] ? ksys_write+0x260/0x2c0 [ 1805.871315][T17172] ? debug_smp_processor_id+0x17/0x20 [ 1805.876515][T17172] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1805.882419][T17172] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1805.887896][T17172] do_syscall_64+0x3d/0xb0 [ 1805.892141][T17172] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1805.897869][T17172] RIP: 0033:0x7f72394e6b29 [ 1805.902119][T17172] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1805.921567][T17172] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1805.929810][T17172] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1805.937620][T17172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1805.945447][T17172] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1805.953243][T17172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 11:06:39 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 11:06:39 executing program 4: bpf$MAP_CREATE(0x1f000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:39 executing program 0: syz_clone(0x30000000, 0x0, 0x700000, 0x0, 0x0, 0x0) [ 1805.961053][T17172] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1805.968892][T17172] 11:06:39 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:39 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x348, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:39 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9500000000000000) 11:06:39 executing program 4: bpf$MAP_CREATE(0x20000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:39 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:39 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x349, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1806.061043][T17188] FAULT_INJECTION: forcing a failure. [ 1806.061043][T17188] name failslab, interval 1, probability 0, space 0, times 0 11:06:39 executing program 4: bpf$MAP_CREATE(0x21000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:39 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:40 executing program 4: bpf$MAP_CREATE(0x22000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1806.113332][T17188] CPU: 0 PID: 17188 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1806.123764][T17188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1806.133660][T17188] Call Trace: [ 1806.136785][T17188] [ 1806.139560][T17188] dump_stack_lvl+0x151/0x1b7 [ 1806.144075][T17188] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1806.149553][T17188] dump_stack+0x15/0x17 [ 1806.153537][T17188] should_fail+0x3c6/0x510 [ 1806.157790][T17188] __should_failslab+0xa4/0xe0 [ 1806.162391][T17188] ? anon_vma_fork+0x1df/0x4e0 [ 1806.166990][T17188] should_failslab+0x9/0x20 [ 1806.171327][T17188] slab_pre_alloc_hook+0x37/0xd0 [ 1806.176106][T17188] ? anon_vma_fork+0x1df/0x4e0 [ 1806.180705][T17188] kmem_cache_alloc+0x44/0x200 [ 1806.185314][T17188] anon_vma_fork+0x1df/0x4e0 [ 1806.189730][T17188] dup_mm+0x8c5/0x12c0 [ 1806.193637][T17188] ? copy_init_mm+0x20/0x20 [ 1806.197979][T17188] copy_mm+0x107/0x1b0 [ 1806.201880][T17188] copy_process+0x12bc/0x3260 [ 1806.206420][T17188] ? proc_fail_nth_write+0x20b/0x290 [ 1806.211517][T17188] ? fsnotify_perm+0x6a/0x5d0 [ 1806.216030][T17188] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1806.220986][T17188] ? vfs_write+0x9ec/0x1110 [ 1806.225317][T17188] kernel_clone+0x21e/0x9e0 [ 1806.229659][T17188] ? file_end_write+0x1c0/0x1c0 [ 1806.234358][T17188] ? create_io_thread+0x1e0/0x1e0 [ 1806.239203][T17188] ? mutex_unlock+0xb2/0x1b0 [ 1806.243629][T17188] ? __mutex_lock_slowpath+0x10/0x10 [ 1806.248757][T17188] __x64_sys_clone+0x23f/0x290 [ 1806.253362][T17188] ? __do_sys_vfork+0x130/0x130 [ 1806.258032][T17188] ? ksys_write+0x260/0x2c0 [ 1806.262377][T17188] ? debug_smp_processor_id+0x17/0x20 [ 1806.267587][T17188] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1806.273498][T17188] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1806.278962][T17188] do_syscall_64+0x3d/0xb0 [ 1806.283206][T17188] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1806.288935][T17188] RIP: 0033:0x7f72394e6b29 [ 1806.293193][T17188] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:40 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 11:06:40 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:40 executing program 4: bpf$MAP_CREATE(0x23000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:40 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9602000000000000) 11:06:40 executing program 0: syz_clone(0x30000000, 0x0, 0xf0ff1f, 0x0, 0x0, 0x0) [ 1806.312629][T17188] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1806.320875][T17188] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1806.328692][T17188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1806.336495][T17188] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1806.344308][T17188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1806.352123][T17188] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1806.359939][T17188] 11:06:40 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:40 executing program 4: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:40 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc403000000000000) 11:06:40 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:40 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:40 executing program 4: bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:40 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc803000000000000) [ 1806.519020][T17237] FAULT_INJECTION: forcing a failure. [ 1806.519020][T17237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1806.536664][T17237] CPU: 0 PID: 17237 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1806.547103][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1806.556992][T17237] Call Trace: [ 1806.560204][T17237] [ 1806.562979][T17237] dump_stack_lvl+0x151/0x1b7 [ 1806.567494][T17237] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1806.572960][T17237] dump_stack+0x15/0x17 [ 1806.576954][T17237] should_fail+0x3c6/0x510 [ 1806.581211][T17237] should_fail_alloc_page+0x5a/0x80 [ 1806.586324][T17237] __alloc_pages+0x1e6/0x7b0 [ 1806.591015][T17237] ? zone_watermark_fast+0x220/0x220 [ 1806.596143][T17237] get_zeroed_page+0x19/0x40 [ 1806.600560][T17237] __pud_alloc+0x8b/0x260 [ 1806.604724][T17237] ? stack_trace_snprint+0xf0/0xf0 [ 1806.609673][T17237] ? do_handle_mm_fault+0x2330/0x2330 [ 1806.614887][T17237] ? __stack_depot_save+0x34/0x470 [ 1806.619840][T17237] ? anon_vma_clone+0x9a/0x500 [ 1806.624434][T17237] copy_page_range+0x2bcf/0x2f90 [ 1806.629203][T17237] ? __kasan_slab_alloc+0xb1/0xe0 [ 1806.634061][T17237] ? slab_post_alloc_hook+0x53/0x2c0 [ 1806.639282][T17237] ? dup_mm+0x8c5/0x12c0 [ 1806.643352][T17237] ? copy_mm+0x107/0x1b0 [ 1806.647432][T17237] ? copy_process+0x12bc/0x3260 [ 1806.652139][T17237] ? kernel_clone+0x21e/0x9e0 [ 1806.656744][T17237] ? __x64_sys_clone+0x23f/0x290 [ 1806.661506][T17237] ? do_syscall_64+0x3d/0xb0 [ 1806.665934][T17237] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1806.671965][T17237] ? pfn_valid+0x1e0/0x1e0 [ 1806.676207][T17237] ? rwsem_write_trylock+0x15b/0x290 [ 1806.681334][T17237] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1806.687927][T17237] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1806.693494][T17237] ? __rb_insert_augmented+0x5de/0x610 [ 1806.698776][T17237] dup_mm+0xadc/0x12c0 [ 1806.702681][T17237] ? copy_init_mm+0x20/0x20 [ 1806.707018][T17237] copy_mm+0x107/0x1b0 [ 1806.710928][T17237] copy_process+0x12bc/0x3260 [ 1806.715441][T17237] ? proc_fail_nth_write+0x20b/0x290 [ 1806.720559][T17237] ? fsnotify_perm+0x6a/0x5d0 [ 1806.725070][T17237] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1806.730017][T17237] ? vfs_write+0x9ec/0x1110 [ 1806.734359][T17237] kernel_clone+0x21e/0x9e0 [ 1806.738697][T17237] ? file_end_write+0x1c0/0x1c0 [ 1806.743386][T17237] ? create_io_thread+0x1e0/0x1e0 [ 1806.748333][T17237] ? mutex_unlock+0xb2/0x1b0 [ 1806.752845][T17237] ? __mutex_lock_slowpath+0x10/0x10 [ 1806.757970][T17237] __x64_sys_clone+0x23f/0x290 [ 1806.762566][T17237] ? __do_sys_vfork+0x130/0x130 [ 1806.767250][T17237] ? ksys_write+0x260/0x2c0 [ 1806.771595][T17237] ? debug_smp_processor_id+0x17/0x20 [ 1806.776801][T17237] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1806.782702][T17237] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1806.788175][T17237] do_syscall_64+0x3d/0xb0 [ 1806.792422][T17237] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1806.798163][T17237] RIP: 0033:0x7f72394e6b29 [ 1806.802404][T17237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1806.821847][T17237] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1806.830188][T17237] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1806.838002][T17237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1806.845818][T17237] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1806.853620][T17237] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1806.861434][T17237] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1806.869252][T17237] 11:06:40 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 11:06:40 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:40 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd003000000000000) 11:06:40 executing program 0: syz_clone(0x30000000, 0x0, 0x1000000, 0x0, 0x0, 0x0) 11:06:40 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11:06:40 executing program 4: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:40 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xdc03000000000000) 11:06:40 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:40 executing program 4: bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1806.944413][T17239] FAULT_INJECTION: forcing a failure. [ 1806.944413][T17239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1806.974586][T17248] FAULT_INJECTION: forcing a failure. [ 1806.974586][T17248] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.980105][T17239] CPU: 1 PID: 17239 Comm: syz-executor.5 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1806.997609][T17239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1807.007504][T17239] Call Trace: [ 1807.010628][T17239] [ 1807.013409][T17239] dump_stack_lvl+0x151/0x1b7 [ 1807.018275][T17239] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1807.023745][T17239] ? kstrtouint_from_user+0x20a/0x2a0 [ 1807.028959][T17239] dump_stack+0x15/0x17 [ 1807.032954][T17239] should_fail+0x3c6/0x510 [ 1807.037197][T17239] should_fail_usercopy+0x1a/0x20 11:06:40 executing program 4: bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:40 executing program 4: bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1807.042061][T17239] _copy_to_user+0x20/0x90 [ 1807.046307][T17239] simple_read_from_buffer+0xc7/0x150 [ 1807.051518][T17239] proc_fail_nth_read+0x1a3/0x210 [ 1807.056381][T17239] ? proc_fault_inject_write+0x390/0x390 [ 1807.061844][T17239] ? fsnotify_perm+0x470/0x5d0 [ 1807.066448][T17239] ? security_file_permission+0x86/0xb0 [ 1807.071830][T17239] ? proc_fault_inject_write+0x390/0x390 [ 1807.077387][T17239] vfs_read+0x27d/0xd40 [ 1807.081376][T17239] ? kernel_read+0x1f0/0x1f0 [ 1807.085800][T17239] ? __kasan_check_write+0x14/0x20 [ 1807.090745][T17239] ? mutex_lock+0xb6/0x1e0 [ 1807.095011][T17239] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1807.101423][T17239] ? __fdget_pos+0x278/0x310 [ 1807.105845][T17239] ? ksys_read+0x77/0x2c0 [ 1807.110013][T17239] ksys_read+0x199/0x2c0 [ 1807.114103][T17239] ? vfs_write+0x1110/0x1110 [ 1807.118516][T17239] ? debug_smp_processor_id+0x17/0x20 [ 1807.123727][T17239] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1807.129631][T17239] __x64_sys_read+0x7b/0x90 [ 1807.133969][T17239] do_syscall_64+0x3d/0xb0 [ 1807.138222][T17239] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1807.143950][T17239] RIP: 0033:0x7f5fca7e57cc [ 1807.148209][T17239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1807.167732][T17239] RSP: 002b:00007f5fc95690c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1807.176161][T17239] RAX: ffffffffffffffda RBX: 00007f5fca905f80 RCX: 00007f5fca7e57cc [ 1807.183971][T17239] RDX: 000000000000000f RSI: 00007f5fc9569130 RDI: 0000000000000003 11:06:41 executing program 0: syz_clone(0x30000000, 0x0, 0x2000000, 0x0, 0x0, 0x0) [ 1807.191984][T17239] RBP: 00007f5fc9569120 R08: 0000000000000000 R09: 0000000000000000 [ 1807.200047][T17239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.207945][T17239] R13: 000000000000000b R14: 00007f5fca905f80 R15: 00007ffec35d7968 [ 1807.215846][T17239] [ 1807.218706][T17248] CPU: 0 PID: 17248 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1807.229121][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1807.239022][T17248] Call Trace: [ 1807.242243][T17248] [ 1807.245019][T17248] dump_stack_lvl+0x151/0x1b7 [ 1807.249530][T17248] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1807.254996][T17248] ? slab_post_alloc_hook+0x53/0x2c0 [ 1807.260120][T17248] ? copy_signal+0x55/0x610 [ 1807.264457][T17248] ? copy_process+0x1274/0x3260 [ 1807.269150][T17248] ? kernel_clone+0x21e/0x9e0 [ 1807.273661][T17248] ? do_syscall_64+0x3d/0xb0 [ 1807.278172][T17248] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1807.284075][T17248] dump_stack+0x15/0x17 [ 1807.288080][T17248] should_fail+0x3c6/0x510 [ 1807.292318][T17248] __should_failslab+0xa4/0xe0 [ 1807.296927][T17248] ? dup_mm+0x95/0x12c0 [ 1807.300909][T17248] should_failslab+0x9/0x20 [ 1807.305254][T17248] slab_pre_alloc_hook+0x37/0xd0 [ 1807.310025][T17248] ? dup_mm+0x95/0x12c0 [ 1807.314021][T17248] kmem_cache_alloc+0x44/0x200 [ 1807.318621][T17248] dup_mm+0x95/0x12c0 [ 1807.322440][T17248] ? __kasan_check_write+0x14/0x20 [ 1807.327381][T17248] ? copy_init_mm+0x20/0x20 [ 1807.331722][T17248] copy_mm+0x107/0x1b0 [ 1807.335636][T17248] copy_process+0x12bc/0x3260 [ 1807.340146][T17248] ? proc_fail_nth_write+0x20b/0x290 [ 1807.345522][T17248] ? fsnotify_perm+0x6a/0x5d0 [ 1807.350038][T17248] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1807.357152][T17248] ? vfs_write+0x9ec/0x1110 [ 1807.361496][T17248] kernel_clone+0x21e/0x9e0 [ 1807.365833][T17248] ? file_end_write+0x1c0/0x1c0 [ 1807.370519][T17248] ? create_io_thread+0x1e0/0x1e0 [ 1807.375379][T17248] ? mutex_unlock+0xb2/0x1b0 [ 1807.379810][T17248] ? __mutex_lock_slowpath+0x10/0x10 [ 1807.384931][T17248] __x64_sys_clone+0x23f/0x290 [ 1807.389528][T17248] ? __do_sys_vfork+0x130/0x130 [ 1807.394214][T17248] ? ksys_write+0x260/0x2c0 [ 1807.398554][T17248] ? debug_smp_processor_id+0x17/0x20 [ 1807.403758][T17248] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1807.409749][T17248] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1807.415219][T17248] do_syscall_64+0x3d/0xb0 [ 1807.419476][T17248] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1807.425196][T17248] RIP: 0033:0x7f72394e6b29 [ 1807.429451][T17248] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1807.448906][T17248] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1807.457140][T17248] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1807.464951][T17248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1807.472862][T17248] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1807.480762][T17248] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1807.488575][T17248] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 11:06:41 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:41 executing program 4: bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:41 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xde03000000000000) 11:06:41 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 11:06:41 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1807.496388][T17248] 11:06:41 executing program 4: bpf$MAP_CREATE(0x800000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:41 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfeffffff00000000) 11:06:41 executing program 5: syz_clone(0x30000711, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:41 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:41 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffff00000000) 11:06:41 executing program 4: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1807.550711][T17270] FAULT_INJECTION: forcing a failure. [ 1807.550711][T17270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1807.597722][T17270] CPU: 1 PID: 17270 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1807.608166][T17270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1807.618151][T17270] Call Trace: [ 1807.621273][T17270] [ 1807.624050][T17270] dump_stack_lvl+0x151/0x1b7 [ 1807.628648][T17270] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1807.634123][T17270] dump_stack+0x15/0x17 [ 1807.638110][T17270] should_fail+0x3c6/0x510 [ 1807.642365][T17270] should_fail_alloc_page+0x5a/0x80 [ 1807.647398][T17270] __alloc_pages+0x1e6/0x7b0 [ 1807.651830][T17270] ? zone_watermark_fast+0x220/0x220 [ 1807.656943][T17270] ? __kasan_check_write+0x14/0x20 [ 1807.661889][T17270] ? _raw_spin_lock+0xa4/0x1b0 [ 1807.666498][T17270] pte_alloc_one+0x73/0x1b0 [ 1807.670833][T17270] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1807.675871][T17270] ? __pmd_alloc+0x48d/0x550 [ 1807.680298][T17270] __pte_alloc+0x86/0x350 [ 1807.684457][T17270] ? __pud_alloc+0x260/0x260 [ 1807.688902][T17270] ? __pud_alloc+0x213/0x260 [ 1807.693404][T17270] ? free_pgtables+0x280/0x280 11:06:41 executing program 0: syz_clone(0x30000000, 0x0, 0x4000000, 0x0, 0x0, 0x0) 11:06:41 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1807.697999][T17270] ? do_handle_mm_fault+0x2330/0x2330 [ 1807.703210][T17270] ? __stack_depot_save+0x34/0x470 [ 1807.708151][T17270] ? anon_vma_clone+0x9a/0x500 [ 1807.712755][T17270] copy_page_range+0x28a8/0x2f90 [ 1807.717527][T17270] ? __kasan_slab_alloc+0xb1/0xe0 [ 1807.722382][T17270] ? slab_post_alloc_hook+0x53/0x2c0 [ 1807.727520][T17270] ? copy_process+0x12bc/0x3260 [ 1807.732191][T17270] ? __x64_sys_clone+0x23f/0x290 [ 1807.736968][T17270] ? do_syscall_64+0x3d/0xb0 [ 1807.741400][T17270] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1807.747305][T17270] ? pfn_valid+0x1e0/0x1e0 [ 1807.751725][T17270] ? rwsem_write_trylock+0x15b/0x290 [ 1807.756844][T17270] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1807.763228][T17270] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1807.768820][T17270] ? __rb_insert_augmented+0x5de/0x610 [ 1807.774123][T17270] dup_mm+0xadc/0x12c0 [ 1807.778026][T17270] ? copy_init_mm+0x20/0x20 [ 1807.782364][T17270] copy_mm+0x107/0x1b0 [ 1807.786267][T17270] copy_process+0x12bc/0x3260 [ 1807.790784][T17270] ? proc_fail_nth_write+0x20b/0x290 [ 1807.795906][T17270] ? fsnotify_perm+0x6a/0x5d0 [ 1807.800415][T17270] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1807.805362][T17270] ? vfs_write+0x9ec/0x1110 [ 1807.809702][T17270] kernel_clone+0x21e/0x9e0 [ 1807.814040][T17270] ? file_end_write+0x1c0/0x1c0 [ 1807.818815][T17270] ? create_io_thread+0x1e0/0x1e0 [ 1807.823670][T17270] ? mutex_unlock+0xb2/0x1b0 [ 1807.828100][T17270] ? __mutex_lock_slowpath+0x10/0x10 [ 1807.833224][T17270] __x64_sys_clone+0x23f/0x290 [ 1807.837907][T17270] ? __do_sys_vfork+0x130/0x130 [ 1807.842594][T17270] ? ksys_write+0x260/0x2c0 [ 1807.846939][T17270] ? debug_smp_processor_id+0x17/0x20 [ 1807.852142][T17270] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1807.858044][T17270] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1807.863515][T17270] do_syscall_64+0x3d/0xb0 [ 1807.867769][T17270] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1807.873493][T17270] RIP: 0033:0x7f72394e6b29 [ 1807.877747][T17270] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:41 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 11:06:41 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7a0}, 0x8) 11:06:41 executing program 5: syz_clone(0x30000700, 0x0, 0x11, 0x0, 0x0, 0x0) 11:06:41 executing program 0: syz_clone(0x30000000, 0x0, 0x7000000, 0x0, 0x0, 0x0) 11:06:41 executing program 4: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:41 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1807.897192][T17270] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1807.905434][T17270] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1807.913249][T17270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1807.921058][T17270] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1807.928866][T17270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1807.936680][T17270] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1807.944496][T17270] 11:06:41 executing program 5: syz_clone(0x30000700, 0x0, 0x1100, 0x0, 0x0, 0x0) 11:06:41 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x352, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:41 executing program 4: bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:41 executing program 5: syz_clone(0x30000700, 0x0, 0x101000, 0x0, 0x0, 0x0) [ 1807.988843][T17301] FAULT_INJECTION: forcing a failure. [ 1807.988843][T17301] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.029872][T17301] CPU: 0 PID: 17301 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1808.040307][T17301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1808.050205][T17301] Call Trace: [ 1808.053325][T17301] [ 1808.056100][T17301] dump_stack_lvl+0x151/0x1b7 [ 1808.060615][T17301] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1808.066089][T17301] dump_stack+0x15/0x17 [ 1808.070085][T17301] should_fail+0x3c6/0x510 [ 1808.074337][T17301] __should_failslab+0xa4/0xe0 [ 1808.078931][T17301] ? vm_area_dup+0x26/0x230 [ 1808.083273][T17301] should_failslab+0x9/0x20 [ 1808.087609][T17301] slab_pre_alloc_hook+0x37/0xd0 [ 1808.092379][T17301] ? vm_area_dup+0x26/0x230 [ 1808.096722][T17301] kmem_cache_alloc+0x44/0x200 [ 1808.101408][T17301] vm_area_dup+0x26/0x230 [ 1808.105570][T17301] dup_mm+0x81b/0x12c0 [ 1808.109487][T17301] ? copy_init_mm+0x20/0x20 [ 1808.113821][T17301] copy_mm+0x107/0x1b0 [ 1808.117727][T17301] copy_process+0x12bc/0x3260 [ 1808.122235][T17301] ? proc_fail_nth_write+0x20b/0x290 [ 1808.127356][T17301] ? fsnotify_perm+0x6a/0x5d0 [ 1808.131869][T17301] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1808.138383][T17301] ? vfs_write+0x9ec/0x1110 [ 1808.142821][T17301] kernel_clone+0x21e/0x9e0 [ 1808.147150][T17301] ? file_end_write+0x1c0/0x1c0 [ 1808.151833][T17301] ? create_io_thread+0x1e0/0x1e0 [ 1808.156691][T17301] ? mutex_unlock+0xb2/0x1b0 [ 1808.161127][T17301] ? __mutex_lock_slowpath+0x10/0x10 [ 1808.166249][T17301] __x64_sys_clone+0x23f/0x290 [ 1808.170839][T17301] ? __do_sys_vfork+0x130/0x130 [ 1808.175531][T17301] ? ksys_write+0x260/0x2c0 [ 1808.179871][T17301] ? debug_smp_processor_id+0x17/0x20 [ 1808.185073][T17301] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1808.191039][T17301] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1808.196454][T17301] do_syscall_64+0x3d/0xb0 [ 1808.200700][T17301] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1808.206429][T17301] RIP: 0033:0x7f72394e6b29 [ 1808.210692][T17301] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:41 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:41 executing program 4: bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:42 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 11:06:42 executing program 4: bpf$MAP_CREATE(0xe00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:42 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7a0}, 0x8) [ 1808.230212][T17301] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1808.238549][T17301] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1808.246451][T17301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1808.254514][T17301] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1808.262339][T17301] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1808.270149][T17301] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1808.277954][T17301] 11:06:42 executing program 0: syz_clone(0x30000000, 0x0, 0x8000000, 0x0, 0x0, 0x0) 11:06:42 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x353, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:42 executing program 4: bpf$MAP_CREATE(0xf00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:42 executing program 5: syz_clone(0x30000700, 0x0, 0x11000000, 0x0, 0x0, 0x0) 11:06:42 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7a0}, 0x8) 11:06:42 executing program 5: syz_clone(0x30000700, 0x0, 0x10100000000000, 0x0, 0x0, 0x0) 11:06:42 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:42 executing program 4: bpf$MAP_CREATE(0x1000000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:42 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x355, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1808.410562][T17323] FAULT_INJECTION: forcing a failure. [ 1808.410562][T17323] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.444797][T17323] CPU: 1 PID: 17323 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1808.455233][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1808.465138][T17323] Call Trace: [ 1808.468256][T17323] [ 1808.471030][T17323] dump_stack_lvl+0x151/0x1b7 [ 1808.475551][T17323] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1808.481014][T17323] ? avc_denied+0x1b0/0x1b0 [ 1808.485351][T17323] dump_stack+0x15/0x17 [ 1808.489345][T17323] should_fail+0x3c6/0x510 [ 1808.493601][T17323] __should_failslab+0xa4/0xe0 [ 1808.498196][T17323] ? vm_area_dup+0x26/0x230 [ 1808.502536][T17323] should_failslab+0x9/0x20 [ 1808.506884][T17323] slab_pre_alloc_hook+0x37/0xd0 [ 1808.511668][T17323] ? vm_area_dup+0x26/0x230 [ 1808.515995][T17323] kmem_cache_alloc+0x44/0x200 [ 1808.520594][T17323] vm_area_dup+0x26/0x230 [ 1808.524758][T17323] dup_mm+0x81b/0x12c0 [ 1808.528665][T17323] ? copy_init_mm+0x20/0x20 [ 1808.533004][T17323] copy_mm+0x107/0x1b0 [ 1808.536908][T17323] copy_process+0x12bc/0x3260 [ 1808.541424][T17323] ? proc_fail_nth_write+0x20b/0x290 [ 1808.546541][T17323] ? fsnotify_perm+0x6a/0x5d0 [ 1808.551058][T17323] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1808.556012][T17323] ? vfs_write+0x9ec/0x1110 [ 1808.560441][T17323] kernel_clone+0x21e/0x9e0 [ 1808.564860][T17323] ? file_end_write+0x1c0/0x1c0 [ 1808.569550][T17323] ? create_io_thread+0x1e0/0x1e0 [ 1808.574407][T17323] ? mutex_unlock+0xb2/0x1b0 [ 1808.578844][T17323] ? __mutex_lock_slowpath+0x10/0x10 [ 1808.583966][T17323] __x64_sys_clone+0x23f/0x290 [ 1808.588559][T17323] ? __do_sys_vfork+0x130/0x130 [ 1808.593243][T17323] ? ksys_write+0x260/0x2c0 [ 1808.597587][T17323] ? debug_smp_processor_id+0x17/0x20 [ 1808.602791][T17323] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1808.608692][T17323] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1808.614161][T17323] do_syscall_64+0x3d/0xb0 [ 1808.618418][T17323] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1808.624140][T17323] RIP: 0033:0x7f72394e6b29 [ 1808.628397][T17323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1808.647836][T17323] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:06:42 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 11:06:42 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x7, 0x6, 0x0, 0x9, 0x0, 0x10000, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xd33d, 0x81}, 0x60, 0x7fffffff, 0x3ff, 0x3, 0x7, 0x9, 0x400, 0x0, 0x4, 0x0, 0xe9}, 0xffffffffffffffff, 0x5, r0, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 11:06:42 executing program 5: syz_clone(0x30000700, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0) 11:06:42 executing program 4: bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:42 executing program 0: syz_clone(0x30000000, 0x0, 0x9000000, 0x0, 0x0, 0x0) 11:06:42 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x356, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1808.656081][T17323] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1808.663893][T17323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1808.671718][T17323] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1808.679518][T17323] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1808.687335][T17323] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1808.695146][T17323] 11:06:42 executing program 4: bpf$MAP_CREATE(0x1200000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:42 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xfffff870, 0x10}, 0xc) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x81, 0x7f, 0x7f, 0x0, 0x40, 0xa4580, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa2, 0x4, @perf_config_ext={0x0, 0x3}, 0x80, 0x100, 0x6, 0x0, 0x37f0, 0x1f, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, r0, 0xb, 0xffffffffffffffff, 0x0) [ 1808.724721][T17351] FAULT_INJECTION: forcing a failure. [ 1808.724721][T17351] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.738974][T17351] CPU: 1 PID: 17351 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1808.749404][T17351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1808.759650][T17351] Call Trace: [ 1808.762767][T17351] [ 1808.765553][T17351] dump_stack_lvl+0x151/0x1b7 11:06:42 executing program 4: bpf$MAP_CREATE(0x1300000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:42 executing program 4: bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1808.770146][T17351] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1808.775618][T17351] dump_stack+0x15/0x17 [ 1808.779606][T17351] should_fail+0x3c6/0x510 [ 1808.783860][T17351] __should_failslab+0xa4/0xe0 [ 1808.788475][T17351] ? anon_vma_clone+0x9a/0x500 [ 1808.793057][T17351] should_failslab+0x9/0x20 [ 1808.797400][T17351] slab_pre_alloc_hook+0x37/0xd0 [ 1808.803130][T17351] ? anon_vma_clone+0x9a/0x500 [ 1808.807727][T17351] kmem_cache_alloc+0x44/0x200 [ 1808.812329][T17351] anon_vma_clone+0x9a/0x500 [ 1808.816753][T17351] anon_vma_fork+0x91/0x4e0 11:06:42 executing program 4: bpf$MAP_CREATE(0x1500000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1808.821095][T17351] ? anon_vma_name+0x4c/0x70 [ 1808.825519][T17351] ? vm_area_dup+0x17a/0x230 [ 1808.829950][T17351] dup_mm+0x8c5/0x12c0 [ 1808.833877][T17351] ? copy_init_mm+0x20/0x20 [ 1808.838193][T17351] copy_mm+0x107/0x1b0 [ 1808.842098][T17351] copy_process+0x12bc/0x3260 [ 1808.846617][T17351] ? proc_fail_nth_write+0x20b/0x290 [ 1808.851822][T17351] ? fsnotify_perm+0x6a/0x5d0 [ 1808.856335][T17351] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1808.861279][T17351] ? vfs_write+0x9ec/0x1110 [ 1808.865622][T17351] kernel_clone+0x21e/0x9e0 [ 1808.869960][T17351] ? file_end_write+0x1c0/0x1c0 11:06:42 executing program 4: bpf$MAP_CREATE(0x1600000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1808.874646][T17351] ? create_io_thread+0x1e0/0x1e0 [ 1808.879505][T17351] ? mutex_unlock+0xb2/0x1b0 [ 1808.883964][T17351] ? __mutex_lock_slowpath+0x10/0x10 [ 1808.889055][T17351] __x64_sys_clone+0x23f/0x290 [ 1808.893738][T17351] ? __do_sys_vfork+0x130/0x130 [ 1808.898430][T17351] ? ksys_write+0x260/0x2c0 [ 1808.902776][T17351] ? debug_smp_processor_id+0x17/0x20 [ 1808.907975][T17351] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1808.913877][T17351] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1808.919344][T17351] do_syscall_64+0x3d/0xb0 [ 1808.924813][T17351] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1808.930635][T17351] RIP: 0033:0x7f72394e6b29 [ 1808.934878][T17351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1808.954409][T17351] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1808.962655][T17351] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:06:42 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 11:06:42 executing program 4: bpf$MAP_CREATE(0x1700000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:42 executing program 0: syz_clone(0x30000000, 0x0, 0xf000000, 0x0, 0x0, 0x0) 11:06:42 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x7, 0x6, 0x0, 0x9, 0x0, 0x10000, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xd33d, 0x81}, 0x60, 0x7fffffff, 0x3ff, 0x3, 0x7, 0x9, 0x400, 0x0, 0x4, 0x0, 0xe9}, 0xffffffffffffffff, 0x5, r0, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 11:06:42 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x357, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:42 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xfffff870, 0x10}, 0xc) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x81, 0x7f, 0x7f, 0x0, 0x40, 0xa4580, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa2, 0x4, @perf_config_ext={0x0, 0x3}, 0x80, 0x100, 0x6, 0x0, 0x37f0, 0x1f, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, r0, 0xb, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x81, 0x7f, 0x7f, 0x0, 0x40, 0xa4580, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa2, 0x4, @perf_config_ext={0x0, 0x3}, 0x80, 0x100, 0x6, 0x0, 0x37f0, 0x1f, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, r0, 0xb, 0xffffffffffffffff, 0x0) [ 1808.970469][T17351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1808.978282][T17351] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1808.986093][T17351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1808.993900][T17351] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1809.001719][T17351] 11:06:42 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x7, 0x6, 0x0, 0x9, 0x0, 0x10000, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xd33d, 0x81}, 0x60, 0x7fffffff, 0x3ff, 0x3, 0x7, 0x9, 0x400, 0x0, 0x4, 0x0, 0xe9}, 0xffffffffffffffff, 0x5, r0, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 11:06:42 executing program 4: bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:42 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x358, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:42 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xfffff870, 0x10}, 0xc) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x81, 0x7f, 0x7f, 0x0, 0x40, 0xa4580, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa2, 0x4, @perf_config_ext={0x0, 0x3}, 0x80, 0x100, 0x6, 0x0, 0x37f0, 0x1f, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, r0, 0xb, 0xffffffffffffffff, 0x0) (rerun: 32) 11:06:42 executing program 4: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1809.090566][T17385] FAULT_INJECTION: forcing a failure. [ 1809.090566][T17385] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.124119][T17385] CPU: 1 PID: 17385 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 11:06:43 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0xc01}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x1d}, 0x10) [ 1809.134565][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1809.144462][T17385] Call Trace: [ 1809.147582][T17385] [ 1809.150437][T17385] dump_stack_lvl+0x151/0x1b7 [ 1809.154960][T17385] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1809.160509][T17385] dump_stack+0x15/0x17 [ 1809.164497][T17385] should_fail+0x3c6/0x510 [ 1809.168754][T17385] __should_failslab+0xa4/0xe0 [ 1809.173354][T17385] ? anon_vma_fork+0xf7/0x4e0 [ 1809.177865][T17385] should_failslab+0x9/0x20 [ 1809.182204][T17385] slab_pre_alloc_hook+0x37/0xd0 [ 1809.186980][T17385] ? anon_vma_fork+0xf7/0x4e0 [ 1809.191495][T17385] kmem_cache_alloc+0x44/0x200 [ 1809.196098][T17385] anon_vma_fork+0xf7/0x4e0 [ 1809.200437][T17385] ? anon_vma_name+0x4c/0x70 [ 1809.204858][T17385] ? vm_area_dup+0x17a/0x230 [ 1809.209294][T17385] dup_mm+0x8c5/0x12c0 [ 1809.213200][T17385] ? copy_init_mm+0x20/0x20 [ 1809.217535][T17385] copy_mm+0x107/0x1b0 [ 1809.221440][T17385] copy_process+0x12bc/0x3260 [ 1809.225953][T17385] ? proc_fail_nth_write+0x20b/0x290 [ 1809.231074][T17385] ? fsnotify_perm+0x6a/0x5d0 [ 1809.235587][T17385] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1809.240622][T17385] ? vfs_write+0x9ec/0x1110 [ 1809.244959][T17385] kernel_clone+0x21e/0x9e0 [ 1809.249310][T17385] ? file_end_write+0x1c0/0x1c0 [ 1809.253984][T17385] ? create_io_thread+0x1e0/0x1e0 [ 1809.258843][T17385] ? mutex_unlock+0xb2/0x1b0 [ 1809.265098][T17385] ? __mutex_lock_slowpath+0x10/0x10 [ 1809.270220][T17385] __x64_sys_clone+0x23f/0x290 [ 1809.274817][T17385] ? __do_sys_vfork+0x130/0x130 [ 1809.279502][T17385] ? ksys_write+0x260/0x2c0 [ 1809.283847][T17385] ? debug_smp_processor_id+0x17/0x20 [ 1809.289056][T17385] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1809.294960][T17385] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1809.300432][T17385] do_syscall_64+0x3d/0xb0 [ 1809.304677][T17385] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1809.310403][T17385] RIP: 0033:0x7f72394e6b29 [ 1809.314655][T17385] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:43 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 11:06:43 executing program 4: bpf$MAP_CREATE(0x1a00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:43 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0xc01}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x1d}, 0x10) 11:06:43 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x359, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:43 executing program 0: syz_clone(0x30000000, 0x0, 0x11000000, 0x0, 0x0, 0x0) [ 1809.334231][T17385] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1809.342660][T17385] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1809.350455][T17385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1809.358358][T17385] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1809.366169][T17385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1809.373982][T17385] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1809.381801][T17385] 11:06:43 executing program 4: bpf$MAP_CREATE(0x1b00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:43 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa8818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) 11:06:43 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:43 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0xc01}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x1d}, 0x10) [ 1809.405715][T17410] FAULT_INJECTION: forcing a failure. [ 1809.405715][T17410] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.430494][T17410] CPU: 1 PID: 17410 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1809.441020][T17410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1809.450914][T17410] Call Trace: 11:06:43 executing program 4: bpf$MAP_CREATE(0x1c00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:43 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa8818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) 11:06:43 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1809.454037][T17410] [ 1809.456812][T17410] dump_stack_lvl+0x151/0x1b7 [ 1809.461332][T17410] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1809.466929][T17410] dump_stack+0x15/0x17 [ 1809.470916][T17410] should_fail+0x3c6/0x510 [ 1809.475166][T17410] __should_failslab+0xa4/0xe0 [ 1809.479770][T17410] ? vm_area_dup+0x26/0x230 [ 1809.484104][T17410] should_failslab+0x9/0x20 [ 1809.488447][T17410] slab_pre_alloc_hook+0x37/0xd0 [ 1809.493222][T17410] ? vm_area_dup+0x26/0x230 [ 1809.497558][T17410] kmem_cache_alloc+0x44/0x200 [ 1809.502160][T17410] vm_area_dup+0x26/0x230 [ 1809.506323][T17410] dup_mm+0x81b/0x12c0 [ 1809.510232][T17410] ? copy_init_mm+0x20/0x20 [ 1809.514574][T17410] copy_mm+0x107/0x1b0 [ 1809.518473][T17410] copy_process+0x12bc/0x3260 [ 1809.522993][T17410] ? proc_fail_nth_write+0x20b/0x290 [ 1809.528108][T17410] ? fsnotify_perm+0x6a/0x5d0 [ 1809.532625][T17410] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1809.537568][T17410] ? vfs_write+0x9ec/0x1110 [ 1809.541914][T17410] kernel_clone+0x21e/0x9e0 [ 1809.546251][T17410] ? file_end_write+0x1c0/0x1c0 [ 1809.550938][T17410] ? create_io_thread+0x1e0/0x1e0 [ 1809.555801][T17410] ? mutex_unlock+0xb2/0x1b0 [ 1809.560223][T17410] ? __mutex_lock_slowpath+0x10/0x10 [ 1809.565347][T17410] __x64_sys_clone+0x23f/0x290 [ 1809.569950][T17410] ? __do_sys_vfork+0x130/0x130 [ 1809.574631][T17410] ? ksys_write+0x260/0x2c0 [ 1809.578973][T17410] ? debug_smp_processor_id+0x17/0x20 [ 1809.584177][T17410] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1809.590080][T17410] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1809.595552][T17410] do_syscall_64+0x3d/0xb0 [ 1809.599906][T17410] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1809.605636][T17410] RIP: 0033:0x7f72394e6b29 [ 1809.609887][T17410] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1809.629332][T17410] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1809.637578][T17410] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1809.645389][T17410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:43 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 11:06:43 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x20, 0x0, 0x0, 0x0, 0xa8818, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) 11:06:43 executing program 4: bpf$MAP_CREATE(0x1d00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:43 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1809.653288][T17410] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1809.661117][T17410] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1809.668911][T17410] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1809.676726][T17410] [ 1809.712312][T17443] FAULT_INJECTION: forcing a failure. [ 1809.712312][T17443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1809.730095][T17443] CPU: 1 PID: 17443 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1809.740526][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1809.750420][T17443] Call Trace: [ 1809.753539][T17443] [ 1809.756319][T17443] dump_stack_lvl+0x151/0x1b7 [ 1809.760840][T17443] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1809.766389][T17443] dump_stack+0x15/0x17 [ 1809.770381][T17443] should_fail+0x3c6/0x510 [ 1809.774632][T17443] should_fail_alloc_page+0x5a/0x80 [ 1809.779672][T17443] __alloc_pages+0x1e6/0x7b0 [ 1809.784095][T17443] ? zone_watermark_fast+0x220/0x220 [ 1809.789216][T17443] get_zeroed_page+0x19/0x40 [ 1809.793649][T17443] __pud_alloc+0x8b/0x260 [ 1809.797809][T17443] ? stack_trace_snprint+0xf0/0xf0 [ 1809.802756][T17443] ? do_handle_mm_fault+0x2330/0x2330 [ 1809.807960][T17443] ? __stack_depot_save+0x34/0x470 [ 1809.812910][T17443] ? anon_vma_clone+0x9a/0x500 [ 1809.817506][T17443] copy_page_range+0x2bcf/0x2f90 [ 1809.822282][T17443] ? __kasan_slab_alloc+0xb1/0xe0 [ 1809.827141][T17443] ? slab_post_alloc_hook+0x53/0x2c0 [ 1809.832265][T17443] ? dup_mm+0x8c5/0x12c0 [ 1809.836343][T17443] ? copy_mm+0x107/0x1b0 [ 1809.840421][T17443] ? copy_process+0x12bc/0x3260 [ 1809.845120][T17443] ? kernel_clone+0x21e/0x9e0 [ 1809.849624][T17443] ? __x64_sys_clone+0x23f/0x290 [ 1809.854395][T17443] ? do_syscall_64+0x3d/0xb0 [ 1809.858829][T17443] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1809.864730][T17443] ? pfn_valid+0x1e0/0x1e0 [ 1809.869063][T17443] ? rwsem_write_trylock+0x15b/0x290 [ 1809.874309][T17443] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1809.880656][T17443] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1809.886212][T17443] ? __rb_insert_augmented+0x5de/0x610 [ 1809.891697][T17443] dup_mm+0xadc/0x12c0 [ 1809.896114][T17443] ? copy_init_mm+0x20/0x20 [ 1809.900455][T17443] copy_mm+0x107/0x1b0 [ 1809.904360][T17443] copy_process+0x12bc/0x3260 [ 1809.908873][T17443] ? proc_fail_nth_write+0x20b/0x290 [ 1809.914001][T17443] ? fsnotify_perm+0x6a/0x5d0 [ 1809.918508][T17443] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1809.923450][T17443] ? vfs_write+0x9ec/0x1110 [ 1809.927795][T17443] kernel_clone+0x21e/0x9e0 [ 1809.932134][T17443] ? file_end_write+0x1c0/0x1c0 [ 1809.936847][T17443] ? create_io_thread+0x1e0/0x1e0 [ 1809.941679][T17443] ? mutex_unlock+0xb2/0x1b0 [ 1809.946196][T17443] ? __mutex_lock_slowpath+0x10/0x10 [ 1809.951321][T17443] __x64_sys_clone+0x23f/0x290 [ 1809.955914][T17443] ? __do_sys_vfork+0x130/0x130 [ 1809.960599][T17443] ? ksys_write+0x260/0x2c0 [ 1809.964939][T17443] ? debug_smp_processor_id+0x17/0x20 [ 1809.970149][T17443] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1809.976047][T17443] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1809.981550][T17443] do_syscall_64+0x3d/0xb0 [ 1809.985768][T17443] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1809.991625][T17443] RIP: 0033:0x7f72394e6b29 [ 1809.995876][T17443] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1810.015315][T17443] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1810.023561][T17443] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1810.031368][T17443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1810.039265][T17443] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1810.047083][T17443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1810.054890][T17443] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 11:06:43 executing program 0: syz_clone(0x30000000, 0x0, 0x1f000000, 0x0, 0x0, 0x0) 11:06:43 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x1, 0x2, 0xc5, 0x0, 0x7, 0x20042, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x6}, 0x1, 0x7, 0x7fffffff, 0x4, 0xffff, 0x4, 0x4, 0x0, 0x7fffffff, 0x0, 0xe1d}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0x34, 0x6, 0x8, 0x0, 0x0, 0x80000001, 0x5900, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8e12, 0x2, @perf_config_ext={0x4, 0x100000000}, 0x800, 0x5, 0x400, 0x7, 0x9, 0x9, 0xffff, 0x0, 0x401, 0x0, 0x4}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) 11:06:43 executing program 5: syz_clone(0xa7c5caadd5b4f8bd, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:43 executing program 4: bpf$MAP_CREATE(0x1e00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:43 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1810.062708][T17443] 11:06:43 executing program 4: bpf$MAP_CREATE(0x1f00000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:43 executing program 5: syz_clone(0xa7c5caadd5b4f8bd, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:43 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:44 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 11:06:44 executing program 5: syz_clone(0xa7c5caadd5b4f8bd, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:44 executing program 4: bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:44 executing program 4: bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1810.202144][T17467] FAULT_INJECTION: forcing a failure. [ 1810.202144][T17467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1810.225076][T17467] CPU: 1 PID: 17467 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1810.235513][T17467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1810.245497][T17467] Call Trace: [ 1810.248630][T17467] [ 1810.251392][T17467] dump_stack_lvl+0x151/0x1b7 [ 1810.256028][T17467] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1810.261488][T17467] dump_stack+0x15/0x17 [ 1810.265478][T17467] should_fail+0x3c6/0x510 [ 1810.269729][T17467] should_fail_alloc_page+0x5a/0x80 [ 1810.274763][T17467] __alloc_pages+0x1e6/0x7b0 [ 1810.279190][T17467] ? zone_watermark_fast+0x220/0x220 [ 1810.284311][T17467] ? zone_watermark_fast+0x220/0x220 [ 1810.289433][T17467] ? __kasan_check_write+0x14/0x20 [ 1810.294382][T17467] ? _raw_spin_lock+0xa4/0x1b0 [ 1810.298980][T17467] __pmd_alloc+0xb1/0x550 [ 1810.303240][T17467] ? __pud_alloc+0x260/0x260 [ 1810.307661][T17467] ? __pud_alloc+0x213/0x260 [ 1810.312177][T17467] ? do_handle_mm_fault+0x2330/0x2330 [ 1810.317552][T17467] ? __stack_depot_save+0x34/0x470 [ 1810.322499][T17467] ? anon_vma_clone+0x9a/0x500 [ 1810.327106][T17467] copy_page_range+0x2b3d/0x2f90 [ 1810.331874][T17467] ? __kasan_slab_alloc+0xb1/0xe0 [ 1810.336732][T17467] ? slab_post_alloc_hook+0x53/0x2c0 [ 1810.341866][T17467] ? dup_mm+0x8c5/0x12c0 [ 1810.345971][T17467] ? copy_mm+0x107/0x1b0 [ 1810.350011][T17467] ? copy_process+0x12bc/0x3260 [ 1810.354697][T17467] ? __x64_sys_clone+0x23f/0x290 [ 1810.359469][T17467] ? do_syscall_64+0x3d/0xb0 [ 1810.363984][T17467] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1810.369893][T17467] ? pfn_valid+0x1e0/0x1e0 [ 1810.374142][T17467] ? rwsem_write_trylock+0x15b/0x290 [ 1810.379260][T17467] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1810.385515][T17467] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1810.391065][T17467] ? __rb_insert_augmented+0x5de/0x610 [ 1810.396367][T17467] dup_mm+0xadc/0x12c0 [ 1810.400278][T17467] ? copy_init_mm+0x20/0x20 [ 1810.404608][T17467] copy_mm+0x107/0x1b0 [ 1810.408538][T17467] copy_process+0x12bc/0x3260 [ 1810.413111][T17467] ? proc_fail_nth_write+0x20b/0x290 [ 1810.418231][T17467] ? fsnotify_perm+0x6a/0x5d0 [ 1810.423107][T17467] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1810.428052][T17467] ? vfs_write+0x9ec/0x1110 [ 1810.432381][T17467] kernel_clone+0x21e/0x9e0 [ 1810.436724][T17467] ? file_end_write+0x1c0/0x1c0 [ 1810.441407][T17467] ? create_io_thread+0x1e0/0x1e0 [ 1810.446366][T17467] ? mutex_unlock+0xb2/0x1b0 [ 1810.450784][T17467] ? __mutex_lock_slowpath+0x10/0x10 [ 1810.455903][T17467] __x64_sys_clone+0x23f/0x290 [ 1810.460500][T17467] ? __do_sys_vfork+0x130/0x130 [ 1810.465190][T17467] ? ksys_write+0x260/0x2c0 [ 1810.469528][T17467] ? debug_smp_processor_id+0x17/0x20 [ 1810.474735][T17467] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1810.480762][T17467] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1810.486312][T17467] do_syscall_64+0x3d/0xb0 [ 1810.490562][T17467] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1810.496302][T17467] RIP: 0033:0x7f72394e6b29 [ 1810.500845][T17467] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1810.520344][T17467] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1810.528581][T17467] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1810.536388][T17467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1810.544211][T17467] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1810.552035][T17467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1810.559824][T17467] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1810.567640][T17467] 11:06:44 executing program 0: syz_clone(0x30000000, 0x0, 0x1ffff000, 0x0, 0x0, 0x0) 11:06:44 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x1, 0x2, 0xc5, 0x0, 0x7, 0x20042, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x6}, 0x1, 0x7, 0x7fffffff, 0x4, 0xffff, 0x4, 0x4, 0x0, 0x7fffffff, 0x0, 0xe1d}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0x34, 0x6, 0x8, 0x0, 0x0, 0x80000001, 0x5900, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8e12, 0x2, @perf_config_ext={0x4, 0x100000000}, 0x800, 0x5, 0x400, 0x7, 0x9, 0x9, 0xffff, 0x0, 0x401, 0x0, 0x4}) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) (rerun: 32) 11:06:44 executing program 5: syz_clone(0x12210100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:44 executing program 4: bpf$MAP_CREATE(0x2200000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:44 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:44 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 11:06:44 executing program 4: bpf$MAP_CREATE(0x2300000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:44 executing program 5: syz_clone(0x12210100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:44 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:44 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x1, 0x2, 0xc5, 0x0, 0x7, 0x20042, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x6}, 0x1, 0x7, 0x7fffffff, 0x4, 0xffff, 0x4, 0x4, 0x0, 0x7fffffff, 0x0, 0xe1d}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0x34, 0x6, 0x8, 0x0, 0x0, 0x80000001, 0x5900, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8e12, 0x2, @perf_config_ext={0x4, 0x100000000}, 0x800, 0x5, 0x400, 0x7, 0x9, 0x9, 0xffff, 0x0, 0x401, 0x0, 0x4}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) 11:06:44 executing program 4: bpf$MAP_CREATE(0xffffffff00000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:44 executing program 5: syz_clone(0x12210100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1810.726933][T17484] FAULT_INJECTION: forcing a failure. [ 1810.726933][T17484] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1810.766172][T17484] CPU: 1 PID: 17484 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1810.776802][T17484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1810.786821][T17484] Call Trace: [ 1810.789947][T17484] [ 1810.792713][T17484] dump_stack_lvl+0x151/0x1b7 [ 1810.797227][T17484] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1810.802699][T17484] dump_stack+0x15/0x17 [ 1810.806704][T17484] should_fail+0x3c6/0x510 [ 1810.810954][T17484] should_fail_alloc_page+0x5a/0x80 [ 1810.816096][T17484] __alloc_pages+0x1e6/0x7b0 [ 1810.820538][T17484] ? zone_watermark_fast+0x220/0x220 [ 1810.825921][T17484] ? __kasan_check_write+0x14/0x20 [ 1810.831026][T17484] ? _raw_spin_lock+0xa4/0x1b0 [ 1810.835706][T17484] pte_alloc_one+0x73/0x1b0 [ 1810.840052][T17484] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1810.845172][T17484] ? __pmd_alloc+0x48d/0x550 [ 1810.849596][T17484] __pte_alloc+0x86/0x350 [ 1810.853757][T17484] ? __pud_alloc+0x260/0x260 [ 1810.858276][T17484] ? __pud_alloc+0x213/0x260 [ 1810.862702][T17484] ? free_pgtables+0x280/0x280 [ 1810.867303][T17484] ? do_handle_mm_fault+0x2330/0x2330 [ 1810.872513][T17484] ? __stack_depot_save+0x34/0x470 [ 1810.877451][T17484] ? anon_vma_clone+0x9a/0x500 [ 1810.882048][T17484] copy_page_range+0x28a8/0x2f90 [ 1810.886823][T17484] ? __kasan_slab_alloc+0xb1/0xe0 [ 1810.891687][T17484] ? slab_post_alloc_hook+0x53/0x2c0 [ 1810.896977][T17484] ? copy_process+0x12bc/0x3260 [ 1810.901665][T17484] ? __x64_sys_clone+0x23f/0x290 [ 1810.906526][T17484] ? do_syscall_64+0x3d/0xb0 [ 1810.910953][T17484] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1810.916869][T17484] ? pfn_valid+0x1e0/0x1e0 [ 1810.921104][T17484] ? rwsem_write_trylock+0x15b/0x290 11:06:44 executing program 0: syz_clone(0x30000000, 0x0, 0x20000000, 0x0, 0x0, 0x0) 11:06:44 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x361, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:44 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x8, 0xde, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x19003, 0x4, 0x0, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x0, 0x7fffffff}, r0, 0xf, r1, 0x10) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0xff, 0x5f, 0x1, 0x7, 0x0, 0x8001, 0x858, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x10900, 0x7f, 0x1, 0x6, 0x80000001, 0xfffffffb, 0x4, 0x0, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r2, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x1, 0x80, 0x2, 0x3, 0x8, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0xe5d7ba9d7ef96bb8, @perf_bp={&(0x7f00000001c0), 0x7}, 0xc042, 0x6, 0x8, 0x7, 0x38, 0x55, 0x5, 0x0, 0xdb, 0x0, 0x6}) getpid() 11:06:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1810.926236][T17484] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1810.932481][T17484] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1810.938038][T17484] ? __rb_insert_augmented+0x5de/0x610 [ 1810.943330][T17484] dup_mm+0xadc/0x12c0 [ 1810.947323][T17484] ? copy_init_mm+0x20/0x20 [ 1810.951661][T17484] copy_mm+0x107/0x1b0 [ 1810.955571][T17484] copy_process+0x12bc/0x3260 [ 1810.960082][T17484] ? proc_fail_nth_write+0x20b/0x290 [ 1810.965286][T17484] ? fsnotify_perm+0x6a/0x5d0 [ 1810.969800][T17484] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1810.974748][T17484] ? vfs_write+0x9ec/0x1110 [ 1810.979088][T17484] kernel_clone+0x21e/0x9e0 [ 1810.983428][T17484] ? file_end_write+0x1c0/0x1c0 [ 1810.988114][T17484] ? create_io_thread+0x1e0/0x1e0 [ 1810.992970][T17484] ? mutex_unlock+0xb2/0x1b0 [ 1810.997398][T17484] ? __mutex_lock_slowpath+0x10/0x10 [ 1811.002523][T17484] __x64_sys_clone+0x23f/0x290 [ 1811.007213][T17484] ? __do_sys_vfork+0x130/0x130 [ 1811.011987][T17484] ? ksys_write+0x260/0x2c0 [ 1811.016321][T17484] ? debug_smp_processor_id+0x17/0x20 [ 1811.021524][T17484] ? fpregs_assert_state_consistent+0xb6/0xe0 11:06:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1811.027427][T17484] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1811.032906][T17484] do_syscall_64+0x3d/0xb0 [ 1811.037191][T17484] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1811.042883][T17484] RIP: 0033:0x7f72394e6b29 [ 1811.047130][T17484] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1811.066665][T17484] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1811.074905][T17484] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1811.082727][T17484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1811.090533][T17484] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1811.098336][T17484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1811.106156][T17484] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1811.113967][T17484] 11:06:45 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 11:06:45 executing program 0: syz_clone(0x30000000, 0x0, 0x3f000000, 0x0, 0x0, 0x0) 11:06:45 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) 11:06:45 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x362, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:45 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x8, 0xde, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x19003, 0x4, 0x0, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x0, 0x7fffffff}, r0, 0xf, r1, 0x10) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0xff, 0x5f, 0x1, 0x7, 0x0, 0x8001, 0x858, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x10900, 0x7f, 0x1, 0x6, 0x80000001, 0xfffffffb, 0x4, 0x0, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r2, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x1, 0x80, 0x2, 0x3, 0x8, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0xe5d7ba9d7ef96bb8, @perf_bp={&(0x7f00000001c0), 0x7}, 0xc042, 0x6, 0x8, 0x7, 0x38, 0x55, 0x5, 0x0, 0xdb, 0x0, 0x6}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x1, 0x80, 0x2, 0x3, 0x8, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0xe5d7ba9d7ef96bb8, @perf_bp={&(0x7f00000001c0), 0x7}, 0xc042, 0x6, 0x8, 0x7, 0x38, 0x55, 0x5, 0x0, 0xdb, 0x0, 0x6}) getpid() 11:06:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:45 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) (async) 11:06:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x2, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:45 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x363, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:45 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x8, 0xde, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x19003, 0x4, 0x0, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x0, 0x7fffffff}, r0, 0xf, r1, 0x10) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0xff, 0x5f, 0x1, 0x7, 0x0, 0x8001, 0x858, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x10900, 0x7f, 0x1, 0x6, 0x80000001, 0xfffffffb, 0x4, 0x0, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r2, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x1, 0x80, 0x2, 0x3, 0x8, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0xe5d7ba9d7ef96bb8, @perf_bp={&(0x7f00000001c0), 0x7}, 0xc042, 0x6, 0x8, 0x7, 0x38, 0x55, 0x5, 0x0, 0xdb, 0x0, 0x6}) getpid() syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x8, 0xde, 0x7f, 0x3, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x19003, 0x4, 0x0, 0x8, 0x9, 0x4, 0x9, 0x0, 0x1, 0x0, 0x7fffffff}, r0, 0xf, r1, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0xff, 0x5f, 0x1, 0x7, 0x0, 0x8001, 0x858, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x10900, 0x7f, 0x1, 0x6, 0x80000001, 0xfffffffb, 0x4, 0x0, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r2, 0x4) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x1, 0x80, 0x2, 0x3, 0x8, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0xe5d7ba9d7ef96bb8, @perf_bp={&(0x7f00000001c0), 0x7}, 0xc042, 0x6, 0x8, 0x7, 0x38, 0x55, 0x5, 0x0, 0xdb, 0x0, 0x6}) (async) getpid() (async) [ 1811.196486][T17522] FAULT_INJECTION: forcing a failure. [ 1811.196486][T17522] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.230062][T17522] CPU: 1 PID: 17522 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 11:06:45 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x3}, 0xc) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.time\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xbe}, @alu={0x4, 0x1, 0x9, 0x5, 0x9, 0x8, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xea}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, @generic={0x4d, 0x8, 0xd, 0xfff, 0x50d}, @generic={0x3, 0x1, 0x5, 0x7, 0xcc53}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}]}, &(0x7f0000000740)='syzkaller\x00', 0x5, 0xa4, &(0x7f0000000780)=""/164, 0x40f00, 0x19, '\x00', r0, 0x0, r3, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x1, 0x7, 0x10001}, 0x10, 0x42f3, r3}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@map=r4, r5, 0x13, 0x6, r6}, 0x14) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x5, &(0x7f0000000040)=@raw=[@generic={0x5, 0x7, 0x8, 0x1, 0x4}, @call={0x85, 0x0, 0x0, 0x10}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0xb, 0x4, 0xf, 0x18, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x45, &(0x7f00000000c0)=""/69, 0x40f00, 0x4, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x7, 0x6, 0x20}, 0x10, 0x3e89, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r1, 0xffffffffffffffff, r2, 0x1, r3, r7]}, 0x80) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000980)={r6}, 0x8) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f00000009c0)) r9 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/time\x00') 11:06:45 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x3}, 0xc) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.time\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xbe}, @alu={0x4, 0x1, 0x9, 0x5, 0x9, 0x8, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xea}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, @generic={0x4d, 0x8, 0xd, 0xfff, 0x50d}, @generic={0x3, 0x1, 0x5, 0x7, 0xcc53}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}]}, &(0x7f0000000740)='syzkaller\x00', 0x5, 0xa4, &(0x7f0000000780)=""/164, 0x40f00, 0x19, '\x00', r0, 0x0, r3, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x1, 0x7, 0x10001}, 0x10, 0x42f3, r3}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@map=r4, r5, 0x13, 0x6, r6}, 0x14) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x5, &(0x7f0000000040)=@raw=[@generic={0x5, 0x7, 0x8, 0x1, 0x4}, @call={0x85, 0x0, 0x0, 0x10}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0xb, 0x4, 0xf, 0x18, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x45, &(0x7f00000000c0)=""/69, 0x40f00, 0x4, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x7, 0x6, 0x20}, 0x10, 0x3e89, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r1, 0xffffffffffffffff, r2, 0x1, r3, r7]}, 0x80) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000980)={r6}, 0x8) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f00000009c0)) (async) r9 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/time\x00') [ 1811.240506][T17522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1811.250407][T17522] Call Trace: [ 1811.253529][T17522] [ 1811.256305][T17522] dump_stack_lvl+0x151/0x1b7 [ 1811.260816][T17522] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1811.266289][T17522] dump_stack+0x15/0x17 [ 1811.270291][T17522] should_fail+0x3c6/0x510 [ 1811.274536][T17522] __should_failslab+0xa4/0xe0 [ 1811.279133][T17522] ? vm_area_dup+0x26/0x230 [ 1811.283556][T17522] should_failslab+0x9/0x20 [ 1811.287896][T17522] slab_pre_alloc_hook+0x37/0xd0 [ 1811.292671][T17522] ? vm_area_dup+0x26/0x230 [ 1811.297027][T17522] kmem_cache_alloc+0x44/0x200 [ 1811.301615][T17522] vm_area_dup+0x26/0x230 [ 1811.305778][T17522] dup_mm+0x81b/0x12c0 [ 1811.309691][T17522] ? copy_init_mm+0x20/0x20 [ 1811.314024][T17522] copy_mm+0x107/0x1b0 [ 1811.318192][T17522] copy_process+0x12bc/0x3260 [ 1811.322700][T17522] ? proc_fail_nth_write+0x20b/0x290 [ 1811.327822][T17522] ? fsnotify_perm+0x6a/0x5d0 [ 1811.332335][T17522] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1811.337282][T17522] ? vfs_write+0x9ec/0x1110 [ 1811.341621][T17522] kernel_clone+0x21e/0x9e0 [ 1811.345960][T17522] ? file_end_write+0x1c0/0x1c0 [ 1811.350648][T17522] ? create_io_thread+0x1e0/0x1e0 [ 1811.355511][T17522] ? mutex_unlock+0xb2/0x1b0 [ 1811.359938][T17522] ? __mutex_lock_slowpath+0x10/0x10 [ 1811.365058][T17522] __x64_sys_clone+0x23f/0x290 [ 1811.369659][T17522] ? __do_sys_vfork+0x130/0x130 [ 1811.374347][T17522] ? ksys_write+0x260/0x2c0 [ 1811.378684][T17522] ? debug_smp_processor_id+0x17/0x20 [ 1811.383888][T17522] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1811.389796][T17522] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1811.395260][T17522] do_syscall_64+0x3d/0xb0 [ 1811.399520][T17522] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1811.405243][T17522] RIP: 0033:0x7f72394e6b29 [ 1811.409497][T17522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1811.428953][T17522] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1811.437191][T17522] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:06:45 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) [ 1811.445002][T17522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1811.453165][T17522] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1811.460968][T17522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1811.468782][T17522] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1811.476602][T17522] [ 1811.510120][T17555] FAULT_INJECTION: forcing a failure. [ 1811.510120][T17555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1811.523414][T17555] CPU: 1 PID: 17555 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1811.533848][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1811.543825][T17555] Call Trace: [ 1811.546949][T17555] [ 1811.549730][T17555] dump_stack_lvl+0x151/0x1b7 [ 1811.554244][T17555] ? io_uring_drop_tctx_refs+0x190/0x190 11:06:45 executing program 0: syz_clone(0x30000000, 0x0, 0x40000000, 0x0, 0x0, 0x0) 11:06:45 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x3}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.time\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xbe}, @alu={0x4, 0x1, 0x9, 0x5, 0x9, 0x8, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xea}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, @generic={0x4d, 0x8, 0xd, 0xfff, 0x50d}, @generic={0x3, 0x1, 0x5, 0x7, 0xcc53}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}]}, &(0x7f0000000740)='syzkaller\x00', 0x5, 0xa4, &(0x7f0000000780)=""/164, 0x40f00, 0x19, '\x00', r0, 0x0, r3, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x1, 0x7, 0x10001}, 0x10, 0x42f3, r3}, 0x80) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xbe}, @alu={0x4, 0x1, 0x9, 0x5, 0x9, 0x8, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xea}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, @generic={0x4d, 0x8, 0xd, 0xfff, 0x50d}, @generic={0x3, 0x1, 0x5, 0x7, 0xcc53}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}]}, &(0x7f0000000740)='syzkaller\x00', 0x5, 0xa4, &(0x7f0000000780)=""/164, 0x40f00, 0x19, '\x00', r0, 0x0, r3, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x1, 0x7, 0x10001}, 0x10, 0x42f3, r3}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@map=r4, r5, 0x13, 0x6, r6}, 0x14) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@map=r4, r5, 0x13, 0x6, r6}, 0x14) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x5, &(0x7f0000000040)=@raw=[@generic={0x5, 0x7, 0x8, 0x1, 0x4}, @call={0x85, 0x0, 0x0, 0x10}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0xb, 0x4, 0xf, 0x18, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x45, &(0x7f00000000c0)=""/69, 0x40f00, 0x4, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x7, 0x6, 0x20}, 0x10, 0x3e89, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r1, 0xffffffffffffffff, r2, 0x1, r3, r7]}, 0x80) bpf$ITER_CREATE(0x21, &(0x7f0000000980)={r6}, 0x8) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000980)={r6}, 0x8) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f00000009c0)) r9 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/time\x00') 11:06:45 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x364, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:45 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) 11:06:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x3, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:45 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1811.559710][T17555] ? __switch_to+0x62a/0x1190 [ 1811.564226][T17555] dump_stack+0x15/0x17 [ 1811.568299][T17555] should_fail+0x3c6/0x510 [ 1811.572552][T17555] should_fail_alloc_page+0x5a/0x80 [ 1811.577585][T17555] __alloc_pages+0x1e6/0x7b0 [ 1811.582016][T17555] ? zone_watermark_fast+0x220/0x220 [ 1811.587138][T17555] pte_alloc_one+0x73/0x1b0 [ 1811.591476][T17555] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1811.596508][T17555] ? preempt_schedule+0xd9/0xe0 [ 1811.601195][T17555] ? preempt_schedule_common+0xbe/0xf0 [ 1811.606487][T17555] __pte_alloc+0x86/0x350 11:06:45 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x366, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:45 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x367, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1811.610656][T17555] ? free_pgtables+0x280/0x280 [ 1811.615256][T17555] ? _raw_spin_lock+0xa4/0x1b0 [ 1811.619854][T17555] ? __kasan_check_write+0x14/0x20 [ 1811.624802][T17555] copy_page_range+0x28a8/0x2f90 [ 1811.629586][T17555] ? __kasan_slab_alloc+0xb1/0xe0 [ 1811.634445][T17555] ? pfn_valid+0x1e0/0x1e0 [ 1811.638693][T17555] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 1811.644246][T17555] ? __rb_insert_augmented+0x5de/0x610 [ 1811.649542][T17555] dup_mm+0xadc/0x12c0 [ 1811.653447][T17555] ? copy_init_mm+0x20/0x20 11:06:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x4, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1811.657785][T17555] copy_mm+0x107/0x1b0 [ 1811.661977][T17555] copy_process+0x12bc/0x3260 [ 1811.666493][T17555] ? proc_fail_nth_write+0x20b/0x290 [ 1811.671614][T17555] ? fsnotify_perm+0x6a/0x5d0 [ 1811.676299][T17555] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1811.681246][T17555] ? vfs_write+0x9ec/0x1110 [ 1811.685586][T17555] kernel_clone+0x21e/0x9e0 [ 1811.690007][T17555] ? file_end_write+0x1c0/0x1c0 [ 1811.694697][T17555] ? create_io_thread+0x1e0/0x1e0 [ 1811.699548][T17555] ? mutex_unlock+0xb2/0x1b0 [ 1811.703973][T17555] ? __mutex_lock_slowpath+0x10/0x10 [ 1811.709098][T17555] __x64_sys_clone+0x23f/0x290 [ 1811.713697][T17555] ? __do_sys_vfork+0x130/0x130 [ 1811.718386][T17555] ? ksys_write+0x260/0x2c0 [ 1811.722748][T17555] ? debug_smp_processor_id+0x17/0x20 [ 1811.727938][T17555] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1811.733834][T17555] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1811.739302][T17555] do_syscall_64+0x3d/0xb0 [ 1811.743553][T17555] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1811.749366][T17555] RIP: 0033:0x7f72394e6b29 [ 1811.753620][T17555] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1811.773061][T17555] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1811.781308][T17555] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1811.789124][T17555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1811.796930][T17555] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 11:06:45 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x368, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:45 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x20, &(0x7f00000014c0)={&(0x7f0000001380)=""/151, 0x97, 0x0, &(0x7f0000001440)=""/106, 0x6a}}, 0x10) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000080)=""/226, 0xe2}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/211, 0xd3}], 0x5, &(0x7f0000001300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x2000) [ 1811.804741][T17555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1811.812558][T17555] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1811.820374][T17555] 11:06:45 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) [ 1812.032684][T17583] FAULT_INJECTION: forcing a failure. [ 1812.032684][T17583] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.060648][T17583] CPU: 0 PID: 17583 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1812.071086][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1812.080981][T17583] Call Trace: [ 1812.084102][T17583] [ 1812.086971][T17583] dump_stack_lvl+0x151/0x1b7 [ 1812.091483][T17583] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1812.096954][T17583] dump_stack+0x15/0x17 [ 1812.100942][T17583] should_fail+0x3c6/0x510 [ 1812.105200][T17583] __should_failslab+0xa4/0xe0 [ 1812.109794][T17583] ? vm_area_dup+0x26/0x230 [ 1812.114131][T17583] should_failslab+0x9/0x20 [ 1812.118476][T17583] slab_pre_alloc_hook+0x37/0xd0 [ 1812.123248][T17583] ? vm_area_dup+0x26/0x230 [ 1812.127590][T17583] kmem_cache_alloc+0x44/0x200 [ 1812.132191][T17583] vm_area_dup+0x26/0x230 [ 1812.136354][T17583] dup_mm+0x81b/0x12c0 [ 1812.140264][T17583] ? copy_init_mm+0x20/0x20 [ 1812.144609][T17583] copy_mm+0x107/0x1b0 [ 1812.148504][T17583] copy_process+0x12bc/0x3260 [ 1812.153020][T17583] ? proc_fail_nth_write+0x20b/0x290 [ 1812.158153][T17583] ? fsnotify_perm+0x6a/0x5d0 [ 1812.162656][T17583] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1812.167611][T17583] ? vfs_write+0x9ec/0x1110 [ 1812.171943][T17583] kernel_clone+0x21e/0x9e0 [ 1812.176286][T17583] ? file_end_write+0x1c0/0x1c0 [ 1812.180977][T17583] ? create_io_thread+0x1e0/0x1e0 [ 1812.185824][T17583] ? mutex_unlock+0xb2/0x1b0 [ 1812.190262][T17583] ? __mutex_lock_slowpath+0x10/0x10 [ 1812.195379][T17583] __x64_sys_clone+0x23f/0x290 [ 1812.200156][T17583] ? __do_sys_vfork+0x130/0x130 [ 1812.204832][T17583] ? ksys_write+0x260/0x2c0 [ 1812.209179][T17583] ? debug_smp_processor_id+0x17/0x20 [ 1812.214470][T17583] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1812.220379][T17583] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1812.225858][T17583] do_syscall_64+0x3d/0xb0 [ 1812.230189][T17583] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1812.235917][T17583] RIP: 0033:0x7f72394e6b29 [ 1812.240181][T17583] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1812.259828][T17583] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1812.268034][T17583] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:06:46 executing program 0: syz_clone(0x30000000, 0x0, 0x41000000, 0x0, 0x0, 0x0) 11:06:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x5, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:46 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x20, &(0x7f00000014c0)={&(0x7f0000001380)=""/151, 0x97, 0x0, &(0x7f0000001440)=""/106, 0x6a}}, 0x10) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000080)=""/226, 0xe2}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/211, 0xd3}], 0x5, &(0x7f0000001300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x2000) 11:06:46 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x369, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0xa, 0x5, 0x0, 0xfffffffffffffffc, 0x10}, @alu={0x7, 0x1, 0x1, 0x7, 0x7, 0x10, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0xd, 0x5, 0xb, 0x6, 0xfffffffffffffffc}, @generic={0x1, 0x8, 0x8, 0x5, 0x101}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x3dc0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xb}, 0x10, 0x2e5d1}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x2000}) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x6, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:46 executing program 5: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x20, &(0x7f00000014c0)={&(0x7f0000001380)=""/151, 0x97, 0x0, &(0x7f0000001440)=""/106, 0x6a}}, 0x10) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000080)=""/226, 0xe2}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/211, 0xd3}], 0x5, &(0x7f0000001300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x2000) 11:06:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0xa, 0x5, 0x0, 0xfffffffffffffffc, 0x10}, @alu={0x7, 0x1, 0x1, 0x7, 0x7, 0x10, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0xd, 0x5, 0xb, 0x6, 0xfffffffffffffffc}, @generic={0x1, 0x8, 0x8, 0x5, 0x101}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x3dc0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xb}, 0x10, 0x2e5d1}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x2000}) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:46 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1812.276200][T17583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1812.284190][T17583] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1812.291997][T17583] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1812.299816][T17583] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1812.307626][T17583] 11:06:46 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) [ 1812.374857][T17598] FAULT_INJECTION: forcing a failure. [ 1812.374857][T17598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1812.396684][T17598] CPU: 0 PID: 17598 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1812.407120][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1812.417029][T17598] Call Trace: [ 1812.420140][T17598] [ 1812.422924][T17598] dump_stack_lvl+0x151/0x1b7 [ 1812.427443][T17598] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1812.432902][T17598] dump_stack+0x15/0x17 [ 1812.436894][T17598] should_fail+0x3c6/0x510 [ 1812.441241][T17598] should_fail_alloc_page+0x5a/0x80 [ 1812.446267][T17598] __alloc_pages+0x1e6/0x7b0 [ 1812.450791][T17598] ? zone_watermark_fast+0x220/0x220 [ 1812.455902][T17598] get_zeroed_page+0x19/0x40 [ 1812.460329][T17598] __pud_alloc+0x8b/0x260 [ 1812.464579][T17598] ? stack_trace_snprint+0xf0/0xf0 [ 1812.469700][T17598] ? do_handle_mm_fault+0x2330/0x2330 [ 1812.474905][T17598] ? __stack_depot_save+0x34/0x470 [ 1812.479854][T17598] ? anon_vma_clone+0x9a/0x500 [ 1812.484460][T17598] copy_page_range+0x2bcf/0x2f90 [ 1812.489232][T17598] ? __kasan_slab_alloc+0xb1/0xe0 [ 1812.494089][T17598] ? slab_post_alloc_hook+0x53/0x2c0 [ 1812.499212][T17598] ? dup_mm+0x8c5/0x12c0 [ 1812.503286][T17598] ? copy_mm+0x107/0x1b0 [ 1812.507363][T17598] ? copy_process+0x12bc/0x3260 [ 1812.512055][T17598] ? kernel_clone+0x21e/0x9e0 [ 1812.516564][T17598] ? __x64_sys_clone+0x23f/0x290 [ 1812.521339][T17598] ? do_syscall_64+0x3d/0xb0 [ 1812.525808][T17598] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1812.531693][T17598] ? pfn_valid+0x1e0/0x1e0 [ 1812.535924][T17598] ? rwsem_write_trylock+0x15b/0x290 [ 1812.541046][T17598] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1812.547298][T17598] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1812.552848][T17598] ? __rb_insert_augmented+0x5de/0x610 [ 1812.558400][T17598] dup_mm+0xadc/0x12c0 [ 1812.562321][T17598] ? copy_init_mm+0x20/0x20 [ 1812.566755][T17598] copy_mm+0x107/0x1b0 [ 1812.570751][T17598] copy_process+0x12bc/0x3260 [ 1812.575347][T17598] ? proc_fail_nth_write+0x20b/0x290 [ 1812.580470][T17598] ? fsnotify_perm+0x6a/0x5d0 [ 1812.584984][T17598] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1812.589930][T17598] ? vfs_write+0x9ec/0x1110 [ 1812.594271][T17598] kernel_clone+0x21e/0x9e0 [ 1812.598700][T17598] ? file_end_write+0x1c0/0x1c0 [ 1812.603385][T17598] ? create_io_thread+0x1e0/0x1e0 [ 1812.608241][T17598] ? mutex_unlock+0xb2/0x1b0 [ 1812.612674][T17598] ? __mutex_lock_slowpath+0x10/0x10 [ 1812.617791][T17598] __x64_sys_clone+0x23f/0x290 [ 1812.622393][T17598] ? __do_sys_vfork+0x130/0x130 [ 1812.627074][T17598] ? ksys_write+0x260/0x2c0 [ 1812.631419][T17598] ? debug_smp_processor_id+0x17/0x20 [ 1812.636624][T17598] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1812.642618][T17598] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1812.648082][T17598] do_syscall_64+0x3d/0xb0 [ 1812.652334][T17598] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1812.658073][T17598] RIP: 0033:0x7f72394e6b29 [ 1812.662317][T17598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1812.681845][T17598] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1812.690091][T17598] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1812.697900][T17598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1812.705802][T17598] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1812.713619][T17598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 11:06:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x7, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:46 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:46 executing program 0: syz_clone(0x30000000, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0) 11:06:46 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:46 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:46 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:46 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0xfffffffffffffffc, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000100), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000040)}}, 0x6b) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x400, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x98) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) 11:06:46 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0xfffffffffffffffc, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000100), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000040)}}, 0x6b) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0xfffffffffffffffc, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000100), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000040)}}, 0x6b) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x400}, 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x400, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x98) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) 11:06:46 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0xfffffffffffffffc, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000100), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000040)}}, 0x6b) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0xfffffffffffffffc, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000100), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000040)}}, 0x6b) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x400}, 0x8) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x400, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x98) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) 11:06:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0xa, 0x5, 0x0, 0xfffffffffffffffc, 0x10}, @alu={0x7, 0x1, 0x1, 0x7, 0x7, 0x10, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0xd, 0x5, 0xb, 0x6, 0xfffffffffffffffc}, @generic={0x1, 0x8, 0x8, 0x5, 0x101}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x3dc0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xb}, 0x10, 0x2e5d1}, 0x80) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x2000}) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:46 executing program 5: r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) write$cgroup_pid(r1, &(0x7f0000000000)=r0, 0x12) 11:06:46 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 11:06:46 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x8, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1812.721423][T17598] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1812.729259][T17598] [ 1812.764054][T17640] FAULT_INJECTION: forcing a failure. [ 1812.764054][T17640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1812.796358][T17640] CPU: 0 PID: 17640 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1812.806798][T17640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1812.816799][T17640] Call Trace: [ 1812.819915][T17640] [ 1812.822689][T17640] dump_stack_lvl+0x151/0x1b7 [ 1812.827199][T17640] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1812.832890][T17640] dump_stack+0x15/0x17 [ 1812.836879][T17640] should_fail+0x3c6/0x510 [ 1812.841135][T17640] should_fail_alloc_page+0x5a/0x80 [ 1812.846166][T17640] __alloc_pages+0x1e6/0x7b0 [ 1812.850598][T17640] ? zone_watermark_fast+0x220/0x220 [ 1812.855714][T17640] ? zone_watermark_fast+0x220/0x220 [ 1812.860835][T17640] ? __kasan_check_write+0x14/0x20 [ 1812.865784][T17640] ? _raw_spin_lock+0xa4/0x1b0 [ 1812.870379][T17640] __pmd_alloc+0xb1/0x550 [ 1812.874548][T17640] ? __pud_alloc+0x260/0x260 [ 1812.878977][T17640] ? __pud_alloc+0x213/0x260 [ 1812.883400][T17640] ? do_handle_mm_fault+0x2330/0x2330 [ 1812.888608][T17640] ? __stack_depot_save+0x34/0x470 [ 1812.893551][T17640] ? anon_vma_clone+0x9a/0x500 [ 1812.898159][T17640] copy_page_range+0x2b3d/0x2f90 [ 1812.902927][T17640] ? __kasan_slab_alloc+0xb1/0xe0 [ 1812.907787][T17640] ? slab_post_alloc_hook+0x53/0x2c0 [ 1812.912911][T17640] ? dup_mm+0x8c5/0x12c0 [ 1812.916986][T17640] ? copy_mm+0x107/0x1b0 [ 1812.921066][T17640] ? copy_process+0x12bc/0x3260 [ 1812.925752][T17640] ? __x64_sys_clone+0x23f/0x290 [ 1812.930528][T17640] ? do_syscall_64+0x3d/0xb0 [ 1812.934953][T17640] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1812.940867][T17640] ? pfn_valid+0x1e0/0x1e0 [ 1812.945114][T17640] ? rwsem_write_trylock+0x15b/0x290 [ 1812.950233][T17640] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1812.956477][T17640] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1812.962037][T17640] ? __rb_insert_augmented+0x5de/0x610 [ 1812.967334][T17640] dup_mm+0xadc/0x12c0 [ 1812.971235][T17640] ? copy_init_mm+0x20/0x20 [ 1812.975577][T17640] copy_mm+0x107/0x1b0 [ 1812.979484][T17640] copy_process+0x12bc/0x3260 [ 1812.983995][T17640] ? proc_fail_nth_write+0x20b/0x290 [ 1812.989124][T17640] ? fsnotify_perm+0x6a/0x5d0 [ 1812.993635][T17640] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1812.998582][T17640] ? vfs_write+0x9ec/0x1110 [ 1813.002922][T17640] kernel_clone+0x21e/0x9e0 [ 1813.007252][T17640] ? file_end_write+0x1c0/0x1c0 [ 1813.011944][T17640] ? create_io_thread+0x1e0/0x1e0 [ 1813.017323][T17640] ? mutex_unlock+0xb2/0x1b0 [ 1813.021759][T17640] ? __mutex_lock_slowpath+0x10/0x10 [ 1813.026904][T17640] __x64_sys_clone+0x23f/0x290 [ 1813.031473][T17640] ? __do_sys_vfork+0x130/0x130 [ 1813.036157][T17640] ? ksys_write+0x260/0x2c0 [ 1813.040594][T17640] ? debug_smp_processor_id+0x17/0x20 [ 1813.045806][T17640] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1813.051711][T17640] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1813.057192][T17640] do_syscall_64+0x3d/0xb0 [ 1813.061425][T17640] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1813.067154][T17640] RIP: 0033:0x7f72394e6b29 [ 1813.071405][T17640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1813.090848][T17640] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1813.099099][T17640] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1813.107002][T17640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1813.114902][T17640] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1813.122705][T17640] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1813.130516][T17640] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1813.138328][T17640] 11:06:47 executing program 0: syz_clone(0x30000000, 0x0, 0xfbffffff, 0x0, 0x0, 0x0) 11:06:47 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:47 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xprtrdma_post_recv\x00'}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:47 executing program 5: r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) write$cgroup_pid(r1, &(0x7f0000000000)=r0, 0x12) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000000)=r0, 0x12) (async) 11:06:47 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 11:06:47 executing program 5: r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000000)=r0, 0x12) [ 1813.281978][T17656] FAULT_INJECTION: forcing a failure. [ 1813.281978][T17656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1813.302802][T17656] CPU: 0 PID: 17656 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1813.313248][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1813.323135][T17656] Call Trace: [ 1813.326345][T17656] [ 1813.329119][T17656] dump_stack_lvl+0x151/0x1b7 [ 1813.333632][T17656] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1813.339101][T17656] dump_stack+0x15/0x17 [ 1813.343182][T17656] should_fail+0x3c6/0x510 [ 1813.347443][T17656] should_fail_alloc_page+0x5a/0x80 [ 1813.352468][T17656] __alloc_pages+0x1e6/0x7b0 [ 1813.356896][T17656] ? zone_watermark_fast+0x220/0x220 [ 1813.362017][T17656] ? __kasan_check_write+0x14/0x20 [ 1813.366962][T17656] ? _raw_spin_lock+0xa4/0x1b0 [ 1813.371565][T17656] pte_alloc_one+0x73/0x1b0 [ 1813.375899][T17656] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1813.380937][T17656] ? __pmd_alloc+0x48d/0x550 [ 1813.385368][T17656] __pte_alloc+0x86/0x350 [ 1813.389525][T17656] ? __pud_alloc+0x260/0x260 [ 1813.393956][T17656] ? __pud_alloc+0x213/0x260 [ 1813.398384][T17656] ? free_pgtables+0x280/0x280 [ 1813.403177][T17656] ? do_handle_mm_fault+0x2330/0x2330 [ 1813.408372][T17656] ? __stack_depot_save+0x34/0x470 [ 1813.413414][T17656] ? anon_vma_clone+0x9a/0x500 [ 1813.418008][T17656] copy_page_range+0x28a8/0x2f90 [ 1813.422868][T17656] ? __kasan_slab_alloc+0xb1/0xe0 [ 1813.427818][T17656] ? slab_post_alloc_hook+0x53/0x2c0 [ 1813.433285][T17656] ? copy_process+0x12bc/0x3260 [ 1813.437970][T17656] ? __x64_sys_clone+0x23f/0x290 [ 1813.442834][T17656] ? do_syscall_64+0x3d/0xb0 [ 1813.447269][T17656] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1813.453252][T17656] ? pfn_valid+0x1e0/0x1e0 [ 1813.457498][T17656] ? rwsem_write_trylock+0x15b/0x290 [ 1813.462620][T17656] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1813.468873][T17656] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1813.474511][T17656] ? __rb_insert_augmented+0x5de/0x610 [ 1813.479819][T17656] dup_mm+0xadc/0x12c0 [ 1813.483825][T17656] ? copy_init_mm+0x20/0x20 [ 1813.488160][T17656] copy_mm+0x107/0x1b0 [ 1813.492064][T17656] copy_process+0x12bc/0x3260 [ 1813.496578][T17656] ? proc_fail_nth_write+0x20b/0x290 [ 1813.501698][T17656] ? fsnotify_perm+0x6a/0x5d0 [ 1813.506212][T17656] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1813.511244][T17656] ? vfs_write+0x9ec/0x1110 [ 1813.515581][T17656] kernel_clone+0x21e/0x9e0 [ 1813.519933][T17656] ? file_end_write+0x1c0/0x1c0 [ 1813.524694][T17656] ? create_io_thread+0x1e0/0x1e0 [ 1813.529556][T17656] ? mutex_unlock+0xb2/0x1b0 [ 1813.533990][T17656] ? __mutex_lock_slowpath+0x10/0x10 [ 1813.539106][T17656] __x64_sys_clone+0x23f/0x290 [ 1813.543709][T17656] ? __do_sys_vfork+0x130/0x130 [ 1813.548391][T17656] ? ksys_write+0x260/0x2c0 [ 1813.552729][T17656] ? debug_smp_processor_id+0x17/0x20 [ 1813.557946][T17656] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1813.563841][T17656] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1813.569309][T17656] do_syscall_64+0x3d/0xb0 [ 1813.573648][T17656] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1813.579372][T17656] RIP: 0033:0x7f72394e6b29 [ 1813.583630][T17656] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1813.603161][T17656] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1813.611399][T17656] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1813.619240][T17656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:47 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xa, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:47 executing program 5: syz_clone(0x30000600, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:47 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1813.627022][T17656] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1813.634833][T17656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1813.642645][T17656] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1813.650471][T17656] 11:06:47 executing program 5: syz_clone(0x30000600, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:47 executing program 0: syz_clone(0x30000000, 0x0, 0xfeffffff, 0x0, 0x0, 0x0) 11:06:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xb, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:47 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xprtrdma_post_recv\x00'}, 0x10) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:47 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x370, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:47 executing program 5: syz_clone(0x30000600, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:47 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 11:06:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xc, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:47 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) getpid() 11:06:47 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x371, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xd, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:47 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async, rerun: 64) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) getpid() 11:06:47 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x372, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1813.937032][T17698] FAULT_INJECTION: forcing a failure. [ 1813.937032][T17698] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.962516][T17698] CPU: 1 PID: 17698 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1813.972969][T17698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1813.982858][T17698] Call Trace: [ 1813.985975][T17698] [ 1813.988775][T17698] dump_stack_lvl+0x151/0x1b7 [ 1813.993268][T17698] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1813.998831][T17698] dump_stack+0x15/0x17 [ 1814.002812][T17698] should_fail+0x3c6/0x510 [ 1814.007067][T17698] __should_failslab+0xa4/0xe0 [ 1814.011665][T17698] ? vm_area_dup+0x26/0x230 [ 1814.016096][T17698] should_failslab+0x9/0x20 [ 1814.020433][T17698] slab_pre_alloc_hook+0x37/0xd0 [ 1814.025207][T17698] ? vm_area_dup+0x26/0x230 [ 1814.029543][T17698] kmem_cache_alloc+0x44/0x200 11:06:47 executing program 0: syz_clone(0x30000000, 0x0, 0xff0f0100, 0x0, 0x0, 0x0) 11:06:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xe, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:47 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xprtrdma_post_recv\x00'}, 0x10) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xf, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x10, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1814.034157][T17698] vm_area_dup+0x26/0x230 [ 1814.038313][T17698] dup_mm+0x81b/0x12c0 [ 1814.042220][T17698] ? copy_init_mm+0x20/0x20 [ 1814.046563][T17698] copy_mm+0x107/0x1b0 [ 1814.050463][T17698] copy_process+0x12bc/0x3260 [ 1814.054980][T17698] ? proc_fail_nth_write+0x20b/0x290 [ 1814.060095][T17698] ? fsnotify_perm+0x6a/0x5d0 [ 1814.064736][T17698] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1814.069683][T17698] ? vfs_write+0x9ec/0x1110 [ 1814.074020][T17698] kernel_clone+0x21e/0x9e0 [ 1814.078364][T17698] ? file_end_write+0x1c0/0x1c0 [ 1814.083231][T17698] ? create_io_thread+0x1e0/0x1e0 [ 1814.088089][T17698] ? mutex_unlock+0xb2/0x1b0 [ 1814.092506][T17698] ? __mutex_lock_slowpath+0x10/0x10 [ 1814.097633][T17698] __x64_sys_clone+0x23f/0x290 [ 1814.102340][T17698] ? __do_sys_vfork+0x130/0x130 [ 1814.107013][T17698] ? ksys_write+0x260/0x2c0 [ 1814.111356][T17698] ? debug_smp_processor_id+0x17/0x20 [ 1814.116564][T17698] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1814.122460][T17698] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1814.127928][T17698] do_syscall_64+0x3d/0xb0 [ 1814.132182][T17698] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1814.138000][T17698] RIP: 0033:0x7f72394e6b29 [ 1814.142249][T17698] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1814.161691][T17698] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1814.169937][T17698] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1814.177750][T17698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:48 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 11:06:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x11, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:48 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x373, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:48 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) getpid() syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) (async) getpid() (async) 11:06:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x12, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1814.185757][T17698] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1814.193634][T17698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1814.201625][T17698] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1814.209439][T17698] 11:06:48 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x13, 0x1}, 0x14) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='vnet_tx_trigger\x00', r1}, 0x10) close(r2) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) [ 1814.254468][T17722] FAULT_INJECTION: forcing a failure. [ 1814.254468][T17722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1814.270882][T17722] CPU: 1 PID: 17722 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1814.281314][T17722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1814.291209][T17722] Call Trace: [ 1814.294333][T17722] [ 1814.297115][T17722] dump_stack_lvl+0x151/0x1b7 [ 1814.303537][T17722] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1814.309113][T17722] ? __switch_to+0x62a/0x1190 [ 1814.313622][T17722] ? __alloc_pages+0x7b0/0x7b0 [ 1814.318201][T17722] dump_stack+0x15/0x17 [ 1814.322197][T17722] should_fail+0x3c6/0x510 [ 1814.326442][T17722] should_fail_alloc_page+0x5a/0x80 [ 1814.331475][T17722] __alloc_pages+0x1e6/0x7b0 [ 1814.335908][T17722] ? zone_watermark_fast+0x220/0x220 [ 1814.341029][T17722] ? is_bpf_text_address+0x172/0x190 [ 1814.346145][T17722] pte_alloc_one+0x73/0x1b0 [ 1814.350484][T17722] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1814.355520][T17722] ? arch_stack_walk+0xf3/0x140 [ 1814.360207][T17722] __pte_alloc+0x86/0x350 [ 1814.364382][T17722] ? free_pgtables+0x280/0x280 [ 1814.368970][T17722] ? _raw_spin_lock+0xa4/0x1b0 [ 1814.373578][T17722] ? __kasan_check_write+0x14/0x20 [ 1814.378527][T17722] copy_page_range+0x28a8/0x2f90 [ 1814.383316][T17722] ? __kasan_slab_alloc+0xb1/0xe0 [ 1814.388174][T17722] ? pfn_valid+0x1e0/0x1e0 [ 1814.392410][T17722] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1814.397965][T17722] ? __rb_insert_augmented+0x5de/0x610 [ 1814.403263][T17722] dup_mm+0xadc/0x12c0 [ 1814.407165][T17722] ? copy_init_mm+0x20/0x20 [ 1814.411505][T17722] copy_mm+0x107/0x1b0 [ 1814.415407][T17722] copy_process+0x12bc/0x3260 [ 1814.419922][T17722] ? proc_fail_nth_write+0x20b/0x290 [ 1814.425040][T17722] ? fsnotify_perm+0x6a/0x5d0 [ 1814.429557][T17722] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1814.434505][T17722] ? vfs_write+0x9ec/0x1110 [ 1814.438844][T17722] kernel_clone+0x21e/0x9e0 [ 1814.443184][T17722] ? file_end_write+0x1c0/0x1c0 [ 1814.447870][T17722] ? create_io_thread+0x1e0/0x1e0 [ 1814.452730][T17722] ? mutex_unlock+0xb2/0x1b0 [ 1814.457154][T17722] ? __mutex_lock_slowpath+0x10/0x10 [ 1814.462277][T17722] __x64_sys_clone+0x23f/0x290 [ 1814.466876][T17722] ? __do_sys_vfork+0x130/0x130 [ 1814.471561][T17722] ? ksys_write+0x260/0x2c0 [ 1814.475904][T17722] ? debug_smp_processor_id+0x17/0x20 [ 1814.481111][T17722] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1814.487014][T17722] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1814.492479][T17722] do_syscall_64+0x3d/0xb0 [ 1814.496731][T17722] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1814.502464][T17722] RIP: 0033:0x7f72394e6b29 [ 1814.506717][T17722] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1814.526863][T17722] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1814.535098][T17722] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1814.542905][T17722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:48 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1814.550723][T17722] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1814.558543][T17722] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1814.566344][T17722] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1814.574153][T17722] 11:06:48 executing program 0: syz_clone(0x30000000, 0x0, 0xffff0300, 0x0, 0x0, 0x0) 11:06:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x13, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:48 executing program 5: syz_clone(0x30040600, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) 11:06:48 executing program 5: syz_clone(0x30040600, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) syz_clone(0x30040600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) (async) 11:06:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x14, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:48 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 11:06:48 executing program 5: syz_clone(0x30040600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) 11:06:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x15, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:48 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:48 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x13, 0x1}, 0x14) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='vnet_tx_trigger\x00', r1}, 0x10) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='vnet_tx_trigger\x00', r1}, 0x10) close(r2) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) 11:06:48 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x376, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x16, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1814.853291][T17766] FAULT_INJECTION: forcing a failure. [ 1814.853291][T17766] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.890044][T17766] CPU: 1 PID: 17766 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1814.900692][T17766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1814.910589][T17766] Call Trace: [ 1814.913707][T17766] [ 1814.916485][T17766] dump_stack_lvl+0x151/0x1b7 [ 1814.921001][T17766] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1814.926481][T17766] dump_stack+0x15/0x17 [ 1814.930456][T17766] should_fail+0x3c6/0x510 [ 1814.934712][T17766] __should_failslab+0xa4/0xe0 [ 1814.939409][T17766] ? vm_area_dup+0x26/0x230 [ 1814.943853][T17766] should_failslab+0x9/0x20 [ 1814.948190][T17766] slab_pre_alloc_hook+0x37/0xd0 [ 1814.952960][T17766] ? vm_area_dup+0x26/0x230 [ 1814.957309][T17766] kmem_cache_alloc+0x44/0x200 [ 1814.961904][T17766] vm_area_dup+0x26/0x230 [ 1814.966067][T17766] dup_mm+0x81b/0x12c0 [ 1814.969975][T17766] ? copy_init_mm+0x20/0x20 [ 1814.974317][T17766] copy_mm+0x107/0x1b0 [ 1814.978218][T17766] copy_process+0x12bc/0x3260 [ 1814.982747][T17766] ? proc_fail_nth_write+0x20b/0x290 [ 1814.987853][T17766] ? fsnotify_perm+0x6a/0x5d0 [ 1814.992368][T17766] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1814.997315][T17766] ? vfs_write+0x9ec/0x1110 [ 1815.001656][T17766] kernel_clone+0x21e/0x9e0 [ 1815.005993][T17766] ? file_end_write+0x1c0/0x1c0 [ 1815.010679][T17766] ? create_io_thread+0x1e0/0x1e0 [ 1815.015715][T17766] ? mutex_unlock+0xb2/0x1b0 [ 1815.020140][T17766] ? __mutex_lock_slowpath+0x10/0x10 [ 1815.025262][T17766] __x64_sys_clone+0x23f/0x290 [ 1815.029864][T17766] ? __do_sys_vfork+0x130/0x130 [ 1815.034563][T17766] ? ksys_write+0x260/0x2c0 [ 1815.038888][T17766] ? debug_smp_processor_id+0x17/0x20 [ 1815.044132][T17766] ? fpregs_assert_state_consistent+0xb6/0xe0 11:06:48 executing program 0: syz_clone(0x30000000, 0x0, 0xfffffff5, 0x0, 0x0, 0x0) 11:06:48 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='\\]-)\x00'}, 0x30) 11:06:48 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x13, 0x1}, 0x14) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='vnet_tx_trigger\x00', r1}, 0x10) close(r2) (async) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) 11:06:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x17, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:48 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x377, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1815.050005][T17766] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1815.055469][T17766] do_syscall_64+0x3d/0xb0 [ 1815.059724][T17766] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1815.065444][T17766] RIP: 0033:0x7f72394e6b29 [ 1815.069695][T17766] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1815.089223][T17766] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:06:49 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 11:06:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x18, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:49 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='\\]-)\x00'}, 0x30) (rerun: 64) [ 1815.097557][T17766] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1815.105363][T17766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1815.113175][T17766] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1815.121085][T17766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1815.129157][T17766] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1815.137061][T17766] 11:06:49 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='\\]-)\x00'}, 0x30) 11:06:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x19, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1815.184610][T17785] FAULT_INJECTION: forcing a failure. [ 1815.184610][T17785] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.212790][T17785] CPU: 0 PID: 17785 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1815.223247][T17785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1815.233137][T17785] Call Trace: [ 1815.236259][T17785] [ 1815.239029][T17785] dump_stack_lvl+0x151/0x1b7 [ 1815.243542][T17785] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1815.249013][T17785] dump_stack+0x15/0x17 [ 1815.253084][T17785] should_fail+0x3c6/0x510 [ 1815.257434][T17785] __should_failslab+0xa4/0xe0 [ 1815.262024][T17785] ? anon_vma_fork+0xf7/0x4e0 [ 1815.266540][T17785] should_failslab+0x9/0x20 [ 1815.270975][T17785] slab_pre_alloc_hook+0x37/0xd0 [ 1815.275746][T17785] ? anon_vma_fork+0xf7/0x4e0 [ 1815.280250][T17785] kmem_cache_alloc+0x44/0x200 [ 1815.284852][T17785] anon_vma_fork+0xf7/0x4e0 [ 1815.289193][T17785] ? anon_vma_name+0x4c/0x70 [ 1815.293629][T17785] ? vm_area_dup+0x17a/0x230 [ 1815.298046][T17785] dup_mm+0x8c5/0x12c0 [ 1815.302069][T17785] ? copy_init_mm+0x20/0x20 [ 1815.306405][T17785] copy_mm+0x107/0x1b0 [ 1815.310311][T17785] copy_process+0x12bc/0x3260 [ 1815.314825][T17785] ? proc_fail_nth_write+0x20b/0x290 [ 1815.319942][T17785] ? fsnotify_perm+0x6a/0x5d0 [ 1815.324454][T17785] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1815.329403][T17785] ? vfs_write+0x9ec/0x1110 [ 1815.333742][T17785] kernel_clone+0x21e/0x9e0 [ 1815.338082][T17785] ? file_end_write+0x1c0/0x1c0 [ 1815.342780][T17785] ? create_io_thread+0x1e0/0x1e0 [ 1815.347632][T17785] ? mutex_unlock+0xb2/0x1b0 [ 1815.352066][T17785] ? __mutex_lock_slowpath+0x10/0x10 [ 1815.357179][T17785] __x64_sys_clone+0x23f/0x290 [ 1815.361780][T17785] ? __do_sys_vfork+0x130/0x130 [ 1815.366469][T17785] ? ksys_write+0x260/0x2c0 [ 1815.370807][T17785] ? debug_smp_processor_id+0x17/0x20 [ 1815.376191][T17785] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1815.382089][T17785] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1815.388078][T17785] do_syscall_64+0x3d/0xb0 [ 1815.392328][T17785] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1815.398059][T17785] RIP: 0033:0x7f72394e6b29 [ 1815.402313][T17785] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1815.421846][T17785] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:06:49 executing program 0: syz_clone(0x30000000, 0x0, 0xfffffffb, 0x0, 0x0, 0x0) 11:06:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1a, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1b, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:49 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x378, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1815.430088][T17785] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1815.438068][T17785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1815.445885][T17785] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1815.453689][T17785] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1815.461505][T17785] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1815.469319][T17785] 11:06:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xca1}, @ldst={0x0, 0x2, 0x2, 0x0, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_fd={0x18, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x3, 0x5, 0xcc, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x28585599}]}, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x82, &(0x7f00000000c0)=""/130, 0x0, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x7, 0xfe, 0x8}, 0x10}, 0x80) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1c, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:49 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.idle\x00', 0x2, 0x0) 11:06:49 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 11:06:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1d, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:49 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x379, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:49 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.idle\x00', 0x2, 0x0) 11:06:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xca1}, @ldst={0x0, 0x2, 0x2, 0x0, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_fd={0x18, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x3, 0x5, 0xcc, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x28585599}]}, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x82, &(0x7f00000000c0)=""/130, 0x0, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x7, 0xfe, 0x8}, 0x10}, 0x80) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1815.609723][T17825] FAULT_INJECTION: forcing a failure. [ 1815.609723][T17825] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.660064][T17825] CPU: 0 PID: 17825 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1815.670504][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1815.680528][T17825] Call Trace: [ 1815.683657][T17825] [ 1815.686424][T17825] dump_stack_lvl+0x151/0x1b7 [ 1815.690936][T17825] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1815.696455][T17825] dump_stack+0x15/0x17 [ 1815.700395][T17825] should_fail+0x3c6/0x510 [ 1815.704653][T17825] __should_failslab+0xa4/0xe0 [ 1815.709251][T17825] ? vm_area_dup+0x26/0x230 [ 1815.713588][T17825] should_failslab+0x9/0x20 [ 1815.717928][T17825] slab_pre_alloc_hook+0x37/0xd0 [ 1815.722703][T17825] ? vm_area_dup+0x26/0x230 [ 1815.727039][T17825] kmem_cache_alloc+0x44/0x200 [ 1815.731640][T17825] vm_area_dup+0x26/0x230 [ 1815.735901][T17825] dup_mm+0x81b/0x12c0 [ 1815.739899][T17825] ? copy_init_mm+0x20/0x20 [ 1815.744241][T17825] copy_mm+0x107/0x1b0 [ 1815.748141][T17825] copy_process+0x12bc/0x3260 [ 1815.752662][T17825] ? proc_fail_nth_write+0x20b/0x290 [ 1815.757773][T17825] ? fsnotify_perm+0x6a/0x5d0 [ 1815.762298][T17825] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1815.767238][T17825] ? vfs_write+0x9ec/0x1110 [ 1815.771600][T17825] kernel_clone+0x21e/0x9e0 [ 1815.776033][T17825] ? file_end_write+0x1c0/0x1c0 [ 1815.780746][T17825] ? create_io_thread+0x1e0/0x1e0 [ 1815.785575][T17825] ? mutex_unlock+0xb2/0x1b0 [ 1815.790091][T17825] ? __mutex_lock_slowpath+0x10/0x10 [ 1815.795218][T17825] __x64_sys_clone+0x23f/0x290 [ 1815.799808][T17825] ? __do_sys_vfork+0x130/0x130 [ 1815.804594][T17825] ? ksys_write+0x260/0x2c0 [ 1815.808943][T17825] ? debug_smp_processor_id+0x17/0x20 [ 1815.814148][T17825] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1815.820042][T17825] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1815.825513][T17825] do_syscall_64+0x3d/0xb0 [ 1815.829927][T17825] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1815.835613][T17825] RIP: 0033:0x7f72394e6b29 [ 1815.839875][T17825] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:49 executing program 0: syz_clone(0x30000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0) 11:06:49 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.idle\x00', 0x2, 0x0) 11:06:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1e, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:49 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xca1}, @ldst={0x0, 0x2, 0x2, 0x0, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_fd={0x18, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x3, 0x5, 0xcc, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x28585599}]}, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x82, &(0x7f00000000c0)=""/130, 0x0, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x7, 0xfe, 0x8}, 0x10}, 0x80) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:49 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:49 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1815.859308][T17825] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1815.867603][T17825] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1815.875364][T17825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1815.883184][T17825] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1815.891001][T17825] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1815.898798][T17825] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1815.906615][T17825] 11:06:49 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 11:06:49 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:49 executing program 5: syz_clone(0x30000500, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1}, 0x103) 11:06:49 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @ldst={0x3, 0x1, 0x3, 0x7, 0x5, 0xfffffffffffffff4, 0xeba98711fa1991c8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x0, 0x4, 0xb, 0x18}, @cb_func, @map_fd={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xd, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map=r0, r1, 0x3, 0x6, r0}, 0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0xa}, 0x10) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FREEZING\x00', 0x9) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000007c0)=0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r0, 0x20, &(0x7f00000006c0)={&(0x7f0000000580)=""/228, 0xe4, 0x0, &(0x7f0000000680)=""/26, 0x1a}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000780)='syzkaller\x00', 0x81, 0x0, &(0x7f00000007c0), 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x0, 0x2, 0x92}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)=[0x1, r0, r0, r0, r0, r0]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x4, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], &(0x7f0000000400)='syzkaller\x00', 0x81b4d812, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, 0x20, r5, 0x8, &(0x7f0000000500)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1, 0x6}, 0x10, r6, r7, 0x0, &(0x7f0000000940)=[r0, r0]}, 0x80) 11:06:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x21, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1816.028245][T17852] FAULT_INJECTION: forcing a failure. [ 1816.028245][T17852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1816.051502][T17852] CPU: 1 PID: 17852 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1816.061957][T17852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1816.071836][T17852] Call Trace: [ 1816.074958][T17852] 11:06:49 executing program 0: syz_clone(0x30000000, 0x0, 0x1b1281f000, 0x0, 0x0, 0x0) 11:06:49 executing program 5: syz_clone(0x30000500, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1}, 0x103) syz_clone(0x30000500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1}, 0x103) (async) 11:06:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x22, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:49 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:49 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @ldst={0x3, 0x1, 0x3, 0x7, 0x5, 0xfffffffffffffff4, 0xeba98711fa1991c8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x0, 0x4, 0xb, 0x18}, @cb_func, @map_fd={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xd, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map=r0, r1, 0x3, 0x6, r0}, 0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0xa}, 0x10) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FREEZING\x00', 0x9) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x8}, 0xc) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000007c0)=0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r0, 0x20, &(0x7f00000006c0)={&(0x7f0000000580)=""/228, 0xe4, 0x0, &(0x7f0000000680)=""/26, 0x1a}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r0, 0x20, &(0x7f00000006c0)={&(0x7f0000000580)=""/228, 0xe4, 0x0, &(0x7f0000000680)=""/26, 0x1a}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000780)='syzkaller\x00', 0x81, 0x0, &(0x7f00000007c0), 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x0, 0x2, 0x92}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)=[0x1, r0, r0, r0, r0, r0]}, 0x80) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000780)='syzkaller\x00', 0x81, 0x0, &(0x7f00000007c0), 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x0, 0x2, 0x92}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)=[0x1, r0, r0, r0, r0, r0]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x4, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], &(0x7f0000000400)='syzkaller\x00', 0x81b4d812, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, 0x20, r5, 0x8, &(0x7f0000000500)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1, 0x6}, 0x10, r6, r7, 0x0, &(0x7f0000000940)=[r0, r0]}, 0x80) [ 1816.077734][T17852] dump_stack_lvl+0x151/0x1b7 [ 1816.082252][T17852] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1816.087919][T17852] ? __switch_to+0x62a/0x1190 [ 1816.092437][T17852] ? __alloc_pages+0x7b0/0x7b0 [ 1816.097031][T17852] dump_stack+0x15/0x17 [ 1816.101053][T17852] should_fail+0x3c6/0x510 [ 1816.105279][T17852] should_fail_alloc_page+0x5a/0x80 [ 1816.110415][T17852] __alloc_pages+0x1e6/0x7b0 [ 1816.114842][T17852] ? zone_watermark_fast+0x220/0x220 [ 1816.119953][T17852] ? is_bpf_text_address+0x172/0x190 [ 1816.125071][T17852] pte_alloc_one+0x73/0x1b0 [ 1816.129411][T17852] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1816.134548][T17852] ? arch_stack_walk+0xf3/0x140 [ 1816.139228][T17852] __pte_alloc+0x86/0x350 [ 1816.143404][T17852] ? free_pgtables+0x280/0x280 [ 1816.147992][T17852] ? _raw_spin_lock+0xa4/0x1b0 [ 1816.152594][T17852] ? __kasan_check_write+0x14/0x20 [ 1816.157544][T17852] copy_page_range+0x28a8/0x2f90 [ 1816.162316][T17852] ? __kasan_slab_alloc+0xb1/0xe0 [ 1816.167187][T17852] ? pfn_valid+0x1e0/0x1e0 [ 1816.171451][T17852] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1816.176981][T17852] ? __rb_insert_augmented+0x5de/0x610 [ 1816.182284][T17852] dup_mm+0xadc/0x12c0 [ 1816.186191][T17852] ? copy_init_mm+0x20/0x20 [ 1816.190524][T17852] copy_mm+0x107/0x1b0 [ 1816.194433][T17852] copy_process+0x12bc/0x3260 [ 1816.198946][T17852] ? proc_fail_nth_write+0x20b/0x290 [ 1816.204064][T17852] ? fsnotify_perm+0x6a/0x5d0 [ 1816.208576][T17852] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1816.213539][T17852] ? vfs_write+0x9ec/0x1110 [ 1816.218048][T17852] kernel_clone+0x21e/0x9e0 [ 1816.222389][T17852] ? file_end_write+0x1c0/0x1c0 [ 1816.227079][T17852] ? create_io_thread+0x1e0/0x1e0 [ 1816.231946][T17852] ? mutex_unlock+0xb2/0x1b0 [ 1816.236362][T17852] ? __mutex_lock_slowpath+0x10/0x10 [ 1816.241488][T17852] __x64_sys_clone+0x23f/0x290 [ 1816.246085][T17852] ? __do_sys_vfork+0x130/0x130 [ 1816.250857][T17852] ? ksys_write+0x260/0x2c0 [ 1816.255197][T17852] ? debug_smp_processor_id+0x17/0x20 [ 1816.260403][T17852] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1816.266444][T17852] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1816.271894][T17852] do_syscall_64+0x3d/0xb0 [ 1816.276138][T17852] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1816.281871][T17852] RIP: 0033:0x7f72394e6b29 [ 1816.286120][T17852] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1816.305567][T17852] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1816.313806][T17852] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1816.321618][T17852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:50 executing program 5: syz_clone(0x30000500, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1}, 0x103) syz_clone(0x30000500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1}, 0x103) (async) 11:06:50 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1816.329433][T17852] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1816.337244][T17852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1816.345056][T17852] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1816.352873][T17852] 11:06:50 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 11:06:50 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @ldst={0x3, 0x1, 0x3, 0x7, 0x5, 0xfffffffffffffff4, 0xeba98711fa1991c8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0x0, 0x4, 0xb, 0x18}, @cb_func, @map_fd={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xd, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0, r0, r0, r0]}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map=r0, r1, 0x3, 0x6, r0}, 0x14) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0xa}, 0x10) (async) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FREEZING\x00', 0x9) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x8}, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000007c0)=0x80) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r0, 0x20, &(0x7f00000006c0)={&(0x7f0000000580)=""/228, 0xe4, 0x0, &(0x7f0000000680)=""/26, 0x1a}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000780)='syzkaller\x00', 0x81, 0x0, &(0x7f00000007c0), 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x0, 0x2, 0x92}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)=[0x1, r0, r0, r0, r0, r0]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x4, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}], &(0x7f0000000400)='syzkaller\x00', 0x81b4d812, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, 0x20, r5, 0x8, &(0x7f0000000500)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x1, 0x6}, 0x10, r6, r7, 0x0, &(0x7f0000000940)=[r0, r0]}, 0x80) 11:06:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x23, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:50 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:50 executing program 5: syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') [ 1816.482162][T17888] FAULT_INJECTION: forcing a failure. [ 1816.482162][T17888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1816.495433][T17888] CPU: 1 PID: 17888 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1816.505864][T17888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1816.516023][T17888] Call Trace: [ 1816.519145][T17888] [ 1816.521932][T17888] dump_stack_lvl+0x151/0x1b7 [ 1816.526436][T17888] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1816.531906][T17888] ? __switch_to+0x62a/0x1190 [ 1816.536413][T17888] dump_stack+0x15/0x17 [ 1816.540413][T17888] should_fail+0x3c6/0x510 [ 1816.544659][T17888] should_fail_alloc_page+0x5a/0x80 [ 1816.549689][T17888] __alloc_pages+0x1e6/0x7b0 [ 1816.554125][T17888] ? zone_watermark_fast+0x220/0x220 [ 1816.559333][T17888] pte_alloc_one+0x73/0x1b0 [ 1816.563667][T17888] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1816.568704][T17888] ? preempt_schedule+0xd9/0xe0 [ 1816.573390][T17888] ? preempt_schedule_common+0xbe/0xf0 [ 1816.578682][T17888] __pte_alloc+0x86/0x350 [ 1816.582849][T17888] ? free_pgtables+0x280/0x280 [ 1816.587449][T17888] ? _raw_spin_lock+0xa4/0x1b0 [ 1816.592050][T17888] ? __kasan_check_write+0x14/0x20 [ 1816.597953][T17888] copy_page_range+0x28a8/0x2f90 [ 1816.602728][T17888] ? __kasan_slab_alloc+0xb1/0xe0 [ 1816.607644][T17888] ? pfn_valid+0x1e0/0x1e0 [ 1816.611842][T17888] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1816.617395][T17888] ? __rb_insert_augmented+0x5de/0x610 [ 1816.622693][T17888] dup_mm+0xadc/0x12c0 [ 1816.626593][T17888] ? copy_init_mm+0x20/0x20 [ 1816.630936][T17888] copy_mm+0x107/0x1b0 [ 1816.634842][T17888] copy_process+0x12bc/0x3260 [ 1816.639356][T17888] ? proc_fail_nth_write+0x20b/0x290 [ 1816.644475][T17888] ? fsnotify_perm+0x6a/0x5d0 [ 1816.648985][T17888] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1816.654027][T17888] ? vfs_write+0x9ec/0x1110 [ 1816.658363][T17888] kernel_clone+0x21e/0x9e0 [ 1816.662874][T17888] ? file_end_write+0x1c0/0x1c0 [ 1816.667558][T17888] ? create_io_thread+0x1e0/0x1e0 [ 1816.672425][T17888] ? mutex_unlock+0xb2/0x1b0 [ 1816.676845][T17888] ? __mutex_lock_slowpath+0x10/0x10 [ 1816.681973][T17888] __x64_sys_clone+0x23f/0x290 [ 1816.686578][T17888] ? __do_sys_vfork+0x130/0x130 [ 1816.691256][T17888] ? ksys_write+0x260/0x2c0 [ 1816.695944][T17888] ? debug_smp_processor_id+0x17/0x20 [ 1816.701250][T17888] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1816.707138][T17888] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1816.712607][T17888] do_syscall_64+0x3d/0xb0 [ 1816.716869][T17888] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1816.722587][T17888] RIP: 0033:0x7f72394e6b29 [ 1816.726836][T17888] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1816.746288][T17888] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1816.754529][T17888] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1816.762339][T17888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1816.770250][T17888] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 11:06:50 executing program 5: syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpid() (async) gettid() (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') (async) 11:06:50 executing program 0: syz_clone(0x30000000, 0x0, 0x29bab34d1000, 0x0, 0x0, 0x0) 11:06:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x300, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:50 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x6, 0x1, 0x8ba, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:50 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) [ 1816.778057][T17888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1816.785870][T17888] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1816.793690][T17888] 11:06:50 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x500, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x6, 0x1, 0x8ba, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:50 executing program 5: syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') [ 1816.847783][T17901] FAULT_INJECTION: forcing a failure. [ 1816.847783][T17901] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1816.874606][T17901] CPU: 1 PID: 17901 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1816.885046][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1816.894940][T17901] Call Trace: [ 1816.898067][T17901] [ 1816.900845][T17901] dump_stack_lvl+0x151/0x1b7 [ 1816.905356][T17901] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1816.910822][T17901] ? __alloc_pages+0x7b0/0x7b0 [ 1816.915425][T17901] dump_stack+0x15/0x17 [ 1816.919412][T17901] should_fail+0x3c6/0x510 [ 1816.923670][T17901] should_fail_alloc_page+0x5a/0x80 [ 1816.928701][T17901] __alloc_pages+0x1e6/0x7b0 [ 1816.933129][T17901] ? zone_watermark_fast+0x220/0x220 [ 1816.938255][T17901] ? is_bpf_text_address+0x172/0x190 [ 1816.943396][T17901] pte_alloc_one+0x73/0x1b0 [ 1816.947710][T17901] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1816.952746][T17901] ? arch_stack_walk+0xf3/0x140 [ 1816.957432][T17901] __pte_alloc+0x86/0x350 [ 1816.961597][T17901] ? free_pgtables+0x280/0x280 [ 1816.966196][T17901] ? _raw_spin_lock+0xa4/0x1b0 [ 1816.970798][T17901] ? __kasan_check_write+0x14/0x20 [ 1816.975746][T17901] copy_page_range+0x28a8/0x2f90 [ 1816.980522][T17901] ? __kasan_slab_alloc+0xb1/0xe0 [ 1816.985397][T17901] ? pfn_valid+0x1e0/0x1e0 [ 1816.989635][T17901] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 11:06:50 executing program 5: syz_clone(0x35800600, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1816.995887][T17901] dup_mm+0xadc/0x12c0 [ 1816.999788][T17901] ? copy_init_mm+0x20/0x20 [ 1817.004131][T17901] copy_mm+0x107/0x1b0 [ 1817.008118][T17901] copy_process+0x12bc/0x3260 [ 1817.012632][T17901] ? proc_fail_nth_write+0x20b/0x290 [ 1817.017755][T17901] ? fsnotify_perm+0x6a/0x5d0 [ 1817.022276][T17901] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1817.027215][T17901] ? vfs_write+0x9ec/0x1110 [ 1817.031552][T17901] kernel_clone+0x21e/0x9e0 [ 1817.035908][T17901] ? file_end_write+0x1c0/0x1c0 [ 1817.040586][T17901] ? create_io_thread+0x1e0/0x1e0 [ 1817.045438][T17901] ? mutex_unlock+0xb2/0x1b0 [ 1817.049868][T17901] ? __mutex_lock_slowpath+0x10/0x10 [ 1817.054988][T17901] __x64_sys_clone+0x23f/0x290 [ 1817.059590][T17901] ? __do_sys_vfork+0x130/0x130 [ 1817.064364][T17901] ? ksys_write+0x260/0x2c0 [ 1817.068705][T17901] ? debug_smp_processor_id+0x17/0x20 [ 1817.073917][T17901] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1817.079814][T17901] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1817.085371][T17901] do_syscall_64+0x3d/0xb0 [ 1817.089710][T17901] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1817.095444][T17901] RIP: 0033:0x7f72394e6b29 [ 1817.099690][T17901] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1817.119127][T17901] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1817.127376][T17901] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1817.135257][T17901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:51 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x383, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x600, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1817.143299][T17901] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1817.151291][T17901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1817.159372][T17901] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1817.167403][T17901] 11:06:51 executing program 0: syz_clone(0x30000000, 0x0, 0x553a2162d000, 0x0, 0x0, 0x0) 11:06:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x6, 0x1, 0x8ba, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:51 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 11:06:51 executing program 5: syz_clone(0x35800600, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x700, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:51 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x384, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x900, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:51 executing program 5: syz_clone(0x35800600, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:51 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x7, 0x1c, 0x6, 0x8, 0x0, 0x308, 0x400, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x81, 0xf800000000000000}, 0x1000, 0xdd74, 0x80000000, 0xa, 0x4, 0x47, 0x6, 0x0, 0x8, 0x0, 0x101}) 11:06:51 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1817.300204][T17925] FAULT_INJECTION: forcing a failure. [ 1817.300204][T17925] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.333851][T17925] CPU: 1 PID: 17925 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 11:06:51 executing program 5: syz_clone(0x143100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:51 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x7, 0x1c, 0x6, 0x8, 0x0, 0x308, 0x400, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x81, 0xf800000000000000}, 0x1000, 0xdd74, 0x80000000, 0xa, 0x4, 0x47, 0x6, 0x0, 0x8, 0x0, 0x101}) [ 1817.344810][T17925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1817.354706][T17925] Call Trace: [ 1817.357835][T17925] [ 1817.360605][T17925] dump_stack_lvl+0x151/0x1b7 [ 1817.365121][T17925] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1817.370590][T17925] dump_stack+0x15/0x17 [ 1817.374579][T17925] should_fail+0x3c6/0x510 [ 1817.378847][T17925] __should_failslab+0xa4/0xe0 [ 1817.383435][T17925] ? vm_area_dup+0x26/0x230 [ 1817.387775][T17925] should_failslab+0x9/0x20 [ 1817.393596][T17925] slab_pre_alloc_hook+0x37/0xd0 [ 1817.398360][T17925] ? vm_area_dup+0x26/0x230 [ 1817.402711][T17925] kmem_cache_alloc+0x44/0x200 [ 1817.407306][T17925] vm_area_dup+0x26/0x230 [ 1817.411560][T17925] dup_mm+0x81b/0x12c0 [ 1817.415461][T17925] ? copy_init_mm+0x20/0x20 [ 1817.419802][T17925] copy_mm+0x107/0x1b0 [ 1817.423710][T17925] copy_process+0x12bc/0x3260 [ 1817.428217][T17925] ? proc_fail_nth_write+0x20b/0x290 [ 1817.433340][T17925] ? fsnotify_perm+0x6a/0x5d0 [ 1817.437979][T17925] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1817.442929][T17925] ? vfs_write+0x9ec/0x1110 [ 1817.448051][T17925] kernel_clone+0x21e/0x9e0 [ 1817.452388][T17925] ? file_end_write+0x1c0/0x1c0 [ 1817.457076][T17925] ? create_io_thread+0x1e0/0x1e0 [ 1817.461934][T17925] ? mutex_unlock+0xb2/0x1b0 [ 1817.466359][T17925] ? __mutex_lock_slowpath+0x10/0x10 [ 1817.471482][T17925] __x64_sys_clone+0x23f/0x290 [ 1817.476079][T17925] ? __do_sys_vfork+0x130/0x130 [ 1817.480887][T17925] ? ksys_write+0x260/0x2c0 [ 1817.485221][T17925] ? debug_smp_processor_id+0x17/0x20 [ 1817.490423][T17925] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1817.496330][T17925] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1817.501795][T17925] do_syscall_64+0x3d/0xb0 [ 1817.506049][T17925] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1817.511774][T17925] RIP: 0033:0x7f72394e6b29 [ 1817.516032][T17925] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1817.535481][T17925] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1817.543719][T17925] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1817.551654][T17925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1817.559467][T17925] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1817.567275][T17925] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1817.575086][T17925] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1817.582924][T17925] 11:06:51 executing program 0: syz_clone(0x30000000, 0x0, 0x2020000000000, 0x0, 0x0, 0x0) 11:06:51 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:51 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x7, 0x1c, 0x6, 0x8, 0x0, 0x308, 0x400, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x81, 0xf800000000000000}, 0x1000, 0xdd74, 0x80000000, 0xa, 0x4, 0x47, 0x6, 0x0, 0x8, 0x0, 0x101}) 11:06:51 executing program 5: syz_clone(0x143100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x143100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 11:06:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xa00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:51 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 11:06:51 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 11:06:51 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xb00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:51 executing program 5: syz_clone(0x143100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:51 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') 11:06:51 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) [ 1817.762364][T17958] FAULT_INJECTION: forcing a failure. [ 1817.762364][T17958] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.816039][T17958] CPU: 1 PID: 17958 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1817.826481][T17958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1817.836385][T17958] Call Trace: [ 1817.839500][T17958] [ 1817.842290][T17958] dump_stack_lvl+0x151/0x1b7 [ 1817.846794][T17958] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1817.852271][T17958] dump_stack+0x15/0x17 [ 1817.856251][T17958] should_fail+0x3c6/0x510 [ 1817.860515][T17958] __should_failslab+0xa4/0xe0 [ 1817.865151][T17958] ? vm_area_dup+0x26/0x230 [ 1817.869442][T17958] should_failslab+0x9/0x20 [ 1817.873784][T17958] slab_pre_alloc_hook+0x37/0xd0 [ 1817.878553][T17958] ? vm_area_dup+0x26/0x230 [ 1817.882891][T17958] kmem_cache_alloc+0x44/0x200 [ 1817.887495][T17958] vm_area_dup+0x26/0x230 [ 1817.891666][T17958] dup_mm+0x81b/0x12c0 [ 1817.895567][T17958] ? copy_init_mm+0x20/0x20 [ 1817.899992][T17958] copy_mm+0x107/0x1b0 [ 1817.903896][T17958] copy_process+0x12bc/0x3260 [ 1817.908449][T17958] ? proc_fail_nth_write+0x20b/0x290 [ 1817.913539][T17958] ? fsnotify_perm+0x6a/0x5d0 [ 1817.918050][T17958] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1817.922998][T17958] ? vfs_write+0x9ec/0x1110 [ 1817.927334][T17958] kernel_clone+0x21e/0x9e0 [ 1817.931762][T17958] ? file_end_write+0x1c0/0x1c0 [ 1817.936458][T17958] ? create_io_thread+0x1e0/0x1e0 [ 1817.941315][T17958] ? mutex_unlock+0xb2/0x1b0 [ 1817.945738][T17958] ? __mutex_lock_slowpath+0x10/0x10 [ 1817.950860][T17958] __x64_sys_clone+0x23f/0x290 [ 1817.955560][T17958] ? __do_sys_vfork+0x130/0x130 [ 1817.960239][T17958] ? ksys_write+0x260/0x2c0 [ 1817.964583][T17958] ? debug_smp_processor_id+0x17/0x20 [ 1817.969785][T17958] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1817.975696][T17958] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1817.981159][T17958] do_syscall_64+0x3d/0xb0 [ 1817.985406][T17958] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1817.991220][T17958] RIP: 0033:0x7f72394e6b29 [ 1817.995475][T17958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1818.014919][T17958] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1818.023163][T17958] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1818.030973][T17958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1818.038784][T17958] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1818.046601][T17958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1818.054494][T17958] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1818.062317][T17958] 11:06:52 executing program 0: syz_clone(0x30000000, 0x0, 0x4000000000000, 0x0, 0x0, 0x0) 11:06:52 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x388, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xc00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:52 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpid() r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') 11:06:52 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 11:06:52 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 11:06:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xd00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:52 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:52 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) getpid() (async, rerun: 64) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') 11:06:52 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x7fffffff}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) [ 1818.167432][T17984] FAULT_INJECTION: forcing a failure. [ 1818.167432][T17984] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.190076][T17984] CPU: 1 PID: 17984 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1818.200601][T17984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1818.210584][T17984] Call Trace: [ 1818.213706][T17984] 11:06:52 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x7fffffff}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) 11:06:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xe00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1818.216479][T17984] dump_stack_lvl+0x151/0x1b7 [ 1818.220994][T17984] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1818.226468][T17984] dump_stack+0x15/0x17 [ 1818.230456][T17984] should_fail+0x3c6/0x510 [ 1818.234708][T17984] __should_failslab+0xa4/0xe0 [ 1818.239493][T17984] ? vm_area_dup+0x26/0x230 [ 1818.243828][T17984] should_failslab+0x9/0x20 [ 1818.248160][T17984] slab_pre_alloc_hook+0x37/0xd0 [ 1818.252941][T17984] ? vm_area_dup+0x26/0x230 [ 1818.257273][T17984] kmem_cache_alloc+0x44/0x200 [ 1818.261878][T17984] vm_area_dup+0x26/0x230 [ 1818.266042][T17984] dup_mm+0x81b/0x12c0 [ 1818.269951][T17984] ? copy_init_mm+0x20/0x20 [ 1818.274376][T17984] copy_mm+0x107/0x1b0 [ 1818.278368][T17984] copy_process+0x12bc/0x3260 [ 1818.282882][T17984] ? proc_fail_nth_write+0x20b/0x290 [ 1818.288005][T17984] ? fsnotify_perm+0x6a/0x5d0 [ 1818.292524][T17984] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1818.297460][T17984] ? vfs_write+0x9ec/0x1110 [ 1818.301801][T17984] kernel_clone+0x21e/0x9e0 [ 1818.306140][T17984] ? file_end_write+0x1c0/0x1c0 [ 1818.310828][T17984] ? create_io_thread+0x1e0/0x1e0 [ 1818.315686][T17984] ? mutex_unlock+0xb2/0x1b0 [ 1818.320115][T17984] ? __mutex_lock_slowpath+0x10/0x10 [ 1818.325235][T17984] __x64_sys_clone+0x23f/0x290 [ 1818.329839][T17984] ? __do_sys_vfork+0x130/0x130 [ 1818.334519][T17984] ? ksys_write+0x260/0x2c0 [ 1818.338860][T17984] ? debug_smp_processor_id+0x17/0x20 [ 1818.344071][T17984] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1818.349981][T17984] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1818.355444][T17984] do_syscall_64+0x3d/0xb0 [ 1818.359701][T17984] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1818.365428][T17984] RIP: 0033:0x7f72394e6b29 [ 1818.369677][T17984] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1818.389114][T17984] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1818.397366][T17984] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1818.405258][T17984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1818.413070][T17984] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1818.420879][T17984] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1818.428692][T17984] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1818.436505][T17984] 11:06:52 executing program 0: syz_clone(0x30000000, 0x0, 0x8000000000000, 0x0, 0x0, 0x0) 11:06:52 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x7fffffff}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x7fffffff}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) (async) 11:06:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xf00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:52 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:52 executing program 5: syz_clone(0x314900, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:52 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 11:06:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x2, [@remote, @broadcast]}) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x10001) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x1, 0x8, 0x7f, 0x0, 0x101, 0x8441, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x4040, 0x76, 0x1, 0x2, 0x3, 0x1, 0x3, 0x0, 0x7f, 0x0, 0xbd}, r1, 0xe, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:52 executing program 5: syz_clone(0x314900, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:52 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1100, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1818.617350][T18013] FAULT_INJECTION: forcing a failure. [ 1818.617350][T18013] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.640252][T18013] CPU: 1 PID: 18013 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1818.650695][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1818.660610][T18013] Call Trace: [ 1818.663706][T18013] 11:06:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1200, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:52 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1818.666488][T18013] dump_stack_lvl+0x151/0x1b7 [ 1818.671001][T18013] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1818.676470][T18013] dump_stack+0x15/0x17 [ 1818.680455][T18013] should_fail+0x3c6/0x510 [ 1818.684722][T18013] __should_failslab+0xa4/0xe0 [ 1818.689326][T18013] ? vm_area_dup+0x26/0x230 [ 1818.693653][T18013] should_failslab+0x9/0x20 [ 1818.698162][T18013] slab_pre_alloc_hook+0x37/0xd0 [ 1818.702936][T18013] ? vm_area_dup+0x26/0x230 [ 1818.707275][T18013] kmem_cache_alloc+0x44/0x200 [ 1818.711877][T18013] vm_area_dup+0x26/0x230 [ 1818.716045][T18013] dup_mm+0x81b/0x12c0 [ 1818.719952][T18013] ? copy_init_mm+0x20/0x20 [ 1818.724290][T18013] copy_mm+0x107/0x1b0 [ 1818.728192][T18013] copy_process+0x12bc/0x3260 [ 1818.732710][T18013] ? proc_fail_nth_write+0x20b/0x290 [ 1818.737836][T18013] ? fsnotify_perm+0x6a/0x5d0 [ 1818.742351][T18013] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1818.747289][T18013] ? vfs_write+0x9ec/0x1110 [ 1818.751634][T18013] kernel_clone+0x21e/0x9e0 [ 1818.755968][T18013] ? file_end_write+0x1c0/0x1c0 [ 1818.760656][T18013] ? create_io_thread+0x1e0/0x1e0 [ 1818.765644][T18013] ? mutex_unlock+0xb2/0x1b0 [ 1818.770029][T18013] ? __mutex_lock_slowpath+0x10/0x10 [ 1818.775152][T18013] __x64_sys_clone+0x23f/0x290 [ 1818.779840][T18013] ? __do_sys_vfork+0x130/0x130 [ 1818.784636][T18013] ? ksys_write+0x260/0x2c0 [ 1818.788975][T18013] ? debug_smp_processor_id+0x17/0x20 [ 1818.794177][T18013] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1818.800079][T18013] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1818.805552][T18013] do_syscall_64+0x3d/0xb0 [ 1818.809803][T18013] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1818.815527][T18013] RIP: 0033:0x7f72394e6b29 [ 1818.819781][T18013] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1818.839223][T18013] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1818.847694][T18013] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1818.855508][T18013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1818.863320][T18013] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1818.871214][T18013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1818.879029][T18013] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1818.886839][T18013] 11:06:53 executing program 0: syz_clone(0x30000000, 0x0, 0x10100000000000, 0x0, 0x0, 0x0) 11:06:53 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1300, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:53 executing program 5: syz_clone(0x314900, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x314900, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 11:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async, rerun: 64) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x2, [@remote, @broadcast]}) (async, rerun: 64) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async, rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x10001) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x1, 0x8, 0x7f, 0x0, 0x101, 0x8441, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x4040, 0x76, 0x1, 0x2, 0x3, 0x1, 0x3, 0x0, 0x7f, 0x0, 0xbd}, r1, 0xe, 0xffffffffffffffff, 0x2) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:53 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 11:06:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1400, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:53 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:53 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x13, 0x1, 0x4800000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x2}) [ 1819.265129][T18038] FAULT_INJECTION: forcing a failure. [ 1819.265129][T18038] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.293450][T18038] CPU: 1 PID: 18038 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1819.303899][T18038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 11:06:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1500, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1600, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1700, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1819.313788][T18038] Call Trace: [ 1819.316913][T18038] [ 1819.319694][T18038] dump_stack_lvl+0x151/0x1b7 [ 1819.324202][T18038] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1819.329672][T18038] dump_stack+0x15/0x17 [ 1819.333656][T18038] should_fail+0x3c6/0x510 [ 1819.337914][T18038] __should_failslab+0xa4/0xe0 [ 1819.342517][T18038] ? vm_area_dup+0x26/0x230 [ 1819.346851][T18038] should_failslab+0x9/0x20 [ 1819.351190][T18038] slab_pre_alloc_hook+0x37/0xd0 [ 1819.355966][T18038] ? vm_area_dup+0x26/0x230 [ 1819.360301][T18038] kmem_cache_alloc+0x44/0x200 [ 1819.364909][T18038] vm_area_dup+0x26/0x230 [ 1819.369070][T18038] dup_mm+0x81b/0x12c0 [ 1819.372977][T18038] ? copy_init_mm+0x20/0x20 [ 1819.377319][T18038] copy_mm+0x107/0x1b0 [ 1819.381226][T18038] copy_process+0x12bc/0x3260 [ 1819.385738][T18038] ? proc_fail_nth_write+0x20b/0x290 [ 1819.390875][T18038] ? fsnotify_perm+0x6a/0x5d0 [ 1819.395369][T18038] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1819.400329][T18038] ? vfs_write+0x9ec/0x1110 [ 1819.404658][T18038] kernel_clone+0x21e/0x9e0 [ 1819.408994][T18038] ? file_end_write+0x1c0/0x1c0 [ 1819.413690][T18038] ? create_io_thread+0x1e0/0x1e0 [ 1819.418541][T18038] ? mutex_unlock+0xb2/0x1b0 [ 1819.422968][T18038] ? __mutex_lock_slowpath+0x10/0x10 [ 1819.428088][T18038] __x64_sys_clone+0x23f/0x290 [ 1819.432696][T18038] ? __do_sys_vfork+0x130/0x130 [ 1819.437377][T18038] ? ksys_write+0x260/0x2c0 [ 1819.441723][T18038] ? debug_smp_processor_id+0x17/0x20 [ 1819.446922][T18038] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1819.452918][T18038] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1819.458394][T18038] do_syscall_64+0x3d/0xb0 [ 1819.462720][T18038] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1819.468449][T18038] RIP: 0033:0x7f72394e6b29 [ 1819.472699][T18038] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1819.492317][T18038] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1819.500562][T18038] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1819.508467][T18038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1819.516276][T18038] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1819.524083][T18038] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1819.531892][T18038] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1819.539719][T18038] 11:06:53 executing program 0: syz_clone(0x30000000, 0x0, 0x104db3ba290000, 0x0, 0x0, 0x0) 11:06:53 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x13, 0x1, 0x4800000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x2}) 11:06:53 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x2, [@remote, @broadcast]}) (async) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x10001) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x1, 0x8, 0x7f, 0x0, 0x101, 0x8441, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x4040, 0x76, 0x1, 0x2, 0x3, 0x1, 0x3, 0x0, 0x7f, 0x0, 0xbd}, r1, 0xe, 0xffffffffffffffff, 0x2) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:53 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1800, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:53 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 11:06:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1900, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:53 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x390, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:53 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x13, 0x1, 0x4800000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x2}) 11:06:53 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 11:06:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_vlan\x00', 0x20}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1a00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1819.732192][T18071] FAULT_INJECTION: forcing a failure. [ 1819.732192][T18071] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.806027][T18071] CPU: 1 PID: 18071 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1819.816583][T18071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1819.826474][T18071] Call Trace: [ 1819.829595][T18071] [ 1819.832372][T18071] dump_stack_lvl+0x151/0x1b7 [ 1819.836886][T18071] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1819.842354][T18071] dump_stack+0x15/0x17 [ 1819.846346][T18071] should_fail+0x3c6/0x510 [ 1819.850598][T18071] __should_failslab+0xa4/0xe0 [ 1819.855200][T18071] ? anon_vma_clone+0x9a/0x500 [ 1819.859799][T18071] should_failslab+0x9/0x20 [ 1819.864142][T18071] slab_pre_alloc_hook+0x37/0xd0 [ 1819.868914][T18071] ? anon_vma_clone+0x9a/0x500 [ 1819.873514][T18071] kmem_cache_alloc+0x44/0x200 [ 1819.878119][T18071] anon_vma_clone+0x9a/0x500 [ 1819.882545][T18071] anon_vma_fork+0x91/0x4e0 [ 1819.886882][T18071] ? anon_vma_name+0x43/0x70 [ 1819.891308][T18071] ? vm_area_dup+0x17a/0x230 [ 1819.895733][T18071] dup_mm+0x8c5/0x12c0 [ 1819.899639][T18071] ? copy_init_mm+0x20/0x20 [ 1819.903983][T18071] copy_mm+0x107/0x1b0 [ 1819.907885][T18071] copy_process+0x12bc/0x3260 [ 1819.912403][T18071] ? proc_fail_nth_write+0x20b/0x290 [ 1819.917520][T18071] ? fsnotify_perm+0x6a/0x5d0 [ 1819.922029][T18071] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1819.926979][T18071] ? vfs_write+0x9ec/0x1110 [ 1819.931321][T18071] kernel_clone+0x21e/0x9e0 [ 1819.935657][T18071] ? file_end_write+0x1c0/0x1c0 [ 1819.940344][T18071] ? create_io_thread+0x1e0/0x1e0 [ 1819.945211][T18071] ? mutex_unlock+0xb2/0x1b0 [ 1819.949634][T18071] ? __mutex_lock_slowpath+0x10/0x10 [ 1819.954753][T18071] __x64_sys_clone+0x23f/0x290 [ 1819.959355][T18071] ? __do_sys_vfork+0x130/0x130 [ 1819.964040][T18071] ? ksys_write+0x260/0x2c0 [ 1819.968384][T18071] ? debug_smp_processor_id+0x17/0x20 [ 1819.973591][T18071] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1819.979491][T18071] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1819.984956][T18071] do_syscall_64+0x3d/0xb0 [ 1819.989211][T18071] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1819.994940][T18071] RIP: 0033:0x7f72394e6b29 [ 1819.999195][T18071] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1820.018726][T18071] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1820.026969][T18071] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1820.034908][T18071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1820.042717][T18071] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1820.050531][T18071] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1820.058442][T18071] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1820.067905][T18071] 11:06:54 executing program 0: syz_clone(0x30000000, 0x0, 0x70000000000000, 0x0, 0x0, 0x0) 11:06:54 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 11:06:54 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x391, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1b00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_vlan\x00', 0x20}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async, rerun: 64) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 11:06:54 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 11:06:54 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 11:06:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_vlan\x00', 0x20}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_vlan\x00', 0x20}) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 11:06:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1c00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:54 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1820.211403][T18095] FAULT_INJECTION: forcing a failure. [ 1820.211403][T18095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 11:06:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1d00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:54 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x393, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1820.264247][T18095] CPU: 0 PID: 18095 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1820.274688][T18095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1820.284584][T18095] Call Trace: [ 1820.287706][T18095] [ 1820.290481][T18095] dump_stack_lvl+0x151/0x1b7 [ 1820.294993][T18095] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1820.300467][T18095] ? kvm_sched_clock_read+0x18/0x40 [ 1820.305500][T18095] ? sched_clock+0x9/0x10 [ 1820.309663][T18095] ? native_set_ldt+0x360/0x360 [ 1820.315133][T18095] dump_stack+0x15/0x17 [ 1820.319128][T18095] should_fail+0x3c6/0x510 [ 1820.323377][T18095] should_fail_alloc_page+0x5a/0x80 [ 1820.328413][T18095] __alloc_pages+0x1e6/0x7b0 [ 1820.332933][T18095] ? __schedule+0xcc6/0x1580 [ 1820.337359][T18095] ? zone_watermark_fast+0x220/0x220 [ 1820.342482][T18095] pte_alloc_one+0x73/0x1b0 [ 1820.346821][T18095] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1820.351856][T18095] __pte_alloc+0x86/0x350 [ 1820.356021][T18095] ? free_pgtables+0x280/0x280 [ 1820.360628][T18095] ? _raw_spin_lock+0xa4/0x1b0 [ 1820.365221][T18095] ? __kasan_check_write+0x14/0x20 [ 1820.370169][T18095] copy_page_range+0x28a8/0x2f90 [ 1820.374942][T18095] ? __kasan_slab_alloc+0xb1/0xe0 [ 1820.379809][T18095] ? pfn_valid+0x1e0/0x1e0 [ 1820.384144][T18095] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1820.389699][T18095] ? __rb_insert_augmented+0x5de/0x610 [ 1820.394997][T18095] dup_mm+0xadc/0x12c0 [ 1820.398899][T18095] ? copy_init_mm+0x20/0x20 [ 1820.403236][T18095] copy_mm+0x107/0x1b0 [ 1820.407142][T18095] copy_process+0x12bc/0x3260 [ 1820.411658][T18095] ? proc_fail_nth_write+0x20b/0x290 [ 1820.416778][T18095] ? fsnotify_perm+0x6a/0x5d0 [ 1820.421289][T18095] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1820.426232][T18095] ? vfs_write+0x9ec/0x1110 [ 1820.430577][T18095] kernel_clone+0x21e/0x9e0 [ 1820.434915][T18095] ? file_end_write+0x1c0/0x1c0 [ 1820.439602][T18095] ? create_io_thread+0x1e0/0x1e0 [ 1820.444465][T18095] ? mutex_unlock+0xb2/0x1b0 [ 1820.448980][T18095] ? __mutex_lock_slowpath+0x10/0x10 [ 1820.454102][T18095] __x64_sys_clone+0x23f/0x290 [ 1820.458694][T18095] ? __do_sys_vfork+0x130/0x130 [ 1820.463382][T18095] ? ksys_write+0x260/0x2c0 [ 1820.467727][T18095] ? debug_smp_processor_id+0x17/0x20 [ 1820.472939][T18095] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1820.478832][T18095] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1820.484301][T18095] do_syscall_64+0x3d/0xb0 [ 1820.488558][T18095] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1820.494374][T18095] RIP: 0033:0x7f72394e6b29 [ 1820.498623][T18095] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1820.518073][T18095] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1820.526312][T18095] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1820.534123][T18095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1820.541934][T18095] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1820.549829][T18095] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1820.557643][T18095] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 11:06:54 executing program 0: syz_clone(0x30000000, 0x0, 0xd062213a550000, 0x0, 0x0, 0x0) 11:06:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1e00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:54 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x394, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000380)=r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r2}, 0x8) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:54 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) [ 1820.565472][T18095] 11:06:54 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 11:06:54 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x395, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:54 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 11:06:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1f00, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000380)=r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r2}, 0x8) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x2000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:54 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1820.893902][T18148] FAULT_INJECTION: forcing a failure. [ 1820.893902][T18148] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.930085][T18148] CPU: 0 PID: 18148 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1820.940524][T18148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1820.950422][T18148] Call Trace: [ 1820.953751][T18148] [ 1820.956494][T18148] dump_stack_lvl+0x151/0x1b7 [ 1820.961003][T18148] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1820.966474][T18148] dump_stack+0x15/0x17 [ 1820.970556][T18148] should_fail+0x3c6/0x510 [ 1820.974808][T18148] __should_failslab+0xa4/0xe0 [ 1820.979407][T18148] ? anon_vma_clone+0x9a/0x500 [ 1820.984017][T18148] should_failslab+0x9/0x20 [ 1820.988344][T18148] slab_pre_alloc_hook+0x37/0xd0 [ 1820.993133][T18148] ? anon_vma_clone+0x9a/0x500 [ 1820.997716][T18148] kmem_cache_alloc+0x44/0x200 [ 1821.002322][T18148] anon_vma_clone+0x9a/0x500 [ 1821.006749][T18148] anon_vma_fork+0x91/0x4e0 [ 1821.011082][T18148] ? anon_vma_name+0x43/0x70 [ 1821.015510][T18148] ? vm_area_dup+0x17a/0x230 [ 1821.019947][T18148] dup_mm+0x8c5/0x12c0 [ 1821.023845][T18148] ? copy_init_mm+0x20/0x20 [ 1821.028185][T18148] copy_mm+0x107/0x1b0 [ 1821.032098][T18148] copy_process+0x12bc/0x3260 [ 1821.036601][T18148] ? proc_fail_nth_write+0x20b/0x290 [ 1821.041722][T18148] ? fsnotify_perm+0x6a/0x5d0 [ 1821.046242][T18148] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1821.051270][T18148] ? vfs_write+0x9ec/0x1110 [ 1821.055614][T18148] kernel_clone+0x21e/0x9e0 [ 1821.059950][T18148] ? file_end_write+0x1c0/0x1c0 [ 1821.064646][T18148] ? create_io_thread+0x1e0/0x1e0 [ 1821.069495][T18148] ? mutex_unlock+0xb2/0x1b0 [ 1821.073922][T18148] ? __mutex_lock_slowpath+0x10/0x10 [ 1821.079044][T18148] __x64_sys_clone+0x23f/0x290 [ 1821.083654][T18148] ? __do_sys_vfork+0x130/0x130 [ 1821.088331][T18148] ? ksys_write+0x260/0x2c0 [ 1821.092673][T18148] ? debug_smp_processor_id+0x17/0x20 [ 1821.097884][T18148] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1821.103781][T18148] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1821.109249][T18148] do_syscall_64+0x3d/0xb0 [ 1821.113505][T18148] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1821.119231][T18148] RIP: 0033:0x7f72394e6b29 [ 1821.123482][T18148] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:06:55 executing program 0: syz_clone(0x30000000, 0x0, 0xf081121b000000, 0x0, 0x0, 0x0) 11:06:55 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) 11:06:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000380)=r1) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (rerun: 64) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r2}, 0x8) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x2100, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:55 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x397, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1821.142924][T18148] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1821.151170][T18148] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1821.158985][T18148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1821.166795][T18148] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1821.174606][T18148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1821.182419][T18148] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1821.190233][T18148] 11:06:55 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 11:06:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x2200, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:55 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x398, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:55 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xfb, 0x7, 0x0, 0x7f, 0x0, 0xfff, 0x2100, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d, 0x1, @perf_config_ext={0x1, 0x100000000}, 0x1, 0x7fff, 0xff, 0x4, 0x6, 0x7, 0x1, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x4) [ 1821.455180][T18166] FAULT_INJECTION: forcing a failure. [ 1821.455180][T18166] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.477965][T18166] CPU: 1 PID: 18166 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1821.488402][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1821.498294][T18166] Call Trace: [ 1821.501411][T18166] [ 1821.504188][T18166] dump_stack_lvl+0x151/0x1b7 [ 1821.508707][T18166] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1821.514174][T18166] dump_stack+0x15/0x17 [ 1821.518158][T18166] should_fail+0x3c6/0x510 [ 1821.522417][T18166] __should_failslab+0xa4/0xe0 [ 1821.527011][T18166] ? anon_vma_fork+0xf7/0x4e0 [ 1821.531527][T18166] should_failslab+0x9/0x20 [ 1821.535864][T18166] slab_pre_alloc_hook+0x37/0xd0 [ 1821.540641][T18166] ? anon_vma_fork+0xf7/0x4e0 [ 1821.545158][T18166] kmem_cache_alloc+0x44/0x200 [ 1821.549759][T18166] anon_vma_fork+0xf7/0x4e0 [ 1821.554097][T18166] ? anon_vma_name+0x43/0x70 [ 1821.558697][T18166] ? vm_area_dup+0x17a/0x230 [ 1821.563122][T18166] dup_mm+0x8c5/0x12c0 [ 1821.567119][T18166] ? copy_init_mm+0x20/0x20 [ 1821.571451][T18166] copy_mm+0x107/0x1b0 [ 1821.575444][T18166] copy_process+0x12bc/0x3260 [ 1821.579961][T18166] ? proc_fail_nth_write+0x20b/0x290 [ 1821.585081][T18166] ? fsnotify_perm+0x6a/0x5d0 [ 1821.589636][T18166] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1821.594546][T18166] ? vfs_write+0x9ec/0x1110 [ 1821.598895][T18166] kernel_clone+0x21e/0x9e0 [ 1821.603313][T18166] ? file_end_write+0x1c0/0x1c0 [ 1821.607996][T18166] ? create_io_thread+0x1e0/0x1e0 [ 1821.612854][T18166] ? mutex_unlock+0xb2/0x1b0 [ 1821.617278][T18166] ? __mutex_lock_slowpath+0x10/0x10 [ 1821.622403][T18166] __x64_sys_clone+0x23f/0x290 [ 1821.627003][T18166] ? __do_sys_vfork+0x130/0x130 [ 1821.631683][T18166] ? ksys_write+0x260/0x2c0 [ 1821.636026][T18166] ? debug_smp_processor_id+0x17/0x20 [ 1821.641232][T18166] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1821.647137][T18166] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1821.652606][T18166] do_syscall_64+0x3d/0xb0 [ 1821.656859][T18166] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1821.662588][T18166] RIP: 0033:0x7f72394e6b29 [ 1821.666842][T18166] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1821.686542][T18166] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1821.694957][T18166] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:06:55 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xfb, 0x7, 0x0, 0x7f, 0x0, 0xfff, 0x2100, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d, 0x1, @perf_config_ext={0x1, 0x100000000}, 0x1, 0x7fff, 0xff, 0x4, 0x6, 0x7, 0x1, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x4) 11:06:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x2300, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:55 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) [ 1821.702769][T18166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1821.710585][T18166] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1821.718395][T18166] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1821.726205][T18166] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1821.734020][T18166] [ 1821.797674][T18181] FAULT_INJECTION: forcing a failure. [ 1821.797674][T18181] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.822188][T18181] CPU: 0 PID: 18181 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1821.832625][T18181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1821.842518][T18181] Call Trace: [ 1821.845640][T18181] [ 1821.848431][T18181] dump_stack_lvl+0x151/0x1b7 [ 1821.852932][T18181] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1821.858409][T18181] dump_stack+0x15/0x17 [ 1821.862396][T18181] should_fail+0x3c6/0x510 [ 1821.866648][T18181] __should_failslab+0xa4/0xe0 [ 1821.871334][T18181] ? anon_vma_fork+0x1df/0x4e0 [ 1821.875936][T18181] should_failslab+0x9/0x20 [ 1821.880277][T18181] slab_pre_alloc_hook+0x37/0xd0 [ 1821.885100][T18181] ? anon_vma_fork+0x1df/0x4e0 [ 1821.889650][T18181] kmem_cache_alloc+0x44/0x200 [ 1821.894251][T18181] anon_vma_fork+0x1df/0x4e0 [ 1821.898674][T18181] dup_mm+0x8c5/0x12c0 [ 1821.902583][T18181] ? copy_init_mm+0x20/0x20 [ 1821.906924][T18181] copy_mm+0x107/0x1b0 [ 1821.910826][T18181] copy_process+0x12bc/0x3260 [ 1821.915354][T18181] ? proc_fail_nth_write+0x20b/0x290 [ 1821.920462][T18181] ? fsnotify_perm+0x6a/0x5d0 [ 1821.924971][T18181] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1821.929918][T18181] ? vfs_write+0x9ec/0x1110 [ 1821.934264][T18181] kernel_clone+0x21e/0x9e0 [ 1821.938601][T18181] ? file_end_write+0x1c0/0x1c0 [ 1821.943288][T18181] ? create_io_thread+0x1e0/0x1e0 [ 1821.948144][T18181] ? mutex_unlock+0xb2/0x1b0 [ 1821.952572][T18181] ? __mutex_lock_slowpath+0x10/0x10 [ 1821.957691][T18181] __x64_sys_clone+0x23f/0x290 [ 1821.962293][T18181] ? __do_sys_vfork+0x130/0x130 [ 1821.966975][T18181] ? ksys_write+0x260/0x2c0 [ 1821.971321][T18181] ? debug_smp_processor_id+0x17/0x20 [ 1821.976526][T18181] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1821.982433][T18181] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1821.987901][T18181] do_syscall_64+0x3d/0xb0 [ 1821.992149][T18181] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1821.997879][T18181] RIP: 0033:0x7f72394e6b29 [ 1822.002144][T18181] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1822.021574][T18181] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1822.029823][T18181] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1822.037633][T18181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1822.045443][T18181] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1822.053256][T18181] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1822.061067][T18181] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1822.068882][T18181] 11:06:56 executing program 0: syz_clone(0x30000000, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0) 11:06:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:56 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xfb, 0x7, 0x0, 0x7f, 0x0, 0xfff, 0x2100, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d, 0x1, @perf_config_ext={0x1, 0x100000000}, 0x1, 0x7fff, 0xff, 0x4, 0x6, 0x7, 0x1, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x4) 11:06:56 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x399, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:56 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x3, 0x220, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='ext4_forget\x00'}, 0x10) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000700)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='svcrdma_decode_rseg\x00'}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/141, 0x8d}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000400)=""/156, 0x9c}], 0x5, &(0x7f00000004c0)=""/224, 0xe0}, 0x40002001) 11:06:56 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 11:06:56 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x3, 0x220, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='ext4_forget\x00'}, 0x10) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='ext4_forget\x00'}, 0x10) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000700)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='svcrdma_decode_rseg\x00'}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/141, 0x8d}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000400)=""/156, 0x9c}], 0x5, &(0x7f00000004c0)=""/224, 0xe0}, 0x40002001) 11:06:56 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x2000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:56 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)="fcd57e19e09dc39c909b2997cd6592c28c5d0015854e91eff227368cd13e1f52e1aa37058e52a52f92c3d03d40e978824e77c994280e2feb66e83274f961900d9475963a81ef9dbd589ebf76a9ae516617727841bf187e182d5b04913ff3e43926461450a4b623376035191a08f4fb86e08db7cef682cf7b1bed4e1ab65ae7685d7fad239ec83a", 0x87}, {&(0x7f0000000340)="ab7163b0ec6580fd4cdeb27d98757e9d58525ead796d79ced64a45b1453e5f5b628315a87d0a8345c39f0a26f1d46827398a5928ad411121eae45b0a91efc061d604f2f888a494aa09f12c398812c086aff57f482a4cc474f4fed9ecf30652755bd39dfff6bdd741ea7ca8c166b68e779ffbe3dcf6d9fb142c60102d1c92c58a267079094dcc7bfccf3b36f954ac7b852b0458c0befec699d78741b1adc525e17fa573a27f9333b5a4e9ad2429cb68ba821a37d4a024a62ee1c60c52e0944ac72d663b40c430ac3715acaa4a38f8b214ee9c16a3a266625d71eb35fc04c7a3b908", 0xe1}, {&(0x7f0000000440)="fcc8f5bcd0524e97972cc6938358c2961cd864e7737bab620a321961a2826d99ce9c24dac4fc49020c18208657dda5c9f088f588bd3553d8ea588f2fe5473727a4875ba0ededd2e6f0419f7e4df2b6cca90ffe157f5777d0dcf3746110f1ffcb99ec9aafd6b6e829b57ec94502fbb620446c5db3e2c416ba288d4d8a1ecac558e6b6ad026d46acd91f8f73b028652ec5e01debd4910d649d", 0x98}, {&(0x7f0000000500)="7f023b776f357cbaae076810f44d51835118694c115c5b107908cc2d23fad99eff80f7b7ba629b478b50ab4deefe59f161aab875d5fa6a2b08fc13234e1441f6b8469a5af980a2e499ef9ef7e23d7035babef97775c7c1052b51f5496de6c894dbabbb01a9662ec36273f73ac6ebf6efd946da5f7cebdd732cc15fa4f4c629ef97d1c3423a196b502e7b9b8ada4d701a4cd69ce4fea76311ba1545ebe7bf65b6dffc008cf63007fb6eca7d4ed1f118b393c1253a1b61cacd70", 0xb9}, {&(0x7f00000005c0)="f51d5176b99855e6b2538a9cb5e375da474bf8e0c27bc74ce633f76c47d2747e23798d5f75b665aca385c46aaa919541af2fa62ba6dc7c783fc65f84834cb2f7f1187eebd6333d0dabd06363ae749b3356726877f3095c6325b0479ea4926272a1e30eb259550b61d4b6f106196b3505b636ba5f4ef4003fe106270f3b8a2a9741f551cf4d3547b76b92d1ac1684a4d58a05a3b896b32a7750d27cb710faffcc137403", 0xa3}], 0x6, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x30}, 0x20000800) r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x11, 0x1, 0x5, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)='ns/time_for_children\x00'}, 0x30) 11:06:56 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x3000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1822.400732][T18196] FAULT_INJECTION: forcing a failure. [ 1822.400732][T18196] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1822.480425][T18196] CPU: 1 PID: 18196 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1822.490872][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1822.500765][T18196] Call Trace: [ 1822.503890][T18196] [ 1822.506664][T18196] dump_stack_lvl+0x151/0x1b7 [ 1822.511178][T18196] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1822.516649][T18196] dump_stack+0x15/0x17 [ 1822.520636][T18196] should_fail+0x3c6/0x510 [ 1822.524888][T18196] should_fail_alloc_page+0x5a/0x80 [ 1822.529934][T18196] __alloc_pages+0x1e6/0x7b0 [ 1822.534356][T18196] ? zone_watermark_fast+0x220/0x220 [ 1822.539472][T18196] ? is_bpf_text_address+0x172/0x190 [ 1822.544598][T18196] ? stack_trace_save+0x1c0/0x1c0 [ 1822.549455][T18196] ? __kernel_text_address+0x9b/0x110 [ 1822.554667][T18196] pte_alloc_one+0x73/0x1b0 [ 1822.559003][T18196] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1822.564036][T18196] __pte_alloc+0x86/0x350 [ 1822.568198][T18196] ? free_pgtables+0x280/0x280 [ 1822.572802][T18196] ? __stack_depot_save+0x34/0x470 [ 1822.577748][T18196] ? anon_vma_clone+0x9a/0x500 [ 1822.582350][T18196] copy_page_range+0x28a8/0x2f90 [ 1822.587121][T18196] ? __kasan_slab_alloc+0xb1/0xe0 [ 1822.591979][T18196] ? slab_post_alloc_hook+0x53/0x2c0 [ 1822.597106][T18196] ? copy_process+0x12bc/0x3260 [ 1822.601791][T18196] ? __x64_sys_clone+0x23f/0x290 [ 1822.606574][T18196] ? do_syscall_64+0x3d/0xb0 [ 1822.611038][T18196] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1822.616899][T18196] ? pfn_valid+0x1e0/0x1e0 [ 1822.621157][T18196] ? rwsem_write_trylock+0x15b/0x290 [ 1822.626268][T18196] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1822.632519][T18196] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1822.638074][T18196] ? __rb_insert_augmented+0x5de/0x610 [ 1822.643373][T18196] dup_mm+0xadc/0x12c0 [ 1822.647275][T18196] ? copy_init_mm+0x20/0x20 [ 1822.651699][T18196] copy_mm+0x107/0x1b0 [ 1822.655603][T18196] copy_process+0x12bc/0x3260 [ 1822.660224][T18196] ? proc_fail_nth_write+0x20b/0x290 [ 1822.665411][T18196] ? fsnotify_perm+0x6a/0x5d0 [ 1822.669925][T18196] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1822.674877][T18196] ? vfs_write+0x9ec/0x1110 11:06:56 executing program 0: syz_clone(0x30000000, 0x0, 0x100000000000000, 0x0, 0x0, 0x0) 11:06:56 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x3, 0x220, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='ext4_forget\x00'}, 0x10) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000700)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='svcrdma_decode_rseg\x00'}, 0x10) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@caif=@dbg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/141, 0x8d}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000400)=""/156, 0x9c}], 0x5, &(0x7f00000004c0)=""/224, 0xe0}, 0x40002001) 11:06:56 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:56 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)="fcd57e19e09dc39c909b2997cd6592c28c5d0015854e91eff227368cd13e1f52e1aa37058e52a52f92c3d03d40e978824e77c994280e2feb66e83274f961900d9475963a81ef9dbd589ebf76a9ae516617727841bf187e182d5b04913ff3e43926461450a4b623376035191a08f4fb86e08db7cef682cf7b1bed4e1ab65ae7685d7fad239ec83a", 0x87}, {&(0x7f0000000340)="ab7163b0ec6580fd4cdeb27d98757e9d58525ead796d79ced64a45b1453e5f5b628315a87d0a8345c39f0a26f1d46827398a5928ad411121eae45b0a91efc061d604f2f888a494aa09f12c398812c086aff57f482a4cc474f4fed9ecf30652755bd39dfff6bdd741ea7ca8c166b68e779ffbe3dcf6d9fb142c60102d1c92c58a267079094dcc7bfccf3b36f954ac7b852b0458c0befec699d78741b1adc525e17fa573a27f9333b5a4e9ad2429cb68ba821a37d4a024a62ee1c60c52e0944ac72d663b40c430ac3715acaa4a38f8b214ee9c16a3a266625d71eb35fc04c7a3b908", 0xe1}, {&(0x7f0000000440)="fcc8f5bcd0524e97972cc6938358c2961cd864e7737bab620a321961a2826d99ce9c24dac4fc49020c18208657dda5c9f088f588bd3553d8ea588f2fe5473727a4875ba0ededd2e6f0419f7e4df2b6cca90ffe157f5777d0dcf3746110f1ffcb99ec9aafd6b6e829b57ec94502fbb620446c5db3e2c416ba288d4d8a1ecac558e6b6ad026d46acd91f8f73b028652ec5e01debd4910d649d", 0x98}, {&(0x7f0000000500)="7f023b776f357cbaae076810f44d51835118694c115c5b107908cc2d23fad99eff80f7b7ba629b478b50ab4deefe59f161aab875d5fa6a2b08fc13234e1441f6b8469a5af980a2e499ef9ef7e23d7035babef97775c7c1052b51f5496de6c894dbabbb01a9662ec36273f73ac6ebf6efd946da5f7cebdd732cc15fa4f4c629ef97d1c3423a196b502e7b9b8ada4d701a4cd69ce4fea76311ba1545ebe7bf65b6dffc008cf63007fb6eca7d4ed1f118b393c1253a1b61cacd70", 0xb9}, {&(0x7f00000005c0)="f51d5176b99855e6b2538a9cb5e375da474bf8e0c27bc74ce633f76c47d2747e23798d5f75b665aca385c46aaa919541af2fa62ba6dc7c783fc65f84834cb2f7f1187eebd6333d0dabd06363ae749b3356726877f3095c6325b0479ea4926272a1e30eb259550b61d4b6f106196b3505b636ba5f4ef4003fe106270f3b8a2a9741f551cf4d3547b76b92d1ac1684a4d58a05a3b896b32a7750d27cb710faffcc137403", 0xa3}], 0x6, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x30}, 0x20000800) (async) r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x11, 0x1, 0x5, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)='ns/time_for_children\x00'}, 0x30) 11:06:56 executing program 5: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000180)="45fe73f43ceb498a8cad1dcc5809e4bc95893dfef3e0088e324d3ea88e27dddd06e6c3dd6c87629e46b53453e374b4bc7d454e266343ddd0ae753133663f9c9008c0e875256dbf1ab148eee4c9f60dee271f1787a03ffc611ef28f33b70191f3913994d7c5b601a0f8e9b77471713e599eb4cc04ceabedda84a125b22d4be4b81e37bb258dee043aca981bd0d99d8c613df852adff329b6c5eb30a5a28e1272dfc4f22e8f53ee803f08b9b7c8b5886e1b2f23bafe42035f18b8d42dc97530d43fe0cfdf2ed0084f283fbcbb361a1dd49c5b7d3c5ac4dac2c3bc939cf6157eb98d4466f39a1f0182b4f8c173fc2ab01bff2c0bc31d5ea90a16ff6cb", 0xfb}, {&(0x7f0000000280)="fcd57e19e09dc39c909b2997cd6592c28c5d0015854e91eff227368cd13e1f52e1aa37058e52a52f92c3d03d40e978824e77c994280e2feb66e83274f961900d9475963a81ef9dbd589ebf76a9ae516617727841bf187e182d5b04913ff3e43926461450a4b623376035191a08f4fb86e08db7cef682cf7b1bed4e1ab65ae7685d7fad239ec83a", 0x87}, {&(0x7f0000000340)="ab7163b0ec6580fd4cdeb27d98757e9d58525ead796d79ced64a45b1453e5f5b628315a87d0a8345c39f0a26f1d46827398a5928ad411121eae45b0a91efc061d604f2f888a494aa09f12c398812c086aff57f482a4cc474f4fed9ecf30652755bd39dfff6bdd741ea7ca8c166b68e779ffbe3dcf6d9fb142c60102d1c92c58a267079094dcc7bfccf3b36f954ac7b852b0458c0befec699d78741b1adc525e17fa573a27f9333b5a4e9ad2429cb68ba821a37d4a024a62ee1c60c52e0944ac72d663b40c430ac3715acaa4a38f8b214ee9c16a3a266625d71eb35fc04c7a3b908", 0xe1}, {&(0x7f0000000440)="fcc8f5bcd0524e97972cc6938358c2961cd864e7737bab620a321961a2826d99ce9c24dac4fc49020c18208657dda5c9f088f588bd3553d8ea588f2fe5473727a4875ba0ededd2e6f0419f7e4df2b6cca90ffe157f5777d0dcf3746110f1ffcb99ec9aafd6b6e829b57ec94502fbb620446c5db3e2c416ba288d4d8a1ecac558e6b6ad026d46acd91f8f73b028652ec5e01debd4910d649d", 0x98}, {&(0x7f0000000500)="7f023b776f357cbaae076810f44d51835118694c115c5b107908cc2d23fad99eff80f7b7ba629b478b50ab4deefe59f161aab875d5fa6a2b08fc13234e1441f6b8469a5af980a2e499ef9ef7e23d7035babef97775c7c1052b51f5496de6c894dbabbb01a9662ec36273f73ac6ebf6efd946da5f7cebdd732cc15fa4f4c629ef97d1c3423a196b502e7b9b8ada4d701a4cd69ce4fea76311ba1545ebe7bf65b6dffc008cf63007fb6eca7d4ed1f118b393c1253a1b61cacd70", 0xb9}, {&(0x7f00000005c0)="f51d5176b99855e6b2538a9cb5e375da474bf8e0c27bc74ce633f76c47d2747e23798d5f75b665aca385c46aaa919541af2fa62ba6dc7c783fc65f84834cb2f7f1187eebd6333d0dabd06363ae749b3356726877f3095c6325b0479ea4926272a1e30eb259550b61d4b6f106196b3505b636ba5f4ef4003fe106270f3b8a2a9741f551cf4d3547b76b92d1ac1684a4d58a05a3b896b32a7750d27cb710faffcc137403", 0xa3}], 0x6, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x30}, 0x20000800) (async) r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00') (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x11, 0x1, 0x5, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)='ns/time_for_children\x00'}, 0x30) [ 1822.679210][T18196] kernel_clone+0x21e/0x9e0 [ 1822.683549][T18196] ? file_end_write+0x1c0/0x1c0 [ 1822.688247][T18196] ? create_io_thread+0x1e0/0x1e0 [ 1822.693095][T18196] ? mutex_unlock+0xb2/0x1b0 [ 1822.697527][T18196] ? __mutex_lock_slowpath+0x10/0x10 [ 1822.702650][T18196] __x64_sys_clone+0x23f/0x290 [ 1822.707248][T18196] ? __do_sys_vfork+0x130/0x130 [ 1822.711931][T18196] ? ksys_write+0x260/0x2c0 [ 1822.716275][T18196] ? debug_smp_processor_id+0x17/0x20 [ 1822.721484][T18196] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1822.727377][T18196] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1822.732849][T18196] do_syscall_64+0x3d/0xb0 [ 1822.737108][T18196] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1822.742833][T18196] RIP: 0033:0x7f72394e6b29 [ 1822.747086][T18196] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1822.766853][T18196] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1822.775095][T18196] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1822.782909][T18196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1822.790806][T18196] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1822.798622][T18196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1822.806429][T18196] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1822.814369][T18196] 11:06:56 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 11:06:56 executing program 5: syz_clone(0x2020200, 0x0, 0xffffffffffffffd3, 0x0, 0x0, 0x0) 11:06:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x4000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:56 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:56 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r0, r0, 0xd, 0x3, r0}, 0x14) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 11:06:56 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x5000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1822.915424][T18242] FAULT_INJECTION: forcing a failure. [ 1822.915424][T18242] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.950091][T18242] CPU: 0 PID: 18242 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 11:06:56 executing program 0: syz_clone(0x30000000, 0x0, 0x200000000000000, 0x0, 0x0, 0x0) 11:06:56 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r0, r0, 0xd, 0x3, r0}, 0x14) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 11:06:56 executing program 5: syz_clone(0x2020200, 0x0, 0xffffffffffffffd3, 0x0, 0x0, 0x0) 11:06:56 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x6000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1822.960530][T18242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1822.970426][T18242] Call Trace: [ 1822.973545][T18242] [ 1822.976326][T18242] dump_stack_lvl+0x151/0x1b7 [ 1822.980842][T18242] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1822.986307][T18242] ? avc_denied+0x1b0/0x1b0 [ 1822.990648][T18242] dump_stack+0x15/0x17 [ 1822.994637][T18242] should_fail+0x3c6/0x510 [ 1822.998915][T18242] __should_failslab+0xa4/0xe0 [ 1823.003582][T18242] ? vm_area_dup+0x26/0x230 [ 1823.007934][T18242] should_failslab+0x9/0x20 [ 1823.012260][T18242] slab_pre_alloc_hook+0x37/0xd0 [ 1823.017031][T18242] ? vm_area_dup+0x26/0x230 [ 1823.021368][T18242] kmem_cache_alloc+0x44/0x200 [ 1823.025985][T18242] vm_area_dup+0x26/0x230 [ 1823.030139][T18242] dup_mm+0x81b/0x12c0 [ 1823.034046][T18242] ? copy_init_mm+0x20/0x20 [ 1823.038382][T18242] copy_mm+0x107/0x1b0 [ 1823.042288][T18242] copy_process+0x12bc/0x3260 [ 1823.046806][T18242] ? proc_fail_nth_write+0x20b/0x290 [ 1823.051923][T18242] ? fsnotify_perm+0x6a/0x5d0 [ 1823.056435][T18242] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1823.061380][T18242] ? vfs_write+0x9ec/0x1110 [ 1823.065723][T18242] kernel_clone+0x21e/0x9e0 [ 1823.070060][T18242] ? file_end_write+0x1c0/0x1c0 [ 1823.074748][T18242] ? create_io_thread+0x1e0/0x1e0 [ 1823.079613][T18242] ? mutex_unlock+0xb2/0x1b0 [ 1823.084036][T18242] ? __mutex_lock_slowpath+0x10/0x10 [ 1823.089163][T18242] __x64_sys_clone+0x23f/0x290 [ 1823.093758][T18242] ? __do_sys_vfork+0x130/0x130 [ 1823.098442][T18242] ? ksys_write+0x260/0x2c0 [ 1823.102787][T18242] ? debug_smp_processor_id+0x17/0x20 [ 1823.107989][T18242] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1823.113897][T18242] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1823.119359][T18242] do_syscall_64+0x3d/0xb0 [ 1823.123618][T18242] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1823.129338][T18242] RIP: 0033:0x7f72394e6b29 [ 1823.133594][T18242] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1823.153219][T18242] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:06:57 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 11:06:57 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r0, r0, 0xd, 0x3, r0}, 0x14) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 11:06:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x7000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:57 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:57 executing program 5: syz_clone(0x2020200, 0x0, 0xffffffffffffffd3, 0x0, 0x0, 0x0) syz_clone(0x2020200, 0x0, 0xffffffffffffffd3, 0x0, 0x0, 0x0) (async) 11:06:57 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) [ 1823.161456][T18242] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1823.169267][T18242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1823.177078][T18242] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1823.184979][T18242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1823.192788][T18242] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1823.200605][T18242] 11:06:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x8000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1823.265181][T18275] FAULT_INJECTION: forcing a failure. [ 1823.265181][T18275] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.286699][T18275] CPU: 1 PID: 18275 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1823.297224][T18275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1823.307120][T18275] Call Trace: [ 1823.310239][T18275] [ 1823.313017][T18275] dump_stack_lvl+0x151/0x1b7 [ 1823.317532][T18275] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1823.323004][T18275] dump_stack+0x15/0x17 [ 1823.326992][T18275] should_fail+0x3c6/0x510 [ 1823.331244][T18275] __should_failslab+0xa4/0xe0 [ 1823.335931][T18275] ? vm_area_dup+0x26/0x230 [ 1823.340271][T18275] should_failslab+0x9/0x20 [ 1823.344615][T18275] slab_pre_alloc_hook+0x37/0xd0 [ 1823.349389][T18275] ? vm_area_dup+0x26/0x230 [ 1823.353727][T18275] kmem_cache_alloc+0x44/0x200 [ 1823.358328][T18275] vm_area_dup+0x26/0x230 [ 1823.362493][T18275] dup_mm+0x81b/0x12c0 [ 1823.366402][T18275] ? copy_init_mm+0x20/0x20 [ 1823.370738][T18275] copy_mm+0x107/0x1b0 [ 1823.374642][T18275] copy_process+0x12bc/0x3260 [ 1823.379161][T18275] ? proc_fail_nth_write+0x20b/0x290 [ 1823.384277][T18275] ? fsnotify_perm+0x6a/0x5d0 [ 1823.388792][T18275] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1823.393745][T18275] ? vfs_write+0x9ec/0x1110 [ 1823.398086][T18275] kernel_clone+0x21e/0x9e0 [ 1823.402417][T18275] ? file_end_write+0x1c0/0x1c0 [ 1823.407228][T18275] ? create_io_thread+0x1e0/0x1e0 [ 1823.412099][T18275] ? mutex_unlock+0xb2/0x1b0 [ 1823.416611][T18275] ? __mutex_lock_slowpath+0x10/0x10 [ 1823.421724][T18275] __x64_sys_clone+0x23f/0x290 [ 1823.426410][T18275] ? __do_sys_vfork+0x130/0x130 [ 1823.431109][T18275] ? ksys_write+0x260/0x2c0 [ 1823.435441][T18275] ? debug_smp_processor_id+0x17/0x20 [ 1823.440646][T18275] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1823.446549][T18275] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1823.452023][T18275] do_syscall_64+0x3d/0xb0 [ 1823.456271][T18275] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1823.461998][T18275] RIP: 0033:0x7f72394e6b29 [ 1823.466250][T18275] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1823.485697][T18275] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1823.493935][T18275] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1823.501746][T18275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:06:57 executing program 0: syz_clone(0x30000000, 0x0, 0x400000000000000, 0x0, 0x0, 0x0) 11:06:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x9000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_pressure(r2, &(0x7f0000000080)={'full', 0x20, 0x3f, 0x20, 0x1}, 0x2f) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:57 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:57 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) [ 1823.509595][T18275] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1823.517381][T18275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1823.525185][T18275] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1823.532996][T18275] 11:06:57 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 11:06:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xa000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_pressure(r2, &(0x7f0000000080)={'full', 0x20, 0x3f, 0x20, 0x1}, 0x2f) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) write$cgroup_pressure(r2, &(0x7f0000000080)={'full', 0x20, 0x3f, 0x20, 0x1}, 0x2f) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 11:06:57 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xb000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_pressure(r2, &(0x7f0000000080)={'full', 0x20, 0x3f, 0x20, 0x1}, 0x2f) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:57 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) [ 1823.605846][T18304] FAULT_INJECTION: forcing a failure. [ 1823.605846][T18304] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.634766][T18304] CPU: 0 PID: 18304 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1823.645205][T18304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1823.655101][T18304] Call Trace: [ 1823.658330][T18304] [ 1823.661105][T18304] dump_stack_lvl+0x151/0x1b7 [ 1823.665625][T18304] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1823.671090][T18304] dump_stack+0x15/0x17 [ 1823.675339][T18304] should_fail+0x3c6/0x510 [ 1823.679679][T18304] __should_failslab+0xa4/0xe0 [ 1823.684277][T18304] ? vm_area_dup+0x26/0x230 [ 1823.688621][T18304] should_failslab+0x9/0x20 [ 1823.692960][T18304] slab_pre_alloc_hook+0x37/0xd0 [ 1823.697730][T18304] ? vm_area_dup+0x26/0x230 [ 1823.702072][T18304] kmem_cache_alloc+0x44/0x200 [ 1823.706675][T18304] vm_area_dup+0x26/0x230 [ 1823.710843][T18304] dup_mm+0x81b/0x12c0 [ 1823.714745][T18304] ? copy_init_mm+0x20/0x20 [ 1823.719086][T18304] copy_mm+0x107/0x1b0 [ 1823.723005][T18304] copy_process+0x12bc/0x3260 [ 1823.727503][T18304] ? proc_fail_nth_write+0x20b/0x290 [ 1823.732623][T18304] ? fsnotify_perm+0x6a/0x5d0 [ 1823.737136][T18304] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1823.742086][T18304] ? vfs_write+0x9ec/0x1110 [ 1823.746425][T18304] kernel_clone+0x21e/0x9e0 [ 1823.750765][T18304] ? file_end_write+0x1c0/0x1c0 [ 1823.755455][T18304] ? create_io_thread+0x1e0/0x1e0 [ 1823.760312][T18304] ? mutex_unlock+0xb2/0x1b0 [ 1823.764737][T18304] ? __mutex_lock_slowpath+0x10/0x10 [ 1823.769859][T18304] __x64_sys_clone+0x23f/0x290 [ 1823.774460][T18304] ? __do_sys_vfork+0x130/0x130 [ 1823.779144][T18304] ? ksys_write+0x260/0x2c0 [ 1823.783490][T18304] ? debug_smp_processor_id+0x17/0x20 [ 1823.788691][T18304] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1823.794597][T18304] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1823.800066][T18304] do_syscall_64+0x3d/0xb0 [ 1823.804315][T18304] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1823.810102][T18304] RIP: 0033:0x7f72394e6b29 [ 1823.814301][T18304] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1823.833742][T18304] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1823.841982][T18304] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:06:57 executing program 0: syz_clone(0x30000000, 0x0, 0x700000000000000, 0x0, 0x0, 0x0) 11:06:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xc000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:57 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:57 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x1a, &(0x7f0000000080)=""/26, 0x41100, 0x2, '\x00', r0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x3, 0xfffffb22}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r1]}, 0x80) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:57 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x1f) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) 11:06:57 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 11:06:57 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:57 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x1a, &(0x7f0000000080)=""/26, 0x41100, 0x2, '\x00', r0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x3, 0xfffffb22}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r1]}, 0x80) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:06:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xd000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1823.849795][T18304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1823.857611][T18304] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1823.865416][T18304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1823.873269][T18304] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1823.881048][T18304] 11:06:57 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x1f) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x1f) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) 11:06:57 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:57 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x1a, &(0x7f0000000080)=""/26, 0x41100, 0x2, '\x00', r0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x3, 0xfffffb22}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r1]}, 0x80) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x1a, &(0x7f0000000080)=""/26, 0x41100, 0x2, '\x00', r0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x3, 0xfffffb22}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r1]}, 0x80) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) [ 1823.968623][T18334] FAULT_INJECTION: forcing a failure. [ 1823.968623][T18334] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.981665][T18334] CPU: 0 PID: 18334 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1823.992094][T18334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1824.001988][T18334] Call Trace: [ 1824.005111][T18334] [ 1824.007888][T18334] dump_stack_lvl+0x151/0x1b7 [ 1824.012405][T18334] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1824.017874][T18334] dump_stack+0x15/0x17 [ 1824.021862][T18334] should_fail+0x3c6/0x510 [ 1824.026114][T18334] __should_failslab+0xa4/0xe0 [ 1824.030712][T18334] ? vm_area_dup+0x26/0x230 [ 1824.035055][T18334] should_failslab+0x9/0x20 [ 1824.039490][T18334] slab_pre_alloc_hook+0x37/0xd0 [ 1824.044258][T18334] ? vm_area_dup+0x26/0x230 [ 1824.048597][T18334] kmem_cache_alloc+0x44/0x200 [ 1824.053195][T18334] vm_area_dup+0x26/0x230 [ 1824.057352][T18334] dup_mm+0x81b/0x12c0 [ 1824.061353][T18334] ? copy_init_mm+0x20/0x20 [ 1824.065689][T18334] copy_mm+0x107/0x1b0 [ 1824.069696][T18334] copy_process+0x12bc/0x3260 [ 1824.074210][T18334] ? proc_fail_nth_write+0x20b/0x290 [ 1824.079329][T18334] ? fsnotify_perm+0x6a/0x5d0 [ 1824.083843][T18334] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1824.088788][T18334] ? vfs_write+0x9ec/0x1110 [ 1824.093129][T18334] kernel_clone+0x21e/0x9e0 [ 1824.097472][T18334] ? file_end_write+0x1c0/0x1c0 [ 1824.102158][T18334] ? create_io_thread+0x1e0/0x1e0 [ 1824.107015][T18334] ? mutex_unlock+0xb2/0x1b0 [ 1824.111443][T18334] ? __mutex_lock_slowpath+0x10/0x10 [ 1824.116564][T18334] __x64_sys_clone+0x23f/0x290 [ 1824.121166][T18334] ? __do_sys_vfork+0x130/0x130 [ 1824.125867][T18334] ? ksys_write+0x260/0x2c0 [ 1824.130191][T18334] ? debug_smp_processor_id+0x17/0x20 [ 1824.135396][T18334] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1824.141301][T18334] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1824.146766][T18334] do_syscall_64+0x3d/0xb0 [ 1824.151020][T18334] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1824.156750][T18334] RIP: 0033:0x7f72394e6b29 [ 1824.161002][T18334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1824.180442][T18334] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1824.188689][T18334] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1824.196502][T18334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1824.204310][T18334] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1824.212124][T18334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1824.219935][T18334] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1824.227755][T18334] 11:06:58 executing program 0: syz_clone(0x30000000, 0x0, 0x800000000000000, 0x0, 0x0, 0x0) 11:06:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xe000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:58 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='cachefiles_ondemand_open\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 11:06:58 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x1f) (async, rerun: 32) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) (rerun: 32) 11:06:58 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:58 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 11:06:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0xf000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:58 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='cachefiles_ondemand_open\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 11:06:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x73ac, 0x90000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000480)=0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7, 0x6, 0x6, 0x4e85}, {0x0, 0x2, 0x39, 0x5}, {0x3c3, 0x7f, 0x73, 0x3}, {0xfffc, 0x9c, 0x4, 0x9}, {0xdfd8, 0x81, 0x4, 0x5}]}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000030000000000009e582f3eb844dd5305cddc5b5debefcb000100000050cad09ec820793ec9502856d8c3be43020243ee5f0f6a249520aa165a30874fef3386bf4ac7b087cd8693ecb6a041f31f8082cc5a7edb7ce77750f3a07dc3eee5a9b9d385162f3648073cfc36ca95ec9e65c0c23acc657f231e889589810653166453c54054b2600a4fb36b9138b08c59351bc88718fdbd252f336fdee9791d1c5039e58ffb56af7af95431c100"/189], &(0x7f0000000200)='syzkaller\x00', 0x41d, 0x78, &(0x7f0000000240)=""/120, 0x40f00, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x1000, 0x80000000}, 0x10, 0x26f11, r0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001680)={&(0x7f0000000500), 0x6e, &(0x7f0000001640)=[{&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r2, r3, 0x25, 0x2, r5}, 0x14) 11:06:58 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1824.456182][T18349] FAULT_INJECTION: forcing a failure. [ 1824.456182][T18349] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.480212][T18349] CPU: 0 PID: 18349 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1824.490668][T18349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1824.502021][T18349] Call Trace: 11:06:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x10000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x11000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1824.505149][T18349] [ 1824.507922][T18349] dump_stack_lvl+0x151/0x1b7 [ 1824.512439][T18349] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1824.517904][T18349] dump_stack+0x15/0x17 [ 1824.521893][T18349] should_fail+0x3c6/0x510 [ 1824.526145][T18349] __should_failslab+0xa4/0xe0 [ 1824.530748][T18349] ? vm_area_dup+0x26/0x230 [ 1824.535085][T18349] should_failslab+0x9/0x20 [ 1824.539425][T18349] slab_pre_alloc_hook+0x37/0xd0 [ 1824.544203][T18349] ? vm_area_dup+0x26/0x230 [ 1824.548550][T18349] kmem_cache_alloc+0x44/0x200 [ 1824.553138][T18349] vm_area_dup+0x26/0x230 [ 1824.557307][T18349] dup_mm+0x81b/0x12c0 [ 1824.561216][T18349] ? copy_init_mm+0x20/0x20 [ 1824.565552][T18349] copy_mm+0x107/0x1b0 [ 1824.569466][T18349] copy_process+0x12bc/0x3260 [ 1824.573975][T18349] ? proc_fail_nth_write+0x20b/0x290 [ 1824.579094][T18349] ? fsnotify_perm+0x6a/0x5d0 [ 1824.583605][T18349] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1824.588551][T18349] ? vfs_write+0x9ec/0x1110 [ 1824.592981][T18349] kernel_clone+0x21e/0x9e0 [ 1824.597319][T18349] ? file_end_write+0x1c0/0x1c0 [ 1824.602009][T18349] ? create_io_thread+0x1e0/0x1e0 [ 1824.606861][T18349] ? mutex_unlock+0xb2/0x1b0 [ 1824.611290][T18349] ? __mutex_lock_slowpath+0x10/0x10 [ 1824.616411][T18349] __x64_sys_clone+0x23f/0x290 [ 1824.621010][T18349] ? __do_sys_vfork+0x130/0x130 [ 1824.625698][T18349] ? ksys_write+0x260/0x2c0 [ 1824.630041][T18349] ? debug_smp_processor_id+0x17/0x20 [ 1824.635245][T18349] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1824.641148][T18349] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1824.646619][T18349] do_syscall_64+0x3d/0xb0 [ 1824.650869][T18349] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1824.656597][T18349] RIP: 0033:0x7f72394e6b29 [ 1824.660888][T18349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1824.680294][T18349] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1824.688542][T18349] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1824.696352][T18349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1824.704165][T18349] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1824.712023][T18349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1824.719958][T18349] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1824.727776][T18349] 11:06:58 executing program 0: syz_clone(0x30000000, 0x0, 0x900000000000000, 0x0, 0x0, 0x0) 11:06:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x12000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:58 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='cachefiles_ondemand_open\x00'}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 11:06:58 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:58 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 11:06:58 executing program 5: syz_clone(0x211c0700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x800000, &(0x7f0000000080)="852482d39f79aafe77533f80ff7de30c5290555665de5e6e838c137c3db11377809351b4b85f5dad335b705ce84cff9f0e9bb3a8f30f314bea54b30bb906a3090c4cca144096ed171462576a9ef96777485d8a7b6c4625c2dcac29e6d8ecf001b3a61c55f39bb2de1d19bfe55e", 0x6d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="128d552284d2fbb8423edd4f3f8b189c16c001510a8d602e8d0f36ea4d59630da1f9de16b281af32d7a4f61acd26a12411a5242a832c5be4b9fb6b5e1783088abe8a341c174fa384a045f621636a5284085d02b8064b34d91ec83241055f0e7ede01da6caa996cdfe5be36f9bbd8a0c11fc64e7af24104f189913adb2ce38649abb5634bdd9df4557efc208c9f9756d00661cff366fa264613cb1758a702b0fc48b352fbadd65711093f46eff3aa2c14e58d1003958e9459b55164593d7199be3b125721de12a22370ee2fa4757cff4304bd3cd964a11ac96aa2afa471f04d43f06192c75308bf874a6804616d403502b4eeb6a362d92151576d3126d55cded91ac3758e893b4a22aed4387db7e283fb38fcb04a9dfe7d2a2b5e5a440ddc1b1baa2d5e9c93269d9bc7a714ce8e21e0fa332c2f624e5a327ef052f4eee32e6eb9650126d61b5c007d323cea7b8b5886369bc365fdd3127bd5ed28a468069a5c4cd0c90fe9d8284d5268fe6ded19f7e3e44a0e149b1f63bb1a43a59a54c1f45ad21ea6a4b964418a5bb15478fba471b7d33a30a45d980501cc8d92057f9d768f6d863393f9352478525e45c31776209aa06822005d545c34dfe3c3896f88ad75504f0a27034f8371811583647314c9466f5b4a2fea704e710bcb68210054767a4ca23b54a3950f59ca47060cb011f614cf1690da3cc5ca5cfe0849e5e86dbfd08a5919cd1412e66534ce941e459e56ef2f8ed323d23bbc97bb7e9720371dc67d37a32c0be19588533136e465fd4e1a28e52febc44bb3a789f50566a07c46d77f6b75a07255242b065c64c83fe5f096d58a0e599dd8b43976bf62908b24da4d9e98c3f0e5e9cfcecbbe14cb77e4f31e36730dd21a1a773956da629fe8ba477d0485dd2824c61dce9592bf3ac0677b63196c7843d027e6c02644571cb38f7eadfb755d6e4cbbad3b8aa21283b468e9f0fa98ca89ec994469fe961a9186c977849e79a2428faaf7c13c199d19bc4447296f95179d851a455374fb13505f91579a13f225be950d8865a3ef08ecf5c198aa4780ae712fbb9ebc556d965e5eb4b2c2f35d82688b88131cdb653e4e39d99399d4b6186a1d62a3a6401b8632ee5cb637142b42e5f501e4dee008a9ae3c96b41d0982f5e0057083b051bdd4e688d6ee9b5d1846c2b21753732fd45d0ac70dbc7bda33592b43d52e467c5ec996ef1441ce6fef4e83e72614fe5c25939b0e42065e48d695733b83e74df9f71c6f0f85c00f39e1a16b6eae4014d41e82776d77dc287738b20d8a73214f4c86e5b328a396e91c7f6e9f19ec84e63d588041983fe805e39739c26c1fce281177cab6ecba03463dcb61da72c5c292bc6694887ea0c05b68e887b6ddae0db2dc7fbf386d7e38a2fc8d3bbc56ea5bd0af25508b4b03020e6e4d22c91c2d13893231820d6b93372818cdb4416b64df160eb4b25976d5d44d635b7f83c6e0e547fbbf28c7bec28609ea23c13f6d6ce51428569eeba60226fca7707572d0654f56e9ab70cbaf900c2e69abbe4a839b7fdc7a99c3e0969acc036b74a821ff77e1af72371d42f235cd8d06334c274056bb947b4af3e8db8e6a31fdfdc2715623e2acb9dabcb4d32b098495ec02a055d00b3b7e2fdb816c5e9fe8f469cd65b62255c90ada8423f3b44e5b93ecd82463af9e28abb14f249918396b742bd80b78cd26faa6a0e80b65728c869da6881fac3cee99e62542429be0d939ba4b9d7cf4e9fe186d1e057d43c61dc5e14610ac7dfb7ca3459bb97f9fe9e1510f74d00ce33daa82140642041bc9b1fe84ccbc6e85ca699d2b44b53676558332c0e356a0dbafcedeac29463922ee5972c7059e0e2dbea1226099d8e40b05ebf59e02c0465ab2bf5a103ba6fd7cfd9d39efcc2e0b7f58cbf345f297658c473b53ae181ded052158d54910f82295485dc061eedc34aa1293bd14b085571b85cea1441e9e6a89e3fcfcaf017ce24591c57f5c40e3b8733a01c2b46389f84a874812068acc0811d8805df8521664585bf9fd013b2b7f7c0a95849e67e44b31b02f298eec181cfa92f51a8675473e39dae6a95bc2afc0318dcc821f3a3bf74e6cd1d55d331ac3a29489e890039452c75bef121b5bb60c2a35fed237ef9573f51fee94fd93539b1f9e4ac92a2b4ee22335d2fdd17d14e9f96823e8da9548da4303ce9495bd8e288e53f27a14f6fba1f0799bc1fe22bdc8669d428a4441b1c5d9e349c25b4ebc7cbd3b717da220d2466244a8e783dabe1730b6826f8060c7f1017f0c0b8711954a3992e2fe24c7ff03f8c46f532163598852e538668afc6a6ff76996c01be071a3158f598f7c3d774319a28fb9c4055e0bd76ff825524eec23e46b8e6cefd2b2b41dc290eb6e252e388857b5b2bec4d450a490b5fbf7bc33acff255f6571aa5d2bf65eba07bcbcaad781fe3e365ddb135872b52670657a5d23cda40ce4a71e3405e31339855ddcee0e2258f166c160d46f94aecf07176c8401b06744e47ce8c16d2e80ff08acbc128827447a8181d5b7b74abdc6f67a794fe8fa5da14629a9888cb71f62ca88c3a1ad4dcf8a6c3b1edc3a647cedd9a057389681cab3550c9c9eb2b264b6afa849bef58bf7a82a086cfb397739dfb7185c9f712f4496b75c53e6a254db389775c265e2bab27d91d743801a15a2300e43d9fe76587cf72f367704353820c3e490d0358c5d51dc5dc6baef9f61b7b2ba295521834905972dbb854cb8be97c90860f84b692181a57d391edd320ce9b5d6de058bbb80c3ab64cadbb2da72fc66fe0cf0dec8f55ce5c0534ede073d8a1ccfb74113c55d4f9f8254fb469d3c6fb2d672e25ca3b4922369248bd6a740e5d6eee9e6d439966b6bf7f18e69e547150cc75a2ed1dd5daa644520a8683e77c3059d7090084339576d096e99f2b14940d84d6cc2b889c3e106fc09d869b91a83a18204c4baef1a1ea5e79f55e17fcfee657edc34aa00f271ddcfb1c2a8c9e8b036ed9e3dbdb414798ca5bd5c071ad7c10309e2673ec2a702426734703de00a78c3132cbd9da8e68946134e666c0f6e071c44053e7befeff33df551f4406ad27aab072542950f6fa71337ac8236acdad33454dafb9c84c7f2ec1a087a9c7d6f41064a6928e94ce82d8d2d8fce6916c5efe7da9ddd09847fef17ccc7246405bfaa63f1fb765fd6328b1c00a1c4f1f497971a980c2f852d67ec096488b3071d0d349404245f05410e43ff133bd73ff46ad0d14413171f5d914b1e29bcc6de0d76fc1004838ddad002bc0fd5f07dd35f9c32cbc1591a688941778dcae581f264676fb13ec7c9e5852dcfc6ae1a3edd4dcd5309fe5ff3d3dd480b85664873c5752d9ef67cea61365a67365659b87230d74ae7b8e3aab1c6e4f88ffa0d7b751352d79eb87e833250381f49486b10bdfdf4ff6d424cd7cd6beb7870f582312aa1d18c5be1bd9c3dd5fdb9a2494a91f0a6f2ce892a5351e437210618d11ba4a7bbade6b98a4db07a6dccc95eaa496eee1cf058a7d87b0cce0aa4fe66be657010e97eb8f5fe2ab39c546100771f4d44cb5a9c26838ef3c23003bc270ee8e3ba906353ab495244ee2eb3ce32ff19c4e9d46cc5b4d73df5fc70c926c3b4c1383219094cdd1fa7af4a9ed39f203cb0e9056fa0500addfb1cf46255cf2ce77c6224ce8411e9b80182036ddfc5d8e1fae2c52b1f2ed319462320246d9a185139eb39f0e51d32a442f2e5332c6949b30376f4b1590c8a3a6650abbc3e9305cc7c760220b0a89a4f852874b2f4003b669968a76d275c93b0eb24413cbb131a264551437a771777a1f0461092bd850a1d5895d713aa70bff1d9bef1463ec76e9672fa0d3aba8ea30577c9900f994b9a93bd8f78abc1936feac36db5ef3d15ce0bc5debaaccf26691bbb0438aa76f02d457a0dccdd1f5786d53a03692e8b43543e6c714185362d17d18bb435583f73633a469565f13d3e27e09d2c3f8ab27bc01f1a223f8651db07ba21a71de6bdb15450e151079b2fcf3bc5f9448d5422538f3709780e697460fa6dcef6935338875a49e81d2715c21ba804510db2889a47b1e2468395cc492d63681d6b8326657bde186574c278e450ee04e9550a0590beb567dcbf3cd3bfcf099b3ee9dd858c405015a26cf3d57f4dda6611df43dc3b3677c9307eea99d28ecc44eeb2ee27c2e9e2e0d4609021c7446b80a04f39e36f05908f84a0089c88d70fb56ec41f28a1a5fec4f02a6c3d1104765be8217a57f392db94a039048bfe99312768479f05285c5e1677d69cb7a1cf93ab6792d2a495ef6123c7ab386daeabb36792d6413e2b44e69d88fe62e87804b64124dd996d79468b3556ea3c219e24f7b12e4ea7ad567cd96a6888115b77aa83df362e75278abc1813b65261f119e8c439f0ade0e1b523caae854d4468069ae38960912796106096432ca2ae8a696d64fa483f3b6557cc46cba630580192fd04a15d1adc4c4d28309f51978dccc4c26f95b334f4dda4b1fa6551e22edd23c9ac05b8324c3354b927cc77c63b78e76905dbe8154c23a1141872abf6aa0ac8a6a812680ed75bc1db3a1bcb0d50763ffae9ad738682664db9b89406795261a91312750619805ebca6727b3bf24a1ce6ac54fb845cd36f572ff874fd47a62be791491c4ca9835b184283a468bb5013cf197184f178248f299f0cbab89fbfe2de6e9c8c26841d7f069ada589796381c761b092d0ab5ec33b913da48c5ce96feb40e0fbb1ee33de4c324889e492235e082e0c53ee46fd9ec18b8029221822f8148a0bdfe3c59dc6c2409623620c7d27a951d6b6e3e96ea6709749addd89294ecc8904e022788caeee018eb61ede6b6aadd99b826487b0099fea27911f05932bd9bff8769da4088173033e903de5f4ca33d1e367bfc4b8685bbaf030fea9fdbfe938f6d57e99b9de66a53f65ff541c3f3372b0ec67eeb353cd7a0f39f908d8635c62effd2037d8b132402219553424c1131b3ae515fe49e0d9f0cbc14e82ec8ca6ac01266dbc7380ea6cff929f3e7e179bab4d637cf3ad04544fb225804f8dc18583b9911d32b5b9494ba2f915bc13c47baed240a5146adbe25055fcb8204d34921ed77f14f850ce0c594a87a81ca5a9497e6367702bee96541213bff74e6dad6af168c2dd0b6136fdb7adbca3e59f0de2dfb0850d57d9807b00ba7eb3582af4b7f4c5f904bd80463ae94aaf1c715b33211c0427c50ce35206ab98353eafe412e546079ee54bda38b5516b52f63524a4ca560397717bb223d3afbe26e5122c7523d20a8970c24e296e552f330b2992a456cf88ab6962401f5b2b11e9d8f4d4356f13ccd6ce05a378265073f45361e5a4af736c3b206f85b2fc41f687277822070daddb96683ab17f3c7c7d933da24a6af336f9cfb7b27eada23bf42a4209df1a91f63c63e46a69692207e17ee65556e1c1341e90d985691a84d4d4e350aad23e65acc622a24d2a4696597819abdcd21b9f575e9fb4e23f56410bd08a5c228f64226e1038221861902a8c4c6a3bac5f9a9ef209a7da5f5463d0fe8349469fe3bce4cc9882ed5f2fd9fa18b633f816d9f2666887a6a45370bbd7788dd6fc05e136841207c605f8eb3f945f258cc761fdfc30e199e5e5d2eaabb4457a9d6b193d393ec635e76d1f32747479d320336249d5d70a98ee62ef68ceb0b802fccc24685f2d6bafab23e6112e10d9e120c8346f720efa96215e8e1f33524de192f9f69dbf64a7fa09ef38f0f8b63ae2346d1c4255d8f1158b6b10a30d3a3cad7c4d3b6223a3fa1c78596190d552d191e37e5e39128") r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_fiemap\x00'}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x20000) 11:06:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x13000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:58 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1824.876308][T18382] FAULT_INJECTION: forcing a failure. [ 1824.876308][T18382] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.917736][T18382] CPU: 0 PID: 18382 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1824.928174][T18382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1824.938071][T18382] Call Trace: [ 1824.941191][T18382] [ 1824.943967][T18382] dump_stack_lvl+0x151/0x1b7 [ 1824.948485][T18382] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1824.953956][T18382] dump_stack+0x15/0x17 [ 1824.957941][T18382] should_fail+0x3c6/0x510 [ 1824.962195][T18382] __should_failslab+0xa4/0xe0 [ 1824.966814][T18382] ? anon_vma_fork+0x1df/0x4e0 [ 1824.971397][T18382] should_failslab+0x9/0x20 [ 1824.975736][T18382] slab_pre_alloc_hook+0x37/0xd0 [ 1824.980507][T18382] ? anon_vma_fork+0x1df/0x4e0 [ 1824.985111][T18382] kmem_cache_alloc+0x44/0x200 [ 1824.989798][T18382] anon_vma_fork+0x1df/0x4e0 [ 1824.994221][T18382] dup_mm+0x8c5/0x12c0 [ 1824.998135][T18382] ? copy_init_mm+0x20/0x20 [ 1825.002479][T18382] copy_mm+0x107/0x1b0 [ 1825.006375][T18382] copy_process+0x12bc/0x3260 [ 1825.010886][T18382] ? proc_fail_nth_write+0x20b/0x290 [ 1825.016029][T18382] ? fsnotify_perm+0x6a/0x5d0 [ 1825.020526][T18382] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1825.025465][T18382] ? vfs_write+0x9ec/0x1110 [ 1825.029808][T18382] kernel_clone+0x21e/0x9e0 [ 1825.034145][T18382] ? file_end_write+0x1c0/0x1c0 [ 1825.038831][T18382] ? create_io_thread+0x1e0/0x1e0 [ 1825.043699][T18382] ? mutex_unlock+0xb2/0x1b0 [ 1825.048122][T18382] ? __mutex_lock_slowpath+0x10/0x10 [ 1825.053247][T18382] __x64_sys_clone+0x23f/0x290 [ 1825.058999][T18382] ? __do_sys_vfork+0x130/0x130 [ 1825.063682][T18382] ? ksys_write+0x260/0x2c0 [ 1825.068028][T18382] ? debug_smp_processor_id+0x17/0x20 [ 1825.073229][T18382] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1825.079139][T18382] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1825.084608][T18382] do_syscall_64+0x3d/0xb0 [ 1825.088854][T18382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1825.094585][T18382] RIP: 0033:0x7f72394e6b29 [ 1825.098836][T18382] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1825.118279][T18382] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1825.126523][T18382] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1825.134337][T18382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1825.142148][T18382] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1825.149956][T18382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1825.157778][T18382] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1825.165587][T18382] 11:06:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x73ac, 0x90000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000480)=0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7, 0x6, 0x6, 0x4e85}, {0x0, 0x2, 0x39, 0x5}, {0x3c3, 0x7f, 0x73, 0x3}, {0xfffc, 0x9c, 0x4, 0x9}, {0xdfd8, 0x81, 0x4, 0x5}]}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000030000000000009e582f3eb844dd5305cddc5b5debefcb000100000050cad09ec820793ec9502856d8c3be43020243ee5f0f6a249520aa165a30874fef3386bf4ac7b087cd8693ecb6a041f31f8082cc5a7edb7ce77750f3a07dc3eee5a9b9d385162f3648073cfc36ca95ec9e65c0c23acc657f231e889589810653166453c54054b2600a4fb36b9138b08c59351bc88718fdbd252f336fdee9791d1c5039e58ffb56af7af95431c100"/189], &(0x7f0000000200)='syzkaller\x00', 0x41d, 0x78, &(0x7f0000000240)=""/120, 0x40f00, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x1000, 0x80000000}, 0x10, 0x26f11, r0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001680)={&(0x7f0000000500), 0x6e, &(0x7f0000001640)=[{&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r2, r3, 0x25, 0x2, r5}, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x73ac, 0x90000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000480)=0x1) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7, 0x6, 0x6, 0x4e85}, {0x0, 0x2, 0x39, 0x5}, {0x3c3, 0x7f, 0x73, 0x3}, {0xfffc, 0x9c, 0x4, 0x9}, {0xdfd8, 0x81, 0x4, 0x5}]}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000030000000000009e582f3eb844dd5305cddc5b5debefcb000100000050cad09ec820793ec9502856d8c3be43020243ee5f0f6a249520aa165a30874fef3386bf4ac7b087cd8693ecb6a041f31f8082cc5a7edb7ce77750f3a07dc3eee5a9b9d385162f3648073cfc36ca95ec9e65c0c23acc657f231e889589810653166453c54054b2600a4fb36b9138b08c59351bc88718fdbd252f336fdee9791d1c5039e58ffb56af7af95431c100"/189], &(0x7f0000000200)='syzkaller\x00', 0x41d, 0x78, &(0x7f0000000240)=""/120, 0x40f00, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x1000, 0x80000000}, 0x10, 0x26f11, r0}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) recvmsg$unix(r4, &(0x7f0000001680)={&(0x7f0000000500), 0x6e, &(0x7f0000001640)=[{&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r2, r3, 0x25, 0x2, r5}, 0x14) (async) 11:06:59 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x14000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:59 executing program 5: syz_clone(0x211c0700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x800000, &(0x7f0000000080)="852482d39f79aafe77533f80ff7de30c5290555665de5e6e838c137c3db11377809351b4b85f5dad335b705ce84cff9f0e9bb3a8f30f314bea54b30bb906a3090c4cca144096ed171462576a9ef96777485d8a7b6c4625c2dcac29e6d8ecf001b3a61c55f39bb2de1d19bfe55e", 0x6d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="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") (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_fiemap\x00'}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x20000) 11:06:59 executing program 0: syz_clone(0x30000000, 0x0, 0xf00000000000000, 0x0, 0x0, 0x0) 11:06:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x15000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:59 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x16000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:59 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 11:06:59 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x17000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x73ac, 0x90000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x73ac, 0x90000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000480)=0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7, 0x6, 0x6, 0x4e85}, {0x0, 0x2, 0x39, 0x5}, {0x3c3, 0x7f, 0x73, 0x3}, {0xfffc, 0x9c, 0x4, 0x9}, {0xdfd8, 0x81, 0x4, 0x5}]}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7, 0x6, 0x6, 0x4e85}, {0x0, 0x2, 0x39, 0x5}, {0x3c3, 0x7f, 0x73, 0x3}, {0xfffc, 0x9c, 0x4, 0x9}, {0xdfd8, 0x81, 0x4, 0x5}]}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000030000000000009e582f3eb844dd5305cddc5b5debefcb000100000050cad09ec820793ec9502856d8c3be43020243ee5f0f6a249520aa165a30874fef3386bf4ac7b087cd8693ecb6a041f31f8082cc5a7edb7ce77750f3a07dc3eee5a9b9d385162f3648073cfc36ca95ec9e65c0c23acc657f231e889589810653166453c54054b2600a4fb36b9138b08c59351bc88718fdbd252f336fdee9791d1c5039e58ffb56af7af95431c100"/189], &(0x7f0000000200)='syzkaller\x00', 0x41d, 0x78, &(0x7f0000000240)=""/120, 0x40f00, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x1000, 0x80000000}, 0x10, 0x26f11, r0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001680)={&(0x7f0000000500), 0x6e, &(0x7f0000001640)=[{&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r2, r3, 0x25, 0x2, r5}, 0x14) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r2, r3, 0x25, 0x2, r5}, 0x14) 11:06:59 executing program 5: syz_clone(0x211c0700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x211c0700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x800000, &(0x7f0000000080)="852482d39f79aafe77533f80ff7de30c5290555665de5e6e838c137c3db11377809351b4b85f5dad335b705ce84cff9f0e9bb3a8f30f314bea54b30bb906a3090c4cca144096ed171462576a9ef96777485d8a7b6c4625c2dcac29e6d8ecf001b3a61c55f39bb2de1d19bfe55e", 0x6d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="128d552284d2fbb8423edd4f3f8b189c16c001510a8d602e8d0f36ea4d59630da1f9de16b281af32d7a4f61acd26a12411a5242a832c5be4b9fb6b5e1783088abe8a341c174fa384a045f621636a5284085d02b8064b34d91ec83241055f0e7ede01da6caa996cdfe5be36f9bbd8a0c11fc64e7af24104f189913adb2ce38649abb5634bdd9df4557efc208c9f9756d00661cff366fa264613cb1758a702b0fc48b352fbadd65711093f46eff3aa2c14e58d1003958e9459b55164593d7199be3b125721de12a22370ee2fa4757cff4304bd3cd964a11ac96aa2afa471f04d43f06192c75308bf874a6804616d403502b4eeb6a362d92151576d3126d55cded91ac3758e893b4a22aed4387db7e283fb38fcb04a9dfe7d2a2b5e5a440ddc1b1baa2d5e9c93269d9bc7a714ce8e21e0fa332c2f624e5a327ef052f4eee32e6eb9650126d61b5c007d323cea7b8b5886369bc365fdd3127bd5ed28a468069a5c4cd0c90fe9d8284d5268fe6ded19f7e3e44a0e149b1f63bb1a43a59a54c1f45ad21ea6a4b964418a5bb15478fba471b7d33a30a45d980501cc8d92057f9d768f6d863393f9352478525e45c31776209aa06822005d545c34dfe3c3896f88ad75504f0a27034f8371811583647314c9466f5b4a2fea704e710bcb68210054767a4ca23b54a3950f59ca47060cb011f614cf1690da3cc5ca5cfe0849e5e86dbfd08a5919cd1412e66534ce941e459e56ef2f8ed323d23bbc97bb7e9720371dc67d37a32c0be19588533136e465fd4e1a28e52febc44bb3a789f50566a07c46d77f6b75a07255242b065c64c83fe5f096d58a0e599dd8b43976bf62908b24da4d9e98c3f0e5e9cfcecbbe14cb77e4f31e36730dd21a1a773956da629fe8ba477d0485dd2824c61dce9592bf3ac0677b63196c7843d027e6c02644571cb38f7eadfb755d6e4cbbad3b8aa21283b468e9f0fa98ca89ec994469fe961a9186c977849e79a2428faaf7c13c199d19bc4447296f95179d851a455374fb13505f91579a13f225be950d8865a3ef08ecf5c198aa4780ae712fbb9ebc556d965e5eb4b2c2f35d82688b88131cdb653e4e39d99399d4b6186a1d62a3a6401b8632ee5cb637142b42e5f501e4dee008a9ae3c96b41d0982f5e0057083b051bdd4e688d6ee9b5d1846c2b21753732fd45d0ac70dbc7bda33592b43d52e467c5ec996ef1441ce6fef4e83e72614fe5c25939b0e42065e48d695733b83e74df9f71c6f0f85c00f39e1a16b6eae4014d41e82776d77dc287738b20d8a73214f4c86e5b328a396e91c7f6e9f19ec84e63d588041983fe805e39739c26c1fce281177cab6ecba03463dcb61da72c5c292bc6694887ea0c05b68e887b6ddae0db2dc7fbf386d7e38a2fc8d3bbc56ea5bd0af25508b4b03020e6e4d22c91c2d13893231820d6b93372818cdb4416b64df160eb4b25976d5d44d635b7f83c6e0e547fbbf28c7bec28609ea23c13f6d6ce51428569eeba60226fca7707572d0654f56e9ab70cbaf900c2e69abbe4a839b7fdc7a99c3e0969acc036b74a821ff77e1af72371d42f235cd8d06334c274056bb947b4af3e8db8e6a31fdfdc2715623e2acb9dabcb4d32b098495ec02a055d00b3b7e2fdb816c5e9fe8f469cd65b62255c90ada8423f3b44e5b93ecd82463af9e28abb14f249918396b742bd80b78cd26faa6a0e80b65728c869da6881fac3cee99e62542429be0d939ba4b9d7cf4e9fe186d1e057d43c61dc5e14610ac7dfb7ca3459bb97f9fe9e1510f74d00ce33daa82140642041bc9b1fe84ccbc6e85ca699d2b44b53676558332c0e356a0dbafcedeac29463922ee5972c7059e0e2dbea1226099d8e40b05ebf59e02c0465ab2bf5a103ba6fd7cfd9d39efcc2e0b7f58cbf345f297658c473b53ae181ded052158d54910f82295485dc061eedc34aa1293bd14b085571b85cea1441e9e6a89e3fcfcaf017ce24591c57f5c40e3b8733a01c2b46389f84a874812068acc0811d8805df8521664585bf9fd013b2b7f7c0a95849e67e44b31b02f298eec181cfa92f51a8675473e39dae6a95bc2afc0318dcc821f3a3bf74e6cd1d55d331ac3a29489e890039452c75bef121b5bb60c2a35fed237ef9573f51fee94fd93539b1f9e4ac92a2b4ee22335d2fdd17d14e9f96823e8da9548da4303ce9495bd8e288e53f27a14f6fba1f0799bc1fe22bdc8669d428a4441b1c5d9e349c25b4ebc7cbd3b717da220d2466244a8e783dabe1730b6826f8060c7f1017f0c0b8711954a3992e2fe24c7ff03f8c46f532163598852e538668afc6a6ff76996c01be071a3158f598f7c3d774319a28fb9c4055e0bd76ff825524eec23e46b8e6cefd2b2b41dc290eb6e252e388857b5b2bec4d450a490b5fbf7bc33acff255f6571aa5d2bf65eba07bcbcaad781fe3e365ddb135872b52670657a5d23cda40ce4a71e3405e31339855ddcee0e2258f166c160d46f94aecf07176c8401b06744e47ce8c16d2e80ff08acbc128827447a8181d5b7b74abdc6f67a794fe8fa5da14629a9888cb71f62ca88c3a1ad4dcf8a6c3b1edc3a647cedd9a057389681cab3550c9c9eb2b264b6afa849bef58bf7a82a086cfb397739dfb7185c9f712f4496b75c53e6a254db389775c265e2bab27d91d743801a15a2300e43d9fe76587cf72f367704353820c3e490d0358c5d51dc5dc6baef9f61b7b2ba295521834905972dbb854cb8be97c90860f84b692181a57d391edd320ce9b5d6de058bbb80c3ab64cadbb2da72fc66fe0cf0dec8f55ce5c0534ede073d8a1ccfb74113c55d4f9f8254fb469d3c6fb2d672e25ca3b4922369248bd6a740e5d6eee9e6d439966b6bf7f18e69e547150cc75a2ed1dd5daa644520a8683e77c3059d7090084339576d096e99f2b14940d84d6cc2b889c3e106fc09d869b91a83a18204c4baef1a1ea5e79f55e17fcfee657edc34aa00f271ddcfb1c2a8c9e8b036ed9e3dbdb414798ca5bd5c071ad7c10309e2673ec2a702426734703de00a78c3132cbd9da8e68946134e666c0f6e071c44053e7befeff33df551f4406ad27aab072542950f6fa71337ac8236acdad33454dafb9c84c7f2ec1a087a9c7d6f41064a6928e94ce82d8d2d8fce6916c5efe7da9ddd09847fef17ccc7246405bfaa63f1fb765fd6328b1c00a1c4f1f497971a980c2f852d67ec096488b3071d0d349404245f05410e43ff133bd73ff46ad0d14413171f5d914b1e29bcc6de0d76fc1004838ddad002bc0fd5f07dd35f9c32cbc1591a688941778dcae581f264676fb13ec7c9e5852dcfc6ae1a3edd4dcd5309fe5ff3d3dd480b85664873c5752d9ef67cea61365a67365659b87230d74ae7b8e3aab1c6e4f88ffa0d7b751352d79eb87e833250381f49486b10bdfdf4ff6d424cd7cd6beb7870f582312aa1d18c5be1bd9c3dd5fdb9a2494a91f0a6f2ce892a5351e437210618d11ba4a7bbade6b98a4db07a6dccc95eaa496eee1cf058a7d87b0cce0aa4fe66be657010e97eb8f5fe2ab39c546100771f4d44cb5a9c26838ef3c23003bc270ee8e3ba906353ab495244ee2eb3ce32ff19c4e9d46cc5b4d73df5fc70c926c3b4c1383219094cdd1fa7af4a9ed39f203cb0e9056fa0500addfb1cf46255cf2ce77c6224ce8411e9b80182036ddfc5d8e1fae2c52b1f2ed319462320246d9a185139eb39f0e51d32a442f2e5332c6949b30376f4b1590c8a3a6650abbc3e9305cc7c760220b0a89a4f852874b2f4003b669968a76d275c93b0eb24413cbb131a264551437a771777a1f0461092bd850a1d5895d713aa70bff1d9bef1463ec76e9672fa0d3aba8ea30577c9900f994b9a93bd8f78abc1936feac36db5ef3d15ce0bc5debaaccf26691bbb0438aa76f02d457a0dccdd1f5786d53a03692e8b43543e6c714185362d17d18bb435583f73633a469565f13d3e27e09d2c3f8ab27bc01f1a223f8651db07ba21a71de6bdb15450e151079b2fcf3bc5f9448d5422538f3709780e697460fa6dcef6935338875a49e81d2715c21ba804510db2889a47b1e2468395cc492d63681d6b8326657bde186574c278e450ee04e9550a0590beb567dcbf3cd3bfcf099b3ee9dd858c405015a26cf3d57f4dda6611df43dc3b3677c9307eea99d28ecc44eeb2ee27c2e9e2e0d4609021c7446b80a04f39e36f05908f84a0089c88d70fb56ec41f28a1a5fec4f02a6c3d1104765be8217a57f392db94a039048bfe99312768479f05285c5e1677d69cb7a1cf93ab6792d2a495ef6123c7ab386daeabb36792d6413e2b44e69d88fe62e87804b64124dd996d79468b3556ea3c219e24f7b12e4ea7ad567cd96a6888115b77aa83df362e75278abc1813b65261f119e8c439f0ade0e1b523caae854d4468069ae38960912796106096432ca2ae8a696d64fa483f3b6557cc46cba630580192fd04a15d1adc4c4d28309f51978dccc4c26f95b334f4dda4b1fa6551e22edd23c9ac05b8324c3354b927cc77c63b78e76905dbe8154c23a1141872abf6aa0ac8a6a812680ed75bc1db3a1bcb0d50763ffae9ad738682664db9b89406795261a91312750619805ebca6727b3bf24a1ce6ac54fb845cd36f572ff874fd47a62be791491c4ca9835b184283a468bb5013cf197184f178248f299f0cbab89fbfe2de6e9c8c26841d7f069ada589796381c761b092d0ab5ec33b913da48c5ce96feb40e0fbb1ee33de4c324889e492235e082e0c53ee46fd9ec18b8029221822f8148a0bdfe3c59dc6c2409623620c7d27a951d6b6e3e96ea6709749addd89294ecc8904e022788caeee018eb61ede6b6aadd99b826487b0099fea27911f05932bd9bff8769da4088173033e903de5f4ca33d1e367bfc4b8685bbaf030fea9fdbfe938f6d57e99b9de66a53f65ff541c3f3372b0ec67eeb353cd7a0f39f908d8635c62effd2037d8b132402219553424c1131b3ae515fe49e0d9f0cbc14e82ec8ca6ac01266dbc7380ea6cff929f3e7e179bab4d637cf3ad04544fb225804f8dc18583b9911d32b5b9494ba2f915bc13c47baed240a5146adbe25055fcb8204d34921ed77f14f850ce0c594a87a81ca5a9497e6367702bee96541213bff74e6dad6af168c2dd0b6136fdb7adbca3e59f0de2dfb0850d57d9807b00ba7eb3582af4b7f4c5f904bd80463ae94aaf1c715b33211c0427c50ce35206ab98353eafe412e546079ee54bda38b5516b52f63524a4ca560397717bb223d3afbe26e5122c7523d20a8970c24e296e552f330b2992a456cf88ab6962401f5b2b11e9d8f4d4356f13ccd6ce05a378265073f45361e5a4af736c3b206f85b2fc41f687277822070daddb96683ab17f3c7c7d933da24a6af336f9cfb7b27eada23bf42a4209df1a91f63c63e46a69692207e17ee65556e1c1341e90d985691a84d4d4e350aad23e65acc622a24d2a4696597819abdcd21b9f575e9fb4e23f56410bd08a5c228f64226e1038221861902a8c4c6a3bac5f9a9ef209a7da5f5463d0fe8349469fe3bce4cc9882ed5f2fd9fa18b633f816d9f2666887a6a45370bbd7788dd6fc05e136841207c605f8eb3f945f258cc761fdfc30e199e5e5d2eaabb4457a9d6b193d393ec635e76d1f32747479d320336249d5d70a98ee62ef68ceb0b802fccc24685f2d6bafab23e6112e10d9e120c8346f720efa96215e8e1f33524de192f9f69dbf64a7fa09ef38f0f8b63ae2346d1c4255d8f1158b6b10a30d3a3cad7c4d3b6223a3fa1c78596190d552d191e37e5e39128") r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_fiemap\x00'}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x20000) 11:06:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x18000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:59 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x19000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1825.525351][T18432] FAULT_INJECTION: forcing a failure. [ 1825.525351][T18432] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.559249][T18432] CPU: 0 PID: 18432 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1825.569790][T18432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1825.579679][T18432] Call Trace: [ 1825.582806][T18432] [ 1825.585573][T18432] dump_stack_lvl+0x151/0x1b7 [ 1825.590092][T18432] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1825.595560][T18432] ? avc_denied+0x1b0/0x1b0 [ 1825.599899][T18432] dump_stack+0x15/0x17 [ 1825.603895][T18432] should_fail+0x3c6/0x510 [ 1825.608144][T18432] __should_failslab+0xa4/0xe0 [ 1825.612837][T18432] ? vm_area_dup+0x26/0x230 [ 1825.617170][T18432] should_failslab+0x9/0x20 [ 1825.621509][T18432] slab_pre_alloc_hook+0x37/0xd0 [ 1825.626367][T18432] ? vm_area_dup+0x26/0x230 [ 1825.630795][T18432] kmem_cache_alloc+0x44/0x200 [ 1825.635419][T18432] vm_area_dup+0x26/0x230 [ 1825.639565][T18432] dup_mm+0x81b/0x12c0 [ 1825.643474][T18432] ? copy_init_mm+0x20/0x20 [ 1825.647835][T18432] copy_mm+0x107/0x1b0 [ 1825.651714][T18432] copy_process+0x12bc/0x3260 [ 1825.656233][T18432] ? proc_fail_nth_write+0x20b/0x290 [ 1825.661351][T18432] ? fsnotify_perm+0x6a/0x5d0 [ 1825.665948][T18432] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1825.670898][T18432] ? vfs_write+0x9ec/0x1110 [ 1825.675239][T18432] kernel_clone+0x21e/0x9e0 [ 1825.679834][T18432] ? file_end_write+0x1c0/0x1c0 [ 1825.684520][T18432] ? create_io_thread+0x1e0/0x1e0 [ 1825.689381][T18432] ? mutex_unlock+0xb2/0x1b0 [ 1825.693816][T18432] ? __mutex_lock_slowpath+0x10/0x10 [ 1825.698932][T18432] __x64_sys_clone+0x23f/0x290 [ 1825.703534][T18432] ? __do_sys_vfork+0x130/0x130 [ 1825.708477][T18432] ? ksys_write+0x260/0x2c0 [ 1825.712820][T18432] ? debug_smp_processor_id+0x17/0x20 [ 1825.718024][T18432] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1825.723924][T18432] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1825.729393][T18432] do_syscall_64+0x3d/0xb0 [ 1825.733643][T18432] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1825.739374][T18432] RIP: 0033:0x7f72394e6b29 [ 1825.743628][T18432] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1825.763071][T18432] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1825.771314][T18432] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1825.779130][T18432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1825.786941][T18432] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1825.794757][T18432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1825.802553][T18432] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1825.810550][T18432] 11:06:59 executing program 0: syz_clone(0x30000000, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0) 11:06:59 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:06:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1a000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:06:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5450, 0x0) syz_clone(0x8000a300, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:00 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 11:07:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1b000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:00 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1826.172513][T18460] FAULT_INJECTION: forcing a failure. [ 1826.172513][T18460] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.219831][T18460] CPU: 0 PID: 18460 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1826.230270][T18460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1826.240168][T18460] Call Trace: [ 1826.243291][T18460] [ 1826.246069][T18460] dump_stack_lvl+0x151/0x1b7 [ 1826.250577][T18460] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1826.256048][T18460] dump_stack+0x15/0x17 [ 1826.260037][T18460] should_fail+0x3c6/0x510 [ 1826.264294][T18460] __should_failslab+0xa4/0xe0 [ 1826.268897][T18460] ? anon_vma_clone+0x9a/0x500 [ 1826.273489][T18460] should_failslab+0x9/0x20 [ 1826.277832][T18460] slab_pre_alloc_hook+0x37/0xd0 [ 1826.282694][T18460] ? anon_vma_clone+0x9a/0x500 [ 1826.287382][T18460] kmem_cache_alloc+0x44/0x200 [ 1826.291983][T18460] anon_vma_clone+0x9a/0x500 [ 1826.296408][T18460] anon_vma_fork+0x91/0x4e0 [ 1826.300748][T18460] ? anon_vma_name+0x4c/0x70 [ 1826.305179][T18460] ? vm_area_dup+0x17a/0x230 [ 1826.309599][T18460] dup_mm+0x8c5/0x12c0 [ 1826.313509][T18460] ? copy_init_mm+0x20/0x20 [ 1826.317848][T18460] copy_mm+0x107/0x1b0 [ 1826.321935][T18460] copy_process+0x12bc/0x3260 [ 1826.326464][T18460] ? proc_fail_nth_write+0x20b/0x290 [ 1826.331570][T18460] ? fsnotify_perm+0x6a/0x5d0 [ 1826.336081][T18460] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1826.341027][T18460] ? vfs_write+0x9ec/0x1110 [ 1826.345364][T18460] kernel_clone+0x21e/0x9e0 [ 1826.349705][T18460] ? file_end_write+0x1c0/0x1c0 [ 1826.354395][T18460] ? create_io_thread+0x1e0/0x1e0 [ 1826.359248][T18460] ? mutex_unlock+0xb2/0x1b0 [ 1826.363865][T18460] ? __mutex_lock_slowpath+0x10/0x10 [ 1826.369172][T18460] __x64_sys_clone+0x23f/0x290 [ 1826.373759][T18460] ? __do_sys_vfork+0x130/0x130 [ 1826.378454][T18460] ? ksys_write+0x260/0x2c0 [ 1826.382799][T18460] ? debug_smp_processor_id+0x17/0x20 [ 1826.387994][T18460] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1826.393897][T18460] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1826.399367][T18460] do_syscall_64+0x3d/0xb0 [ 1826.403624][T18460] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1826.409448][T18460] RIP: 0033:0x7f72394e6b29 [ 1826.413872][T18460] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1826.433407][T18460] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1826.441631][T18460] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1826.449443][T18460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1826.457259][T18460] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 11:07:00 executing program 3: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000)="95fb4d5fd86747b8f53ef38cd55d3b774eb1b06d5b6babac29e263172a668d5d743ee145015c9cd1fa330a04c2331aafff3d426f1590a1845de8e2e47812c3e3eef4ac1cc349dfeb4069c9949a6ca45277ae9400db1dba98c782308e83f2263bd69816449aac898995468f35ec84376352af5b69996506a65332f4ef3d95213ed0f05574bef3855037efae1c04165053c613333b18e3aa1b8ec6770b035cdbb5deb9d8c4bb1f8862937fb95fed527148fb7b0377573dcbe2", &(0x7f00000000c0)=""/75, &(0x7f0000000140)="19b51598d73c06f516fc27e3e35e7055a10d16dc2ef40c7ad1124bfc5ef1a60b91b2e7c6c1245fa76ff8e6a9ea693af96bc383223ac085418eeabb34d955811e8cf01db940af27240412c7b9476c9ce1017fe03883c45d035d", &(0x7f00000001c0)="b6f5c5a3cd929094cd1aec1e6cbc94148df24b61237a1f22b93545eb1bce24602d4f45b20b4edcc5667da0a3f6f5032fe5c601dc844ccfb154972e2c711707417b6a1a7de06d1b21111afd41fc5642ccf42adc613b395e6307039fa8a1665f3fc74dd2d6a4fb48", 0x6, r0, 0x4}, 0x38) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x8, 0x2, 0x8, 0xfffffffffffffffc, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0x80000000, 0x51, &(0x7f0000000380)=""/81, 0x1f00, 0x1, '\x00', 0x0, 0x8, r1, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x9, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0x1, r0, r2, r0]}, 0x80) 11:07:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5450, 0x0) syz_clone(0x8000a300, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:00 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1c000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:00 executing program 0: syz_clone(0x30000000, 0x0, 0x1f00000000000000, 0x0, 0x0, 0x0) [ 1826.465065][T18460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1826.472877][T18460] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1826.480691][T18460] 11:07:00 executing program 3: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000)="95fb4d5fd86747b8f53ef38cd55d3b774eb1b06d5b6babac29e263172a668d5d743ee145015c9cd1fa330a04c2331aafff3d426f1590a1845de8e2e47812c3e3eef4ac1cc349dfeb4069c9949a6ca45277ae9400db1dba98c782308e83f2263bd69816449aac898995468f35ec84376352af5b69996506a65332f4ef3d95213ed0f05574bef3855037efae1c04165053c613333b18e3aa1b8ec6770b035cdbb5deb9d8c4bb1f8862937fb95fed527148fb7b0377573dcbe2", &(0x7f00000000c0)=""/75, &(0x7f0000000140)="19b51598d73c06f516fc27e3e35e7055a10d16dc2ef40c7ad1124bfc5ef1a60b91b2e7c6c1245fa76ff8e6a9ea693af96bc383223ac085418eeabb34d955811e8cf01db940af27240412c7b9476c9ce1017fe03883c45d035d", &(0x7f00000001c0)="b6f5c5a3cd929094cd1aec1e6cbc94148df24b61237a1f22b93545eb1bce24602d4f45b20b4edcc5667da0a3f6f5032fe5c601dc844ccfb154972e2c711707417b6a1a7de06d1b21111afd41fc5642ccf42adc613b395e6307039fa8a1665f3fc74dd2d6a4fb48", 0x6, r0, 0x4}, 0x38) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x8, 0x2, 0x8, 0xfffffffffffffffc, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0x80000000, 0x51, &(0x7f0000000380)=""/81, 0x1f00, 0x1, '\x00', 0x0, 0x8, r1, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x9, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0x1, r0, r2, r0]}, 0x80) 11:07:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1d000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:00 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x5450, 0x0) syz_clone(0x8000a300, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x5450, 0x0) (async) syz_clone(0x8000a300, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 11:07:00 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 11:07:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1e000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:00 executing program 3: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000)="95fb4d5fd86747b8f53ef38cd55d3b774eb1b06d5b6babac29e263172a668d5d743ee145015c9cd1fa330a04c2331aafff3d426f1590a1845de8e2e47812c3e3eef4ac1cc349dfeb4069c9949a6ca45277ae9400db1dba98c782308e83f2263bd69816449aac898995468f35ec84376352af5b69996506a65332f4ef3d95213ed0f05574bef3855037efae1c04165053c613333b18e3aa1b8ec6770b035cdbb5deb9d8c4bb1f8862937fb95fed527148fb7b0377573dcbe2", &(0x7f00000000c0)=""/75, &(0x7f0000000140)="19b51598d73c06f516fc27e3e35e7055a10d16dc2ef40c7ad1124bfc5ef1a60b91b2e7c6c1245fa76ff8e6a9ea693af96bc383223ac085418eeabb34d955811e8cf01db940af27240412c7b9476c9ce1017fe03883c45d035d", &(0x7f00000001c0)="b6f5c5a3cd929094cd1aec1e6cbc94148df24b61237a1f22b93545eb1bce24602d4f45b20b4edcc5667da0a3f6f5032fe5c601dc844ccfb154972e2c711707417b6a1a7de06d1b21111afd41fc5642ccf42adc613b395e6307039fa8a1665f3fc74dd2d6a4fb48", 0x6, r0, 0x4}, 0x38) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x8, 0x2, 0x8, 0xfffffffffffffffc, 0x4}], &(0x7f0000000340)='syzkaller\x00', 0x80000000, 0x51, &(0x7f0000000380)=""/81, 0x1f00, 0x1, '\x00', 0x0, 0x8, r1, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x9, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0x1, r0, r2, r0]}, 0x80) 11:07:00 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000940)='devices.list\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000a80)=ANY=[@ANYBLOB="06000000000000000000000000000000000000070000006100000000000000000f9886e2433ea86b3205dfac9e74e03179f4e538393513383e99af772c10689bb198fbd3645017766f2c99b9a867e81351c99abd9dbc67ce37f5f1338c32f82057f5e9b1c67d6f080a583fb1c4b5eae9f7a8bc8c0b2cd3a58519be0189613dfed18a335f6c8a3f44f3550be7e6d2c582b4623a0c15e1eca0800aa6ac612209d5a0ed59554c6d894908faa0441be2d7b0ba0a9e99bacf1938f660335409b9b9d335628acb8fda5ae5dad22e0376e0486903be1776fa53"]) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000200)=""/220, 0xdc, 0x0, &(0x7f0000000300)=""/199, 0xc7}}, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffff}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000b80)=ANY=[@ANYBLOB="8510000000000000bc0a18000000000018200000", @ANYRES32=r3, @ANYBLOB="000000000000008018430000fbffffff000000000000040042b00c00fcffffff61a94e26147e233d87472bb3a26eef60d2510f7500f9ff00586b92e7bfe3029f5fa2ab06fb1421aae30469aaf9677d6135e73db441d38b9e7c0c0209872d72b00208e580638e0aeaf2fe76e5e51766608ae478530452dad685d116879dd37c9e9ffcedf4eac983e06e94c379bfa39ebfdd43789424"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xb, 0x0, 0x3}, 0x10, 0xd5a7, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x7ff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000740)=@raw=[@ldst={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}], &(0x7f0000000780)='syzkaller\x00', 0x5, 0x93, &(0x7f00000007c0)=""/147, 0x41000, 0x14, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xe, 0x7, 0x6}, 0x10, r2, 0x0, 0x0, &(0x7f00000009c0)=[r6, r4, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3800000}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @generic={0x0, 0x2, 0x1, 0x3f, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x7, 0x1, 0x7, 0x1, 0x7, 0x100, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x3, 0x0, 0x4, 0x8, 0xfffffffffffffffe, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0xc7d, 0x82, &(0x7f00000000c0)=""/130, 0x41000, 0x5, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x68e4}, 0x10, r2}, 0x80) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:00 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000940)='devices.list\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000a80)=ANY=[@ANYBLOB="06000000000000000000000000000000000000070000006100000000000000000f9886e2433ea86b3205dfac9e74e03179f4e538393513383e99af772c10689bb198fbd3645017766f2c99b9a867e81351c99abd9dbc67ce37f5f1338c32f82057f5e9b1c67d6f080a583fb1c4b5eae9f7a8bc8c0b2cd3a58519be0189613dfed18a335f6c8a3f44f3550be7e6d2c582b4623a0c15e1eca0800aa6ac612209d5a0ed59554c6d894908faa0441be2d7b0ba0a9e99bacf1938f660335409b9b9d335628acb8fda5ae5dad22e0376e0486903be1776fa53"]) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000200)=""/220, 0xdc, 0x0, &(0x7f0000000300)=""/199, 0xc7}}, 0x10) (rerun: 32) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffff}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000b80)=ANY=[@ANYBLOB="8510000000000000bc0a18000000000018200000", @ANYRES32=r3, @ANYBLOB="000000000000008018430000fbffffff000000000000040042b00c00fcffffff61a94e26147e233d87472bb3a26eef60d2510f7500f9ff00586b92e7bfe3029f5fa2ab06fb1421aae30469aaf9677d6135e73db441d38b9e7c0c0209872d72b00208e580638e0aeaf2fe76e5e51766608ae478530452dad685d116879dd37c9e9ffcedf4eac983e06e94c379bfa39ebfdd43789424"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xb, 0x0, 0x3}, 0x10, 0xd5a7, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x7ff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000740)=@raw=[@ldst={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}], &(0x7f0000000780)='syzkaller\x00', 0x5, 0x93, &(0x7f00000007c0)=""/147, 0x41000, 0x14, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xe, 0x7, 0x6}, 0x10, r2, 0x0, 0x0, &(0x7f00000009c0)=[r6, r4, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3800000}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @generic={0x0, 0x2, 0x1, 0x3f, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x7, 0x1, 0x7, 0x1, 0x7, 0x100, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x3, 0x0, 0x4, 0x8, 0xfffffffffffffffe, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0xc7d, 0x82, &(0x7f00000000c0)=""/130, 0x41000, 0x5, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x68e4}, 0x10, r2}, 0x80) (async, rerun: 32) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1826.966988][T18499] FAULT_INJECTION: forcing a failure. [ 1826.966988][T18499] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.010940][T18499] CPU: 0 PID: 18499 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1827.021384][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1827.031282][T18499] Call Trace: [ 1827.034400][T18499] [ 1827.037191][T18499] dump_stack_lvl+0x151/0x1b7 [ 1827.041692][T18499] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1827.047243][T18499] dump_stack+0x15/0x17 [ 1827.051243][T18499] should_fail+0x3c6/0x510 [ 1827.055499][T18499] __should_failslab+0xa4/0xe0 [ 1827.060093][T18499] ? anon_vma_clone+0x9a/0x500 [ 1827.064689][T18499] should_failslab+0x9/0x20 [ 1827.069029][T18499] slab_pre_alloc_hook+0x37/0xd0 [ 1827.073805][T18499] ? anon_vma_clone+0x9a/0x500 [ 1827.078404][T18499] kmem_cache_alloc+0x44/0x200 [ 1827.083092][T18499] anon_vma_clone+0x9a/0x500 [ 1827.087518][T18499] anon_vma_fork+0x91/0x4e0 [ 1827.091865][T18499] ? anon_vma_name+0x4c/0x70 [ 1827.096289][T18499] ? vm_area_dup+0x17a/0x230 [ 1827.100709][T18499] dup_mm+0x8c5/0x12c0 [ 1827.104617][T18499] ? copy_init_mm+0x20/0x20 [ 1827.108956][T18499] copy_mm+0x107/0x1b0 [ 1827.112860][T18499] copy_process+0x12bc/0x3260 [ 1827.117376][T18499] ? proc_fail_nth_write+0x20b/0x290 [ 1827.122498][T18499] ? fsnotify_perm+0x6a/0x5d0 [ 1827.127006][T18499] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1827.131955][T18499] ? vfs_write+0x9ec/0x1110 [ 1827.136295][T18499] kernel_clone+0x21e/0x9e0 [ 1827.140651][T18499] ? file_end_write+0x1c0/0x1c0 [ 1827.145320][T18499] ? create_io_thread+0x1e0/0x1e0 [ 1827.150181][T18499] ? mutex_unlock+0xb2/0x1b0 [ 1827.154617][T18499] ? __mutex_lock_slowpath+0x10/0x10 [ 1827.159732][T18499] __x64_sys_clone+0x23f/0x290 [ 1827.164331][T18499] ? __do_sys_vfork+0x130/0x130 [ 1827.169016][T18499] ? ksys_write+0x260/0x2c0 [ 1827.173362][T18499] ? debug_smp_processor_id+0x17/0x20 [ 1827.178564][T18499] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1827.184570][T18499] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1827.190024][T18499] do_syscall_64+0x3d/0xb0 [ 1827.194272][T18499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1827.199998][T18499] RIP: 0033:0x7f72394e6b29 [ 1827.204258][T18499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1827.223700][T18499] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1827.231942][T18499] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1827.240186][T18499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1827.248084][T18499] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1827.255897][T18499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1827.263709][T18499] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1827.271529][T18499] 11:07:01 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x63cc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) 11:07:01 executing program 0: syz_clone(0x30000000, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0) 11:07:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x1f000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:01 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000940)='devices.list\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000a80)=ANY=[@ANYBLOB="06000000000000000000000000000000000000070000006100000000000000000f9886e2433ea86b3205dfac9e74e03179f4e538393513383e99af772c10689bb198fbd3645017766f2c99b9a867e81351c99abd9dbc67ce37f5f1338c32f82057f5e9b1c67d6f080a583fb1c4b5eae9f7a8bc8c0b2cd3a58519be0189613dfed18a335f6c8a3f44f3550be7e6d2c582b4623a0c15e1eca0800aa6ac612209d5a0ed59554c6d894908faa0441be2d7b0ba0a9e99bacf1938f660335409b9b9d335628acb8fda5ae5dad22e0376e0486903be1776fa53"]) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000200)=""/220, 0xdc, 0x0, &(0x7f0000000300)=""/199, 0xc7}}, 0x10) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffff}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000b80)=ANY=[@ANYBLOB="8510000000000000bc0a18000000000018200000", @ANYRES32=r3, @ANYBLOB="000000000000008018430000fbffffff000000000000040042b00c00fcffffff61a94e26147e233d87472bb3a26eef60d2510f7500f9ff00586b92e7bfe3029f5fa2ab06fb1421aae30469aaf9677d6135e73db441d38b9e7c0c0209872d72b00208e580638e0aeaf2fe76e5e51766608ae478530452dad685d116879dd37c9e9ffcedf4eac983e06e94c379bfa39ebfdd43789424"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xb, 0x0, 0x3}, 0x10, 0xd5a7, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x7ff, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000740)=@raw=[@ldst={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}], &(0x7f0000000780)='syzkaller\x00', 0x5, 0x93, &(0x7f00000007c0)=""/147, 0x41000, 0x14, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xe, 0x7, 0x6}, 0x10, r2, 0x0, 0x0, &(0x7f00000009c0)=[r6, r4, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3800000}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @generic={0x0, 0x2, 0x1, 0x3f, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x7, 0x1, 0x7, 0x1, 0x7, 0x100, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x3, 0x0, 0x4, 0x8, 0xfffffffffffffffe, 0x8}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0xc7d, 0x82, &(0x7f00000000c0)=""/130, 0x41000, 0x5, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x68e4}, 0x10, r2}, 0x80) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:01 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 11:07:01 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x63cc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) 11:07:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x20000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:01 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:01 executing program 5: r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r2, 0x0, 0x4, &(0x7f0000000080)='+[*\x00'}, 0xb) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) 11:07:01 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x21000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:01 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x63cc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) [ 1827.710850][T18530] FAULT_INJECTION: forcing a failure. [ 1827.710850][T18530] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.741050][T18530] CPU: 1 PID: 18530 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1827.751492][T18530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1827.761384][T18530] Call Trace: [ 1827.764506][T18530] [ 1827.767283][T18530] dump_stack_lvl+0x151/0x1b7 [ 1827.771885][T18530] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1827.777350][T18530] dump_stack+0x15/0x17 [ 1827.781364][T18530] should_fail+0x3c6/0x510 [ 1827.785604][T18530] __should_failslab+0xa4/0xe0 [ 1827.790202][T18530] ? anon_vma_clone+0x9a/0x500 [ 1827.794799][T18530] should_failslab+0x9/0x20 [ 1827.799138][T18530] slab_pre_alloc_hook+0x37/0xd0 [ 1827.803910][T18530] ? anon_vma_clone+0x9a/0x500 [ 1827.808520][T18530] kmem_cache_alloc+0x44/0x200 [ 1827.813115][T18530] anon_vma_clone+0x9a/0x500 [ 1827.817559][T18530] anon_vma_fork+0x91/0x4e0 [ 1827.821878][T18530] ? anon_vma_name+0x43/0x70 [ 1827.826302][T18530] ? vm_area_dup+0x17a/0x230 [ 1827.830729][T18530] dup_mm+0x8c5/0x12c0 [ 1827.834635][T18530] ? copy_init_mm+0x20/0x20 [ 1827.838973][T18530] copy_mm+0x107/0x1b0 [ 1827.842882][T18530] copy_process+0x12bc/0x3260 [ 1827.847396][T18530] ? proc_fail_nth_write+0x20b/0x290 [ 1827.852513][T18530] ? fsnotify_perm+0x6a/0x5d0 [ 1827.857026][T18530] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1827.861974][T18530] ? vfs_write+0x9ec/0x1110 [ 1827.866315][T18530] kernel_clone+0x21e/0x9e0 [ 1827.870662][T18530] ? file_end_write+0x1c0/0x1c0 [ 1827.875341][T18530] ? create_io_thread+0x1e0/0x1e0 [ 1827.880209][T18530] ? mutex_unlock+0xb2/0x1b0 [ 1827.884625][T18530] ? __mutex_lock_slowpath+0x10/0x10 [ 1827.889749][T18530] __x64_sys_clone+0x23f/0x290 [ 1827.894348][T18530] ? __do_sys_vfork+0x130/0x130 [ 1827.899031][T18530] ? ksys_write+0x260/0x2c0 [ 1827.903374][T18530] ? debug_smp_processor_id+0x17/0x20 [ 1827.908580][T18530] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1827.914483][T18530] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1827.919952][T18530] do_syscall_64+0x3d/0xb0 [ 1827.924203][T18530] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1827.929930][T18530] RIP: 0033:0x7f72394e6b29 [ 1827.934186][T18530] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1827.953628][T18530] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 11:07:01 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:01 executing program 0: syz_clone(0x30000000, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0) 11:07:01 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) 11:07:01 executing program 5: r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) getpid() (async) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r2, 0x0, 0x4, &(0x7f0000000080)='+[*\x00'}, 0xb) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) [ 1827.961882][T18530] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1827.969690][T18530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1827.977497][T18530] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1827.985306][T18530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1827.993120][T18530] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1828.000937][T18530] 11:07:01 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 11:07:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x22000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:01 executing program 5: r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) (async) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r2, 0x0, 0x4, &(0x7f0000000080)='+[*\x00'}, 0xb) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) 11:07:01 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:01 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) 11:07:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x23000000, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:02 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1828.127798][T18554] FAULT_INJECTION: forcing a failure. [ 1828.127798][T18554] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.150101][T18554] CPU: 1 PID: 18554 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1828.160537][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1828.170435][T18554] Call Trace: [ 1828.173554][T18554] 11:07:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x2, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1828.176332][T18554] dump_stack_lvl+0x151/0x1b7 [ 1828.180861][T18554] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1828.186313][T18554] dump_stack+0x15/0x17 [ 1828.190309][T18554] should_fail+0x3c6/0x510 [ 1828.194560][T18554] __should_failslab+0xa4/0xe0 [ 1828.199160][T18554] ? anon_vma_clone+0x9a/0x500 [ 1828.203760][T18554] should_failslab+0x9/0x20 [ 1828.208101][T18554] slab_pre_alloc_hook+0x37/0xd0 [ 1828.213050][T18554] ? anon_vma_clone+0x9a/0x500 [ 1828.217654][T18554] kmem_cache_alloc+0x44/0x200 [ 1828.222256][T18554] anon_vma_clone+0x9a/0x500 [ 1828.226852][T18554] anon_vma_fork+0x91/0x4e0 [ 1828.231654][T18554] ? anon_vma_name+0x43/0x70 [ 1828.236061][T18554] ? vm_area_dup+0x17a/0x230 [ 1828.240578][T18554] dup_mm+0x8c5/0x12c0 [ 1828.244492][T18554] ? copy_init_mm+0x20/0x20 [ 1828.248826][T18554] copy_mm+0x107/0x1b0 [ 1828.252733][T18554] copy_process+0x12bc/0x3260 [ 1828.257240][T18554] ? proc_fail_nth_write+0x20b/0x290 [ 1828.262361][T18554] ? fsnotify_perm+0x6a/0x5d0 [ 1828.266872][T18554] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1828.271819][T18554] ? vfs_write+0x9ec/0x1110 [ 1828.276165][T18554] kernel_clone+0x21e/0x9e0 [ 1828.280499][T18554] ? file_end_write+0x1c0/0x1c0 [ 1828.285972][T18554] ? create_io_thread+0x1e0/0x1e0 [ 1828.290826][T18554] ? mutex_unlock+0xb2/0x1b0 [ 1828.295252][T18554] ? __mutex_lock_slowpath+0x10/0x10 [ 1828.300374][T18554] __x64_sys_clone+0x23f/0x290 [ 1828.304982][T18554] ? __do_sys_vfork+0x130/0x130 [ 1828.309668][T18554] ? ksys_write+0x260/0x2c0 [ 1828.314006][T18554] ? debug_smp_processor_id+0x17/0x20 [ 1828.319221][T18554] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1828.325122][T18554] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1828.330670][T18554] do_syscall_64+0x3d/0xb0 [ 1828.334920][T18554] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1828.340666][T18554] RIP: 0033:0x7f72394e6b29 [ 1828.344903][T18554] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1828.364342][T18554] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1828.372679][T18554] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1828.380487][T18554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1828.388309][T18554] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1828.396112][T18554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1828.403923][T18554] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1828.411740][T18554] 11:07:02 executing program 0: syz_clone(0x30000000, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0) 11:07:02 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 11:07:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x3, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:02 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) 11:07:02 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:02 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 11:07:02 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 11:07:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x4, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:02 executing program 3: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x14) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:02 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1828.636858][T18581] FAULT_INJECTION: forcing a failure. [ 1828.636858][T18581] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.668267][T18581] CPU: 1 PID: 18581 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 11:07:02 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) (async) 11:07:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x5, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1828.678705][T18581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1828.688609][T18581] Call Trace: [ 1828.691727][T18581] [ 1828.694500][T18581] dump_stack_lvl+0x151/0x1b7 [ 1828.699012][T18581] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1828.704493][T18581] dump_stack+0x15/0x17 [ 1828.708472][T18581] should_fail+0x3c6/0x510 [ 1828.712727][T18581] __should_failslab+0xa4/0xe0 [ 1828.717328][T18581] ? anon_vma_fork+0xf7/0x4e0 [ 1828.721837][T18581] should_failslab+0x9/0x20 [ 1828.726176][T18581] slab_pre_alloc_hook+0x37/0xd0 [ 1828.730951][T18581] ? anon_vma_fork+0xf7/0x4e0 [ 1828.735469][T18581] kmem_cache_alloc+0x44/0x200 [ 1828.740070][T18581] anon_vma_fork+0xf7/0x4e0 [ 1828.744405][T18581] ? anon_vma_name+0x43/0x70 [ 1828.748834][T18581] ? vm_area_dup+0x17a/0x230 [ 1828.753259][T18581] dup_mm+0x8c5/0x12c0 [ 1828.757169][T18581] ? copy_init_mm+0x20/0x20 [ 1828.761512][T18581] copy_mm+0x107/0x1b0 [ 1828.765413][T18581] copy_process+0x12bc/0x3260 [ 1828.769923][T18581] ? proc_fail_nth_write+0x20b/0x290 [ 1828.775047][T18581] ? fsnotify_perm+0x6a/0x5d0 [ 1828.779575][T18581] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1828.784509][T18581] ? vfs_write+0x9ec/0x1110 [ 1828.788845][T18581] kernel_clone+0x21e/0x9e0 [ 1828.793184][T18581] ? file_end_write+0x1c0/0x1c0 [ 1828.797871][T18581] ? create_io_thread+0x1e0/0x1e0 [ 1828.802729][T18581] ? mutex_unlock+0xb2/0x1b0 [ 1828.807158][T18581] ? __mutex_lock_slowpath+0x10/0x10 [ 1828.812278][T18581] __x64_sys_clone+0x23f/0x290 [ 1828.816878][T18581] ? __do_sys_vfork+0x130/0x130 [ 1828.821564][T18581] ? ksys_write+0x260/0x2c0 [ 1828.826005][T18581] ? debug_smp_processor_id+0x17/0x20 [ 1828.831199][T18581] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1828.837189][T18581] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1828.842656][T18581] do_syscall_64+0x3d/0xb0 [ 1828.846909][T18581] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1828.852642][T18581] RIP: 0033:0x7f72394e6b29 [ 1828.856980][T18581] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1828.876420][T18581] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1828.884669][T18581] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1828.892479][T18581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1828.900294][T18581] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1828.908102][T18581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1828.915916][T18581] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1828.924162][T18581] [ 1828.960040][T18581] ================================================================== [ 1828.967948][T18581] BUG: KASAN: use-after-free in vm_area_free_no_check+0x7e/0x130 [ 1828.975494][T18581] Write of size 4 at addr ffff888116121748 by task syz-executor.2/18581 [ 1828.983655][T18581] [ 1828.985820][T18581] CPU: 1 PID: 18581 Comm: syz-executor.2 Not tainted 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1828.996236][T18581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1829.006135][T18581] Call Trace: [ 1829.009254][T18581] [ 1829.012032][T18581] dump_stack_lvl+0x151/0x1b7 [ 1829.016549][T18581] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1829.022014][T18581] ? panic+0x751/0x751 [ 1829.025919][T18581] ? slab_free_freelist_hook+0xbd/0x190 [ 1829.031305][T18581] print_address_description+0x87/0x3b0 [ 1829.036804][T18581] kasan_report+0x179/0x1c0 [ 1829.047659][T18581] ? vm_area_free_no_check+0x7e/0x130 [ 1829.052868][T18581] ? vm_area_free_no_check+0x7e/0x130 [ 1829.058073][T18581] kasan_check_range+0x293/0x2a0 [ 1829.062849][T18581] __kasan_check_write+0x14/0x20 [ 1829.067623][T18581] vm_area_free_no_check+0x7e/0x130 [ 1829.072657][T18581] dup_mm+0xd73/0x12c0 [ 1829.076572][T18581] ? copy_init_mm+0x20/0x20 [ 1829.080900][T18581] copy_mm+0x107/0x1b0 [ 1829.084808][T18581] copy_process+0x12bc/0x3260 [ 1829.089322][T18581] ? proc_fail_nth_write+0x20b/0x290 [ 1829.094446][T18581] ? fsnotify_perm+0x6a/0x5d0 [ 1829.098952][T18581] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1829.103899][T18581] ? vfs_write+0x9ec/0x1110 [ 1829.108242][T18581] kernel_clone+0x21e/0x9e0 [ 1829.113187][T18581] ? file_end_write+0x1c0/0x1c0 [ 1829.117877][T18581] ? create_io_thread+0x1e0/0x1e0 [ 1829.122732][T18581] ? mutex_unlock+0xb2/0x1b0 [ 1829.127158][T18581] ? __mutex_lock_slowpath+0x10/0x10 [ 1829.132280][T18581] __x64_sys_clone+0x23f/0x290 [ 1829.136923][T18581] ? __do_sys_vfork+0x130/0x130 [ 1829.141570][T18581] ? ksys_write+0x260/0x2c0 [ 1829.145908][T18581] ? debug_smp_processor_id+0x17/0x20 [ 1829.151117][T18581] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1829.157019][T18581] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1829.162575][T18581] do_syscall_64+0x3d/0xb0 [ 1829.166827][T18581] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1829.172555][T18581] RIP: 0033:0x7f72394e6b29 [ 1829.176806][T18581] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1829.196334][T18581] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1829.204580][T18581] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1829.212396][T18581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1829.220201][T18581] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1829.228014][T18581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1829.235829][T18581] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1829.243642][T18581] [ 1829.246504][T18581] [ 1829.248798][T18581] Allocated by task 18554: [ 1829.253008][T18581] __kasan_slab_alloc+0xb1/0xe0 [ 1829.257706][T18581] slab_post_alloc_hook+0x53/0x2c0 [ 1829.262641][T18581] kmem_cache_alloc+0xf5/0x200 [ 1829.267240][T18581] vm_area_dup+0x26/0x230 [ 1829.271407][T18581] dup_mm+0x81b/0x12c0 [ 1829.275314][T18581] copy_mm+0x107/0x1b0 [ 1829.279219][T18581] copy_process+0x12bc/0x3260 [ 1829.283832][T18581] kernel_clone+0x21e/0x9e0 [ 1829.288159][T18581] __x64_sys_clone+0x23f/0x290 [ 1829.292761][T18581] do_syscall_64+0x3d/0xb0 [ 1829.297011][T18581] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1829.302742][T18581] [ 1829.304910][T18581] Freed by task 25: [ 1829.308555][T18581] kasan_set_track+0x4b/0x70 [ 1829.312992][T18581] kasan_set_free_info+0x23/0x40 [ 1829.317754][T18581] ____kasan_slab_free+0x126/0x160 [ 1829.322791][T18581] __kasan_slab_free+0x11/0x20 [ 1829.327402][T18581] slab_free_freelist_hook+0xbd/0x190 [ 1829.332599][T18581] kmem_cache_free+0x116/0x2e0 [ 1829.337368][T18581] __free_vm_area_struct+0x1c/0x20 [ 1829.342317][T18581] rcu_do_batch+0x57a/0xc10 [ 1829.346679][T18581] rcu_core+0x517/0x1020 [ 1829.350999][T18581] rcu_core_si+0x9/0x10 [ 1829.354990][T18581] __do_softirq+0x26d/0x5bf [ 1829.359337][T18581] 11:07:03 executing program 0: syz_clone(0x30000000, 0x0, 0x4100000000000000, 0x0, 0x0, 0x0) 11:07:03 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x6, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:03 executing program 5: syz_clone(0x32002700, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_clone(0x8000100, &(0x7f0000000040)="f6776725bc92d919b926b2fe0a4aeac41fcca99e5e196f7fa38bf809f950d3d68d81acdd18c28e4d4e487e04f6487a766fd5c62b3b9fd35fdc6ded8e4a36d8b9ab77d91d2d554bc6e3", 0x49, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8f07578e2118dfc45af148e6964b0dddee9f3b0f62850732bc35121ac1ec16566553932a87314a36011c8d049ac4f2f3237a539bb6032e56cfae2105b170e4b1e037") write$cgroup_pid(r0, &(0x7f00000001c0)=r1, 0x12) 11:07:03 executing program 3: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x14) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) (async) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1829.361501][T18581] Last potentially related work creation: [ 1829.367060][T18581] kasan_save_stack+0x3b/0x60 [ 1829.371578][T18581] __kasan_record_aux_stack+0xd3/0xf0 [ 1829.376889][T18581] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1829.383130][T18581] call_rcu+0x133/0x12a0 [ 1829.387192][T18581] vm_area_free_no_check+0xff/0x130 [ 1829.392240][T18581] vm_area_free+0x53/0x60 [ 1829.396391][T18581] exit_mmap+0x50d/0x6f0 [ 1829.400476][T18581] __mmput+0x95/0x310 [ 1829.404291][T18581] mmput+0x5b/0x170 [ 1829.407945][T18581] do_exit+0xbb4/0x2b60 [ 1829.411932][T18581] __ia32_sys_exit+0x0/0x40 [ 1829.416272][T18581] do_syscall_64+0x3d/0xb0 [ 1829.420523][T18581] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1829.426249][T18581] [ 1829.428428][T18581] Second to last potentially related work creation: [ 1829.434843][T18581] kasan_save_stack+0x3b/0x60 [ 1829.439444][T18581] __kasan_record_aux_stack+0xd3/0xf0 [ 1829.444652][T18581] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1829.450296][T18581] call_rcu+0x133/0x12a0 [ 1829.454368][T18581] vm_area_free_no_check+0xff/0x130 [ 1829.459405][T18581] vm_area_free+0x53/0x60 [ 1829.463574][T18581] exit_mmap+0x50d/0x6f0 [ 1829.467682][T18581] __mmput+0x95/0x310 [ 1829.471477][T18581] mmput+0x5b/0x170 [ 1829.475202][T18581] do_exit+0xbb4/0x2b60 [ 1829.479196][T18581] do_group_exit+0x141/0x310 [ 1829.483622][T18581] get_signal+0x7a3/0x1630 [ 1829.487876][T18581] arch_do_signal_or_restart+0xbd/0x1680 [ 1829.493355][T18581] exit_to_user_mode_loop+0xa0/0xe0 [ 1829.498372][T18581] exit_to_user_mode_prepare+0x5a/0xa0 [ 1829.503680][T18581] syscall_exit_to_user_mode+0x26/0x160 [ 1829.509050][T18581] do_syscall_64+0x49/0xb0 [ 1829.513477][T18581] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1829.519204][T18581] [ 1829.521372][T18581] The buggy address belongs to the object at ffff8881161216f0 [ 1829.521372][T18581] which belongs to the cache vm_area_struct of size 232 [ 1829.535534][T18581] The buggy address is located 88 bytes inside of [ 1829.535534][T18581] 232-byte region [ffff8881161216f0, ffff8881161217d8) [ 1829.548548][T18581] The buggy address belongs to the page: [ 1829.554123][T18581] page:ffffea0004584840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116121 [ 1829.564237][T18581] flags: 0x4000000000000200(slab|zone=1) [ 1829.569678][T18581] raw: 4000000000000200 dead000000000100 dead000000000122 ffff8881001b5080 [ 1829.578094][T18581] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 1829.586597][T18581] page dumped because: kasan: bad access detected [ 1829.592851][T18581] page_owner tracks the page as allocated [ 1829.598498][T18581] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 137, ts 5525934258, free_ts 0 [ 1829.613328][T18581] post_alloc_hook+0x1a3/0x1b0 [ 1829.617934][T18581] get_page_from_freelist+0x2eab/0x2f80 [ 1829.623315][T18581] __alloc_pages+0x386/0x7b0 [ 1829.627745][T18581] new_slab+0x92/0x490 [ 1829.631641][T18581] ___slab_alloc+0x39e/0x830 [ 1829.636066][T18581] __slab_alloc+0x4a/0x90 [ 1829.640243][T18581] kmem_cache_alloc+0x134/0x200 [ 1829.644936][T18581] vm_area_dup+0x26/0x230 [ 1829.649088][T18581] dup_mm+0x81b/0x12c0 [ 1829.653010][T18581] copy_mm+0x107/0x1b0 [ 1829.656902][T18581] copy_process+0x12bc/0x3260 [ 1829.661421][T18581] kernel_clone+0x21e/0x9e0 [ 1829.665752][T18581] __x64_sys_clone+0x23f/0x290 [ 1829.670351][T18581] do_syscall_64+0x3d/0xb0 [ 1829.674714][T18581] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1829.680444][T18581] page_owner free stack trace missing [ 1829.685665][T18581] [ 1829.687906][T18581] Memory state around the buggy address: [ 1829.693384][T18581] ffff888116121600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1829.701284][T18581] ffff888116121680: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fa fb 11:07:03 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 11:07:03 executing program 5: syz_clone(0x32002700, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() (async) getpid() r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_clone(0x8000100, &(0x7f0000000040)="f6776725bc92d919b926b2fe0a4aeac41fcca99e5e196f7fa38bf809f950d3d68d81acdd18c28e4d4e487e04f6487a766fd5c62b3b9fd35fdc6ded8e4a36d8b9ab77d91d2d554bc6e3", 0x49, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8f07578e2118dfc45af148e6964b0dddee9f3b0f62850732bc35121ac1ec16566553932a87314a36011c8d049ac4f2f3237a539bb6032e56cfae2105b170e4b1e037") write$cgroup_pid(r0, &(0x7f00000001c0)=r1, 0x12) 11:07:03 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x7, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1829.709185][T18581] >ffff888116121700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1829.717072][T18581] ^ [ 1829.723328][T18581] ffff888116121780: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 1829.731461][T18581] ffff888116121800: fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1829.739359][T18581] ================================================================== [ 1829.747255][T18581] Disabling lock debugging due to kernel taint 11:07:03 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x8, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:03 executing program 5: syz_clone(0x32002700, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_clone(0x8000100, &(0x7f0000000040)="f6776725bc92d919b926b2fe0a4aeac41fcca99e5e196f7fa38bf809f950d3d68d81acdd18c28e4d4e487e04f6487a766fd5c62b3b9fd35fdc6ded8e4a36d8b9ab77d91d2d554bc6e3", 0x49, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="8f07578e2118dfc45af148e6964b0dddee9f3b0f62850732bc35121ac1ec16566553932a87314a36011c8d049ac4f2f3237a539bb6032e56cfae2105b170e4b1e037") write$cgroup_pid(r0, &(0x7f00000001c0)=r1, 0x12) [ 1829.801409][T18624] FAULT_INJECTION: forcing a failure. [ 1829.801409][T18624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1829.849965][T18624] CPU: 1 PID: 18624 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1829.861842][T18624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1829.871699][T18624] Call Trace: [ 1829.874870][T18624] [ 1829.877596][T18624] dump_stack_lvl+0x151/0x1b7 [ 1829.882115][T18624] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1829.887577][T18624] dump_stack+0x15/0x17 [ 1829.891567][T18624] should_fail+0x3c6/0x510 [ 1829.895824][T18624] should_fail_alloc_page+0x5a/0x80 [ 1829.900952][T18624] __alloc_pages+0x1e6/0x7b0 [ 1829.905409][T18624] ? zone_watermark_fast+0x220/0x220 [ 1829.910500][T18624] ? is_bpf_text_address+0x172/0x190 [ 1829.915619][T18624] ? stack_trace_save+0x1c0/0x1c0 [ 1829.920578][T18624] ? __kernel_text_address+0x9b/0x110 [ 1829.925790][T18624] pte_alloc_one+0x73/0x1b0 [ 1829.930130][T18624] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1829.935169][T18624] __pte_alloc+0x86/0x350 [ 1829.939335][T18624] ? free_pgtables+0x280/0x280 [ 1829.943931][T18624] ? _raw_spin_lock+0xa4/0x1b0 [ 1829.948528][T18624] ? _raw_spin_trylock_bh+0x190/0x190 [ 1829.953735][T18624] ? __stack_depot_save+0x34/0x470 [ 1829.958684][T18624] copy_page_range+0x28a8/0x2f90 [ 1829.963455][T18624] ? __kasan_slab_alloc+0xb1/0xe0 [ 1829.968314][T18624] ? slab_post_alloc_hook+0x53/0x2c0 [ 1829.973440][T18624] ? __x64_sys_clone+0x23f/0x290 [ 1829.978223][T18624] ? pfn_valid+0x1e0/0x1e0 [ 1829.982467][T18624] ? rwsem_write_trylock+0x15b/0x290 [ 1829.987588][T18624] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1829.993838][T18624] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1829.999500][T18624] ? __rb_insert_augmented+0x5de/0x610 [ 1830.004788][T18624] dup_mm+0xadc/0x12c0 [ 1830.008696][T18624] ? copy_init_mm+0x20/0x20 [ 1830.013036][T18624] copy_mm+0x107/0x1b0 [ 1830.016942][T18624] copy_process+0x12bc/0x3260 [ 1830.021464][T18624] ? proc_fail_nth_write+0x20b/0x290 [ 1830.026572][T18624] ? fsnotify_perm+0x6a/0x5d0 [ 1830.031084][T18624] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1830.036029][T18624] ? vfs_write+0x9ec/0x1110 [ 1830.040374][T18624] kernel_clone+0x21e/0x9e0 [ 1830.044799][T18624] ? file_end_write+0x1c0/0x1c0 [ 1830.049485][T18624] ? create_io_thread+0x1e0/0x1e0 [ 1830.054348][T18624] ? mutex_unlock+0xb2/0x1b0 [ 1830.058776][T18624] ? __mutex_lock_slowpath+0x10/0x10 [ 1830.063896][T18624] __x64_sys_clone+0x23f/0x290 [ 1830.068494][T18624] ? __do_sys_vfork+0x130/0x130 [ 1830.073178][T18624] ? ksys_write+0x260/0x2c0 [ 1830.077519][T18624] ? debug_smp_processor_id+0x17/0x20 [ 1830.082724][T18624] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1830.088628][T18624] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1830.094104][T18624] do_syscall_64+0x3d/0xb0 [ 1830.098353][T18624] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1830.104074][T18624] RIP: 0033:0x7f72394e6b29 [ 1830.108329][T18624] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1830.127771][T18624] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1830.136022][T18624] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:07:04 executing program 0: syz_clone(0x30000000, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0) 11:07:04 executing program 3: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x14) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x9, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:04 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:04 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1830.143831][T18624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1830.151646][T18624] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1830.159453][T18624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1830.167264][T18624] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1830.175083][T18624] 11:07:04 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 11:07:04 executing program 5: r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa0004000, &(0x7f0000000040)="6a22462b92c99372e087a8b228572dc16e5f5d2df6f1adc23330ecff63fcef5e9c4d0b513beb5857de9fc32a7d8c3354de04e0b34c4c20470e93757276ca873a4511edd622ec150cc0fc6e0b0d5ea62fe7d1d3eb2290f32566d5fa", 0x5b, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) 11:07:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xa, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:04 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) 11:07:04 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:04 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) 11:07:04 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1830.428965][T18659] FAULT_INJECTION: forcing a failure. [ 1830.428965][T18659] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1830.460075][T18659] CPU: 0 PID: 18659 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1830.471901][T18659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1830.481797][T18659] Call Trace: [ 1830.484921][T18659] [ 1830.487694][T18659] dump_stack_lvl+0x151/0x1b7 [ 1830.492210][T18659] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1830.497680][T18659] ? __alloc_pages+0x7b0/0x7b0 [ 1830.502278][T18659] dump_stack+0x15/0x17 [ 1830.506273][T18659] should_fail+0x3c6/0x510 [ 1830.510525][T18659] should_fail_alloc_page+0x5a/0x80 [ 1830.515558][T18659] __alloc_pages+0x1e6/0x7b0 [ 1830.519986][T18659] ? zone_watermark_fast+0x220/0x220 [ 1830.525104][T18659] ? __this_cpu_preempt_check+0x13/0x20 [ 1830.530483][T18659] ? __mod_node_page_state+0xac/0xf0 [ 1830.535608][T18659] pte_alloc_one+0x73/0x1b0 [ 1830.539945][T18659] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1830.545070][T18659] __pte_alloc+0x86/0x350 [ 1830.549238][T18659] ? free_pgtables+0x280/0x280 [ 1830.553850][T18659] ? _raw_spin_lock+0xa4/0x1b0 [ 1830.558580][T18659] ? __kasan_check_write+0x14/0x20 [ 1830.563528][T18659] copy_page_range+0x28a8/0x2f90 [ 1830.568294][T18659] ? __kasan_slab_alloc+0xb1/0xe0 [ 1830.573158][T18659] ? slab_post_alloc_hook+0x53/0x2c0 [ 1830.578283][T18659] ? __x64_sys_clone+0x23f/0x290 [ 1830.583062][T18659] ? pfn_valid+0x1e0/0x1e0 [ 1830.587303][T18659] ? rwsem_write_trylock+0x15b/0x290 [ 1830.592531][T18659] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1830.598760][T18659] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1830.604405][T18659] ? __rb_insert_augmented+0x5de/0x610 [ 1830.609730][T18659] dup_mm+0xadc/0x12c0 [ 1830.613652][T18659] ? copy_init_mm+0x20/0x20 [ 1830.617944][T18659] copy_mm+0x107/0x1b0 [ 1830.621952][T18659] copy_process+0x12bc/0x3260 [ 1830.626552][T18659] ? proc_fail_nth_write+0x20b/0x290 [ 1830.631673][T18659] ? fsnotify_perm+0x6a/0x5d0 [ 1830.636185][T18659] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1830.641129][T18659] ? vfs_write+0x9ec/0x1110 [ 1830.645475][T18659] kernel_clone+0x21e/0x9e0 [ 1830.649809][T18659] ? file_end_write+0x1c0/0x1c0 [ 1830.654495][T18659] ? create_io_thread+0x1e0/0x1e0 [ 1830.659356][T18659] ? mutex_unlock+0xb2/0x1b0 [ 1830.663793][T18659] ? __mutex_lock_slowpath+0x10/0x10 [ 1830.668918][T18659] __x64_sys_clone+0x23f/0x290 [ 1830.673509][T18659] ? __do_sys_vfork+0x130/0x130 [ 1830.678189][T18659] ? ksys_write+0x260/0x2c0 [ 1830.682548][T18659] ? debug_smp_processor_id+0x17/0x20 [ 1830.687786][T18659] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1830.693644][T18659] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1830.699201][T18659] do_syscall_64+0x3d/0xb0 [ 1830.703453][T18659] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1830.709181][T18659] RIP: 0033:0x7f72394e6b29 [ 1830.713437][T18659] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1830.732975][T18659] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1830.741331][T18659] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1830.749142][T18659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1830.757053][T18659] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1830.764851][T18659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1830.772662][T18659] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 11:07:04 executing program 0: syz_clone(0x30000000, 0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0) 11:07:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xb, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:04 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:04 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) 11:07:04 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 1830.780479][T18659] 11:07:04 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) [ 1830.899033][T18675] FAULT_INJECTION: forcing a failure. [ 1830.899033][T18675] name failslab, interval 1, probability 0, space 0, times 0 [ 1830.922470][T18675] CPU: 0 PID: 18675 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1830.934297][T18675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1830.944189][T18675] Call Trace: [ 1830.947315][T18675] [ 1830.950093][T18675] dump_stack_lvl+0x151/0x1b7 [ 1830.954607][T18675] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1830.960164][T18675] ? avc_denied+0x1b0/0x1b0 [ 1830.964506][T18675] dump_stack+0x15/0x17 [ 1830.968487][T18675] should_fail+0x3c6/0x510 [ 1830.972743][T18675] __should_failslab+0xa4/0xe0 [ 1830.977342][T18675] ? vm_area_dup+0x26/0x230 [ 1830.981770][T18675] should_failslab+0x9/0x20 [ 1830.986107][T18675] slab_pre_alloc_hook+0x37/0xd0 [ 1830.990987][T18675] ? vm_area_dup+0x26/0x230 [ 1830.995321][T18675] kmem_cache_alloc+0x44/0x200 [ 1830.999930][T18675] vm_area_dup+0x26/0x230 [ 1831.004085][T18675] dup_mm+0x81b/0x12c0 [ 1831.007997][T18675] ? copy_init_mm+0x20/0x20 [ 1831.012332][T18675] copy_mm+0x107/0x1b0 [ 1831.016236][T18675] copy_process+0x12bc/0x3260 [ 1831.020753][T18675] ? proc_fail_nth_write+0x20b/0x290 [ 1831.025875][T18675] ? fsnotify_perm+0x6a/0x5d0 [ 1831.030389][T18675] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1831.035331][T18675] ? vfs_write+0x9ec/0x1110 [ 1831.039679][T18675] kernel_clone+0x21e/0x9e0 [ 1831.044010][T18675] ? file_end_write+0x1c0/0x1c0 [ 1831.048786][T18675] ? create_io_thread+0x1e0/0x1e0 [ 1831.053647][T18675] ? mutex_unlock+0xb2/0x1b0 [ 1831.058075][T18675] ? __mutex_lock_slowpath+0x10/0x10 [ 1831.063195][T18675] __x64_sys_clone+0x23f/0x290 [ 1831.067795][T18675] ? __do_sys_vfork+0x130/0x130 [ 1831.072479][T18675] ? ksys_write+0x260/0x2c0 [ 1831.076819][T18675] ? debug_smp_processor_id+0x17/0x20 [ 1831.082026][T18675] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1831.087930][T18675] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1831.093402][T18675] do_syscall_64+0x3d/0xb0 [ 1831.097652][T18675] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1831.103387][T18675] RIP: 0033:0x7f72394e6b29 [ 1831.107634][T18675] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1831.127251][T18675] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1831.135510][T18675] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:07:05 executing program 5: r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa0004000, &(0x7f0000000040)="6a22462b92c99372e087a8b228572dc16e5f5d2df6f1adc23330ecff63fcef5e9c4d0b513beb5857de9fc32a7d8c3354de04e0b34c4c20470e93757276ca873a4511edd622ec150cc0fc6e0b0d5ea62fe7d1d3eb2290f32566d5fa", 0x5b, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="53e3eff7c6e9d6aa88d6b6235a0413779197af199c5d270af500a7352ce6653352254b54863b4b705abf379f1be32728f742d1d021ee138a82702e6f30124c47da42c787ecd8a6dc7878d0d1a16a8f2cf638d16212d6c5588b89da0ced7b6c25a1c7edd42739ce792601d67e6572a2dc25ee2355d60a8f124c7de0d3c5f6a0ec163f32697bb77313b2bc41da9cda5397eb54e047b7c19a7114a112b319cc80ae247b65ab72d02d8a3effd0af85577fde273d9667d747e753d0eb9e2295edf0106fb192907cd0af2f9a4a55c78e9e78734cc3878e014e6cdf7d88203477f27e6e98eb1d79a8e06bb5616bdd30ebcf92df0771690a741a338209adca225a07") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xa0004000, &(0x7f0000000040)="6a22462b92c99372e087a8b228572dc16e5f5d2df6f1adc23330ecff63fcef5e9c4d0b513beb5857de9fc32a7d8c3354de04e0b34c4c20470e93757276ca873a4511edd622ec150cc0fc6e0b0d5ea62fe7d1d3eb2290f32566d5fa", 0x5b, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="53e3eff7c6e9d6aa88d6b6235a0413779197af199c5d270af500a7352ce6653352254b54863b4b705abf379f1be32728f742d1d021ee138a82702e6f30124c47da42c787ecd8a6dc7878d0d1a16a8f2cf638d16212d6c5588b89da0ced7b6c25a1c7edd42739ce792601d67e6572a2dc25ee2355d60a8f124c7de0d3c5f6a0ec163f32697bb77313b2bc41da9cda5397eb54e047b7c19a7114a112b319cc80ae247b65ab72d02d8a3effd0af85577fde273d9667d747e753d0eb9e2295edf0106fb192907cd0af2f9a4a55c78e9e78734cc3878e014e6cdf7d88203477f27e6e98eb1d79a8e06bb5616bdd30ebcf92df0771690a741a338209adca225a07") (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) (async) 11:07:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xc, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:05 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:05 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 11:07:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xd, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:05 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 1831.143310][T18675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1831.151120][T18675] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1831.159016][T18675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1831.166826][T18675] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1831.174738][T18675] 11:07:05 executing program 0: syz_clone(0x30000000, 0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0) 11:07:05 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xe, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:05 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe369, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xf, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:05 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) [ 1831.411533][T18707] FAULT_INJECTION: forcing a failure. [ 1831.411533][T18707] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.425449][T18707] CPU: 0 PID: 18707 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1831.437271][T18707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1831.447597][T18707] Call Trace: [ 1831.450721][T18707] [ 1831.453492][T18707] dump_stack_lvl+0x151/0x1b7 [ 1831.458009][T18707] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1831.463479][T18707] dump_stack+0x15/0x17 [ 1831.467468][T18707] should_fail+0x3c6/0x510 [ 1831.471732][T18707] __should_failslab+0xa4/0xe0 [ 1831.476319][T18707] ? anon_vma_clone+0x9a/0x500 [ 1831.480926][T18707] should_failslab+0x9/0x20 [ 1831.485346][T18707] slab_pre_alloc_hook+0x37/0xd0 [ 1831.490122][T18707] ? anon_vma_clone+0x9a/0x500 [ 1831.494722][T18707] kmem_cache_alloc+0x44/0x200 [ 1831.499323][T18707] anon_vma_clone+0x9a/0x500 [ 1831.503749][T18707] anon_vma_fork+0x91/0x4e0 [ 1831.508090][T18707] ? anon_vma_name+0x4c/0x70 [ 1831.512517][T18707] ? vm_area_dup+0x17a/0x230 [ 1831.516943][T18707] dup_mm+0x8c5/0x12c0 [ 1831.520850][T18707] ? copy_init_mm+0x20/0x20 [ 1831.525189][T18707] copy_mm+0x107/0x1b0 [ 1831.529093][T18707] copy_process+0x12bc/0x3260 [ 1831.533626][T18707] ? proc_fail_nth_write+0x20b/0x290 [ 1831.539247][T18707] ? fsnotify_perm+0x6a/0x5d0 [ 1831.543851][T18707] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1831.548792][T18707] ? vfs_write+0x9ec/0x1110 [ 1831.553140][T18707] kernel_clone+0x21e/0x9e0 [ 1831.558441][T18707] ? file_end_write+0x1c0/0x1c0 [ 1831.563133][T18707] ? create_io_thread+0x1e0/0x1e0 [ 1831.568074][T18707] ? mutex_unlock+0xb2/0x1b0 [ 1831.572502][T18707] ? __mutex_lock_slowpath+0x10/0x10 [ 1831.577623][T18707] __x64_sys_clone+0x23f/0x290 [ 1831.582225][T18707] ? __do_sys_vfork+0x130/0x130 [ 1831.586910][T18707] ? ksys_write+0x260/0x2c0 [ 1831.591254][T18707] ? debug_smp_processor_id+0x17/0x20 [ 1831.596457][T18707] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1831.602365][T18707] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1831.607829][T18707] do_syscall_64+0x3d/0xb0 [ 1831.612081][T18707] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1831.617811][T18707] RIP: 0033:0x7f72394e6b29 [ 1831.622070][T18707] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1831.641502][T18707] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1831.649752][T18707] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1831.657564][T18707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1831.665373][T18707] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1831.673182][T18707] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1831.681004][T18707] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1831.688822][T18707] 11:07:05 executing program 5: r0 = syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa0004000, &(0x7f0000000040)="6a22462b92c99372e087a8b228572dc16e5f5d2df6f1adc23330ecff63fcef5e9c4d0b513beb5857de9fc32a7d8c3354de04e0b34c4c20470e93757276ca873a4511edd622ec150cc0fc6e0b0d5ea62fe7d1d3eb2290f32566d5fa", 0x5b, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) 11:07:05 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe369, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:05 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x10, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:05 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 11:07:05 executing program 0: syz_clone(0x30000000, 0x0, 0xff0f010000000000, 0x0, 0x0, 0x0) 11:07:05 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:05 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe369, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1832.073385][T18717] FAULT_INJECTION: forcing a failure. [ 1832.073385][T18717] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.101888][T18717] CPU: 0 PID: 18717 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1832.113717][T18717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1832.123700][T18717] Call Trace: [ 1832.126822][T18717] [ 1832.129596][T18717] dump_stack_lvl+0x151/0x1b7 [ 1832.134109][T18717] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1832.139583][T18717] dump_stack+0x15/0x17 [ 1832.143579][T18717] should_fail+0x3c6/0x510 [ 1832.149564][T18717] __should_failslab+0xa4/0xe0 [ 1832.154160][T18717] ? anon_vma_clone+0x9a/0x500 [ 1832.158755][T18717] should_failslab+0x9/0x20 [ 1832.163108][T18717] slab_pre_alloc_hook+0x37/0xd0 [ 1832.167869][T18717] ? anon_vma_clone+0x9a/0x500 11:07:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x11, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x12, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1832.172474][T18717] kmem_cache_alloc+0x44/0x200 [ 1832.177072][T18717] anon_vma_clone+0x9a/0x500 [ 1832.181498][T18717] anon_vma_fork+0x91/0x4e0 [ 1832.185842][T18717] ? anon_vma_name+0x43/0x70 [ 1832.190263][T18717] ? vm_area_dup+0x17a/0x230 [ 1832.194688][T18717] dup_mm+0x8c5/0x12c0 [ 1832.198609][T18717] ? copy_init_mm+0x20/0x20 [ 1832.202942][T18717] copy_mm+0x107/0x1b0 [ 1832.206842][T18717] copy_process+0x12bc/0x3260 [ 1832.211360][T18717] ? proc_fail_nth_write+0x20b/0x290 [ 1832.216478][T18717] ? fsnotify_perm+0x6a/0x5d0 [ 1832.221000][T18717] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1832.225941][T18717] ? vfs_write+0x9ec/0x1110 [ 1832.230281][T18717] kernel_clone+0x21e/0x9e0 [ 1832.234614][T18717] ? file_end_write+0x1c0/0x1c0 [ 1832.239312][T18717] ? create_io_thread+0x1e0/0x1e0 [ 1832.244159][T18717] ? mutex_unlock+0xb2/0x1b0 [ 1832.248588][T18717] ? __mutex_lock_slowpath+0x10/0x10 [ 1832.253711][T18717] __x64_sys_clone+0x23f/0x290 [ 1832.258314][T18717] ? __do_sys_vfork+0x130/0x130 [ 1832.262999][T18717] ? ksys_write+0x260/0x2c0 [ 1832.267352][T18717] ? debug_smp_processor_id+0x17/0x20 11:07:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x13, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1832.272543][T18717] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1832.278448][T18717] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1832.283918][T18717] do_syscall_64+0x3d/0xb0 [ 1832.288167][T18717] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1832.293893][T18717] RIP: 0033:0x7f72394e6b29 [ 1832.298147][T18717] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:07:06 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1832.317593][T18717] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1832.325846][T18717] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1832.333652][T18717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1832.341462][T18717] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1832.349273][T18717] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1832.357082][T18717] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1832.364900][T18717] 11:07:06 executing program 5: r0 = syz_clone(0x3000a200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x14402, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="010004110180c20000010000000000000180c2000003aaaaaaaaaabb"]) close(r1) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x2, 0x3, 0x9, 0x0, 0x8000, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x2028, 0x24, 0x800, 0x7, 0x8, 0x6, 0x0, 0x0, 0x9, 0x0, 0x4}, r0, 0xf, 0xffffffffffffffff, 0xcc38c3a77eb521a4) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) 11:07:06 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 11:07:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x14, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:06 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x1}, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x9e7, 0x10}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, 0xffffffffffffffff, 0x24}, 0x10) 11:07:06 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:06 executing program 0: syz_clone(0x30000000, 0x0, 0xffff030000000000, 0x0, 0x0, 0x0) 11:07:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x15, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:06 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1832.958353][T18742] FAULT_INJECTION: forcing a failure. [ 1832.958353][T18742] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.002846][T18742] CPU: 1 PID: 18742 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1833.014696][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1833.024573][T18742] Call Trace: [ 1833.027692][T18742] [ 1833.030474][T18742] dump_stack_lvl+0x151/0x1b7 [ 1833.034998][T18742] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1833.040459][T18742] dump_stack+0x15/0x17 [ 1833.044449][T18742] should_fail+0x3c6/0x510 [ 1833.048705][T18742] __should_failslab+0xa4/0xe0 [ 1833.053297][T18742] ? anon_vma_clone+0x9a/0x500 [ 1833.057901][T18742] should_failslab+0x9/0x20 [ 1833.062243][T18742] slab_pre_alloc_hook+0x37/0xd0 [ 1833.067013][T18742] ? anon_vma_clone+0x9a/0x500 [ 1833.071615][T18742] kmem_cache_alloc+0x44/0x200 [ 1833.076216][T18742] anon_vma_clone+0x9a/0x500 [ 1833.080638][T18742] anon_vma_fork+0x91/0x4e0 [ 1833.084978][T18742] ? anon_vma_name+0x4c/0x70 [ 1833.089403][T18742] ? vm_area_dup+0x17a/0x230 [ 1833.093920][T18742] dup_mm+0x8c5/0x12c0 [ 1833.097829][T18742] ? copy_init_mm+0x20/0x20 [ 1833.102164][T18742] copy_mm+0x107/0x1b0 [ 1833.106068][T18742] copy_process+0x12bc/0x3260 [ 1833.110588][T18742] ? proc_fail_nth_write+0x20b/0x290 [ 1833.115705][T18742] ? fsnotify_perm+0x6a/0x5d0 [ 1833.120220][T18742] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1833.125173][T18742] ? vfs_write+0x9ec/0x1110 [ 1833.129505][T18742] kernel_clone+0x21e/0x9e0 [ 1833.133845][T18742] ? file_end_write+0x1c0/0x1c0 [ 1833.138533][T18742] ? create_io_thread+0x1e0/0x1e0 [ 1833.143655][T18742] ? mutex_unlock+0xb2/0x1b0 [ 1833.148078][T18742] ? __mutex_lock_slowpath+0x10/0x10 [ 1833.153198][T18742] __x64_sys_clone+0x23f/0x290 [ 1833.157800][T18742] ? __do_sys_vfork+0x130/0x130 [ 1833.162484][T18742] ? ksys_write+0x260/0x2c0 [ 1833.166827][T18742] ? debug_smp_processor_id+0x17/0x20 [ 1833.172466][T18742] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1833.178372][T18742] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1833.183838][T18742] do_syscall_64+0x3d/0xb0 [ 1833.188092][T18742] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1833.193825][T18742] RIP: 0033:0x7f72394e6b29 [ 1833.198069][T18742] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1833.217516][T18742] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1833.225769][T18742] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1833.233577][T18742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1833.241388][T18742] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 11:07:07 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x1}, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x9e7, 0x10}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, 0xffffffffffffffff, 0x24}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x1}, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x9e7, 0x10}, 0xc) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, 0xffffffffffffffff, 0x24}, 0x10) (async) 11:07:07 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x16, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:07 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1833.249195][T18742] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1833.257449][T18742] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1833.265443][T18742] 11:07:08 executing program 5: r0 = syz_clone(0x3000a200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)=r1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x14402, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="010004110180c20000010000000000000180c2000003aaaaaaaaaabb"]) (async, rerun: 32) close(r1) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x2, 0x3, 0x9, 0x0, 0x8000, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x2028, 0x24, 0x800, 0x7, 0x8, 0x6, 0x0, 0x0, 0x9, 0x0, 0x4}, r0, 0xf, 0xffffffffffffffff, 0xcc38c3a77eb521a4) (async) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) 11:07:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x17, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:08 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:08 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x1}, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x9e7, 0x10}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, 0xffffffffffffffff, 0x24}, 0x10) 11:07:08 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 11:07:08 executing program 0: syz_clone(0x30000000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 11:07:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x18, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x19, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:08 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x22}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) 11:07:08 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1a, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1834.563852][T18778] FAULT_INJECTION: forcing a failure. [ 1834.563852][T18778] name failslab, interval 1, probability 0, space 0, times 0 11:07:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1b, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1834.636510][T18778] CPU: 0 PID: 18778 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1834.648348][T18778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1834.658355][T18778] Call Trace: [ 1834.661472][T18778] [ 1834.664241][T18778] dump_stack_lvl+0x151/0x1b7 [ 1834.668852][T18778] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1834.674311][T18778] dump_stack+0x15/0x17 [ 1834.678300][T18778] should_fail+0x3c6/0x510 [ 1834.682555][T18778] __should_failslab+0xa4/0xe0 [ 1834.687157][T18778] ? anon_vma_fork+0xf7/0x4e0 [ 1834.691664][T18778] should_failslab+0x9/0x20 [ 1834.696003][T18778] slab_pre_alloc_hook+0x37/0xd0 [ 1834.700790][T18778] ? anon_vma_fork+0xf7/0x4e0 [ 1834.705291][T18778] kmem_cache_alloc+0x44/0x200 [ 1834.709895][T18778] anon_vma_fork+0xf7/0x4e0 [ 1834.714229][T18778] ? anon_vma_name+0x4c/0x70 [ 1834.718657][T18778] ? vm_area_dup+0x17a/0x230 [ 1834.723096][T18778] dup_mm+0x8c5/0x12c0 [ 1834.726991][T18778] ? copy_init_mm+0x20/0x20 [ 1834.731334][T18778] copy_mm+0x107/0x1b0 [ 1834.735238][T18778] copy_process+0x12bc/0x3260 [ 1834.739749][T18778] ? proc_fail_nth_write+0x20b/0x290 [ 1834.744879][T18778] ? fsnotify_perm+0x6a/0x5d0 [ 1834.749520][T18778] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1834.754417][T18778] ? vfs_write+0x9ec/0x1110 [ 1834.758759][T18778] kernel_clone+0x21e/0x9e0 [ 1834.763096][T18778] ? file_end_write+0x1c0/0x1c0 [ 1834.767782][T18778] ? create_io_thread+0x1e0/0x1e0 [ 1834.773170][T18778] ? mutex_unlock+0xb2/0x1b0 [ 1834.777717][T18778] ? __mutex_lock_slowpath+0x10/0x10 [ 1834.782849][T18778] __x64_sys_clone+0x23f/0x290 [ 1834.787436][T18778] ? __do_sys_vfork+0x130/0x130 [ 1834.792123][T18778] ? ksys_write+0x260/0x2c0 [ 1834.796460][T18778] ? debug_smp_processor_id+0x17/0x20 [ 1834.801817][T18778] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1834.807708][T18778] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1834.813269][T18778] do_syscall_64+0x3d/0xb0 [ 1834.817519][T18778] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1834.823244][T18778] RIP: 0033:0x7f72394e6b29 [ 1834.827496][T18778] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1834.847200][T18778] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1834.855545][T18778] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1834.863355][T18778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1834.871164][T18778] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1834.878982][T18778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 11:07:08 executing program 5: r0 = syz_clone(0x3000a200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000000c0)=r1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x14402, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="010004110180c20000010000000000000180c2000003aaaaaaaaaabb"]) (async) close(r1) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x2, 0x3, 0x9, 0x0, 0x8000, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x2028, 0x24, 0x800, 0x7, 0x8, 0x6, 0x0, 0x0, 0x9, 0x0, 0x4}, r0, 0xf, 0xffffffffffffffff, 0xcc38c3a77eb521a4) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) 11:07:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1c, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:08 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:08 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x22}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x22}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) (async) [ 1834.886787][T18778] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1834.894604][T18778] 11:07:08 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 11:07:08 executing program 0: syz_clone(0x71067d00, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x1e, 0x0, 0x0, 0x0}, 0x20) syz_clone(0x50843180, &(0x7f0000000000)="246f5c69cbedc6bff80ce563da87be0c34d4140e3b3e5115cbe4084dc35a5bf0f951a782e8d13bead1fd92d09c9c6eaf406641cc2067376f0c546393555bd0dbe8e35539a7cd1638e444d683e09dcefec8ef34cea81476274b45be483269d0b01396d803ff7d287c7caa07796613539c9d28abbca59c842bb20fb9e7eadaf69f3a4f51b40587c5931059319130ec2c66159f54c8e2e8c611ef1f008d3b5ab6987610daaba75456e9889eac43d1b61f759caca4fa0c55ce67350edee193d48971", 0xc0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") 11:07:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1d, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:08 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:08 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x22}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) 11:07:08 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() [ 1835.067847][T18818] FAULT_INJECTION: forcing a failure. [ 1835.067847][T18818] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.090027][T18818] CPU: 0 PID: 18818 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1835.101863][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1835.111752][T18818] Call Trace: [ 1835.114895][T18818] [ 1835.117739][T18818] dump_stack_lvl+0x151/0x1b7 [ 1835.122519][T18818] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1835.127985][T18818] dump_stack+0x15/0x17 [ 1835.132003][T18818] should_fail+0x3c6/0x510 [ 1835.136318][T18818] __should_failslab+0xa4/0xe0 [ 1835.141049][T18818] ? anon_vma_fork+0x1df/0x4e0 [ 1835.145864][T18818] should_failslab+0x9/0x20 [ 1835.150373][T18818] slab_pre_alloc_hook+0x37/0xd0 [ 1835.155327][T18818] ? anon_vma_fork+0x1df/0x4e0 [ 1835.160108][T18818] kmem_cache_alloc+0x44/0x200 [ 1835.164892][T18818] anon_vma_fork+0x1df/0x4e0 [ 1835.169419][T18818] dup_mm+0x8c5/0x12c0 [ 1835.173711][T18818] ? copy_init_mm+0x20/0x20 [ 1835.178250][T18818] copy_mm+0x107/0x1b0 [ 1835.182411][T18818] copy_process+0x12bc/0x3260 [ 1835.187201][T18818] ? proc_fail_nth_write+0x20b/0x290 [ 1835.192319][T18818] ? fsnotify_perm+0x6a/0x5d0 [ 1835.196942][T18818] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1835.202460][T18818] ? vfs_write+0x9ec/0x1110 [ 1835.206888][T18818] kernel_clone+0x21e/0x9e0 [ 1835.211225][T18818] ? file_end_write+0x1c0/0x1c0 [ 1835.216086][T18818] ? create_io_thread+0x1e0/0x1e0 [ 1835.221030][T18818] ? mutex_unlock+0xb2/0x1b0 [ 1835.225460][T18818] ? __mutex_lock_slowpath+0x10/0x10 [ 1835.230581][T18818] __x64_sys_clone+0x23f/0x290 [ 1835.235180][T18818] ? __do_sys_vfork+0x130/0x130 [ 1835.239863][T18818] ? ksys_write+0x260/0x2c0 [ 1835.244212][T18818] ? debug_smp_processor_id+0x17/0x20 [ 1835.249412][T18818] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1835.255314][T18818] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1835.260789][T18818] do_syscall_64+0x3d/0xb0 11:07:09 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:09 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() [ 1835.265043][T18818] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1835.270767][T18818] RIP: 0033:0x7f72394e6b29 [ 1835.275018][T18818] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1835.294459][T18818] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1835.303746][T18818] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:07:09 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1e, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:09 executing program 5: syz_clone(0x30000700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() 11:07:09 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xff, 0x8, 0x6, 0xc4, 0x0, 0x81, 0x1041, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x1, 0x7fff, 0x52, 0x7, 0x60, 0x0, 0x6, 0x0, 0x3}) 11:07:09 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) [ 1835.311817][T18818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1835.319642][T18818] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1835.327442][T18818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1835.335254][T18818] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1835.343074][T18818] [ 1835.403550][T18839] FAULT_INJECTION: forcing a failure. [ 1835.403550][T18839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1835.440295][T18839] CPU: 0 PID: 18839 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1835.452122][T18839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1835.462028][T18839] Call Trace: [ 1835.465138][T18839] [ 1835.467911][T18839] dump_stack_lvl+0x151/0x1b7 [ 1835.472428][T18839] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1835.477899][T18839] dump_stack+0x15/0x17 [ 1835.481892][T18839] should_fail+0x3c6/0x510 [ 1835.486238][T18839] should_fail_alloc_page+0x5a/0x80 [ 1835.491286][T18839] __alloc_pages+0x1e6/0x7b0 [ 1835.495708][T18839] ? zone_watermark_fast+0x220/0x220 [ 1835.500820][T18839] get_zeroed_page+0x19/0x40 [ 1835.505246][T18839] __pud_alloc+0x8b/0x260 [ 1835.509413][T18839] ? stack_trace_snprint+0xf0/0xf0 [ 1835.514360][T18839] ? do_handle_mm_fault+0x2330/0x2330 [ 1835.519569][T18839] ? __stack_depot_save+0x34/0x470 [ 1835.524601][T18839] ? anon_vma_clone+0x9a/0x500 [ 1835.529197][T18839] copy_page_range+0x2bcf/0x2f90 [ 1835.533978][T18839] ? __kasan_slab_alloc+0xb1/0xe0 [ 1835.538831][T18839] ? slab_post_alloc_hook+0x53/0x2c0 [ 1835.543956][T18839] ? dup_mm+0x8c5/0x12c0 [ 1835.548056][T18839] ? copy_mm+0x107/0x1b0 [ 1835.552199][T18839] ? copy_process+0x12bc/0x3260 [ 1835.556887][T18839] ? kernel_clone+0x21e/0x9e0 [ 1835.561401][T18839] ? __x64_sys_clone+0x23f/0x290 [ 1835.566171][T18839] ? do_syscall_64+0x3d/0xb0 [ 1835.570603][T18839] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1835.576542][T18839] ? pfn_valid+0x1e0/0x1e0 [ 1835.580761][T18839] ? rwsem_write_trylock+0x15b/0x290 [ 1835.585881][T18839] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1835.592131][T18839] dup_mm+0xadc/0x12c0 [ 1835.596035][T18839] ? copy_init_mm+0x20/0x20 [ 1835.600373][T18839] copy_mm+0x107/0x1b0 [ 1835.604280][T18839] copy_process+0x12bc/0x3260 [ 1835.608792][T18839] ? proc_fail_nth_write+0x20b/0x290 [ 1835.613912][T18839] ? fsnotify_perm+0x6a/0x5d0 [ 1835.618425][T18839] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1835.623372][T18839] ? vfs_write+0x9ec/0x1110 [ 1835.627712][T18839] kernel_clone+0x21e/0x9e0 [ 1835.632054][T18839] ? file_end_write+0x1c0/0x1c0 [ 1835.636739][T18839] ? create_io_thread+0x1e0/0x1e0 [ 1835.641601][T18839] ? mutex_unlock+0xb2/0x1b0 [ 1835.646023][T18839] ? __mutex_lock_slowpath+0x10/0x10 [ 1835.651150][T18839] __x64_sys_clone+0x23f/0x290 [ 1835.655748][T18839] ? __do_sys_vfork+0x130/0x130 [ 1835.660431][T18839] ? ksys_write+0x260/0x2c0 [ 1835.664773][T18839] ? debug_smp_processor_id+0x17/0x20 [ 1835.669979][T18839] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1835.675894][T18839] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1835.681872][T18839] do_syscall_64+0x3d/0xb0 [ 1835.686125][T18839] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1835.691850][T18839] RIP: 0033:0x7f72394e6b29 [ 1835.696107][T18839] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1835.715548][T18839] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1835.723794][T18839] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1835.731605][T18839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1835.739414][T18839] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1835.747229][T18839] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1835.755040][T18839] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1835.762859][T18839] 11:07:09 executing program 0: syz_clone(0x71067d00, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x1e, 0x0, 0x0, 0x0}, 0x20) (rerun: 32) syz_clone(0x50843180, &(0x7f0000000000)="246f5c69cbedc6bff80ce563da87be0c34d4140e3b3e5115cbe4084dc35a5bf0f951a782e8d13bead1fd92d09c9c6eaf406641cc2067376f0c546393555bd0dbe8e35539a7cd1638e444d683e09dcefec8ef34cea81476274b45be483269d0b01396d803ff7d287c7caa07796613539c9d28abbca59c842bb20fb9e7eadaf69f3a4f51b40587c5931059319130ec2c66159f54c8e2e8c611ef1f008d3b5ab6987610daaba75456e9889eac43d1b61f759caca4fa0c55ce67350edee193d48971", 0xc0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") 11:07:09 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x21, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:09 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xff, 0x8, 0x6, 0xc4, 0x0, 0x81, 0x1041, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x1, 0x7fff, 0x52, 0x7, 0x60, 0x0, 0x6, 0x0, 0x3}) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xff, 0x8, 0x6, 0xc4, 0x0, 0x81, 0x1041, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x1, 0x7fff, 0x52, 0x7, 0x60, 0x0, 0x6, 0x0, 0x3}) (async) 11:07:09 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) [ 1836.035859][T18852] FAULT_INJECTION: forcing a failure. [ 1836.035859][T18852] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.065794][T18852] CPU: 1 PID: 18852 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1836.077623][T18852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1836.087518][T18852] Call Trace: [ 1836.090641][T18852] [ 1836.093417][T18852] dump_stack_lvl+0x151/0x1b7 [ 1836.098017][T18852] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1836.103491][T18852] dump_stack+0x15/0x17 [ 1836.107475][T18852] should_fail+0x3c6/0x510 [ 1836.111731][T18852] __should_failslab+0xa4/0xe0 [ 1836.116330][T18852] ? anon_vma_clone+0x9a/0x500 [ 1836.120928][T18852] should_failslab+0x9/0x20 [ 1836.125272][T18852] slab_pre_alloc_hook+0x37/0xd0 [ 1836.130047][T18852] ? anon_vma_clone+0x9a/0x500 [ 1836.134643][T18852] kmem_cache_alloc+0x44/0x200 [ 1836.139247][T18852] anon_vma_clone+0x9a/0x500 [ 1836.143671][T18852] anon_vma_fork+0x91/0x4e0 [ 1836.148007][T18852] ? anon_vma_name+0x4c/0x70 [ 1836.152433][T18852] ? vm_area_dup+0x17a/0x230 [ 1836.156949][T18852] dup_mm+0x8c5/0x12c0 [ 1836.160862][T18852] ? copy_init_mm+0x20/0x20 [ 1836.165199][T18852] copy_mm+0x107/0x1b0 [ 1836.169100][T18852] copy_process+0x12bc/0x3260 [ 1836.173614][T18852] ? proc_fail_nth_write+0x20b/0x290 [ 1836.178735][T18852] ? fsnotify_perm+0x6a/0x5d0 [ 1836.183246][T18852] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1836.188200][T18852] ? vfs_write+0x9ec/0x1110 [ 1836.192537][T18852] kernel_clone+0x21e/0x9e0 [ 1836.196875][T18852] ? file_end_write+0x1c0/0x1c0 [ 1836.201560][T18852] ? create_io_thread+0x1e0/0x1e0 [ 1836.206420][T18852] ? mutex_unlock+0xb2/0x1b0 [ 1836.210848][T18852] ? __mutex_lock_slowpath+0x10/0x10 [ 1836.215980][T18852] __x64_sys_clone+0x23f/0x290 [ 1836.220573][T18852] ? __do_sys_vfork+0x130/0x130 [ 1836.225257][T18852] ? ksys_write+0x260/0x2c0 [ 1836.229594][T18852] ? debug_smp_processor_id+0x17/0x20 [ 1836.234804][T18852] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1836.240707][T18852] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1836.246270][T18852] do_syscall_64+0x3d/0xb0 [ 1836.250522][T18852] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1836.256241][T18852] RIP: 0033:0x7f72394e6b29 [ 1836.260496][T18852] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 11:07:09 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x22, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x23, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x300, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x500, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x600, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1836.279940][T18852] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1836.288184][T18852] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1836.295992][T18852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1836.303812][T18852] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1836.311618][T18852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1836.319524][T18852] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1836.327418][T18852] 11:07:10 executing program 0: syz_clone(0x71067d00, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x1e, 0x0, 0x0, 0x0}, 0x20) (async) syz_clone(0x50843180, &(0x7f0000000000)="246f5c69cbedc6bff80ce563da87be0c34d4140e3b3e5115cbe4084dc35a5bf0f951a782e8d13bead1fd92d09c9c6eaf406641cc2067376f0c546393555bd0dbe8e35539a7cd1638e444d683e09dcefec8ef34cea81476274b45be483269d0b01396d803ff7d287c7caa07796613539c9d28abbca59c842bb20fb9e7eadaf69f3a4f51b40587c5931059319130ec2c66159f54c8e2e8c611ef1f008d3b5ab6987610daaba75456e9889eac43d1b61f759caca4fa0c55ce67350edee193d48971", 0xc0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") 11:07:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x700, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:10 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xff, 0x8, 0x6, 0xc4, 0x0, 0x81, 0x1041, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x1, 0x7fff, 0x52, 0x7, 0x60, 0x0, 0x6, 0x0, 0x3}) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xff, 0x8, 0x6, 0xc4, 0x0, 0x81, 0x1041, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x1, 0x7fff, 0x52, 0x7, 0x60, 0x0, 0x6, 0x0, 0x3}) (async) 11:07:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:10 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:10 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) 11:07:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) (async) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x900, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:10 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:10 executing program 3: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x26}, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1836.731508][T18887] FAULT_INJECTION: forcing a failure. [ 1836.731508][T18887] name failslab, interval 1, probability 0, space 0, times 0 11:07:10 executing program 5: syz_clone(0x38040700, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1836.770105][T18887] CPU: 0 PID: 18887 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1836.781939][T18887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1836.791834][T18887] Call Trace: [ 1836.794958][T18887] [ 1836.797734][T18887] dump_stack_lvl+0x151/0x1b7 [ 1836.802248][T18887] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1836.807805][T18887] dump_stack+0x15/0x17 [ 1836.811805][T18887] should_fail+0x3c6/0x510 [ 1836.816195][T18887] __should_failslab+0xa4/0xe0 [ 1836.820790][T18887] ? anon_vma_clone+0x9a/0x500 [ 1836.825389][T18887] should_failslab+0x9/0x20 11:07:10 executing program 5: syz_clone(0x38040700, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1836.829728][T18887] slab_pre_alloc_hook+0x37/0xd0 [ 1836.834505][T18887] ? anon_vma_clone+0x9a/0x500 [ 1836.839102][T18887] kmem_cache_alloc+0x44/0x200 [ 1836.843711][T18887] anon_vma_clone+0x9a/0x500 [ 1836.848131][T18887] anon_vma_fork+0x91/0x4e0 [ 1836.852465][T18887] ? anon_vma_name+0x4c/0x70 [ 1836.856900][T18887] ? vm_area_dup+0x17a/0x230 [ 1836.861323][T18887] dup_mm+0x8c5/0x12c0 [ 1836.865231][T18887] ? copy_init_mm+0x20/0x20 [ 1836.869569][T18887] copy_mm+0x107/0x1b0 [ 1836.873472][T18887] copy_process+0x12bc/0x3260 [ 1836.877988][T18887] ? proc_fail_nth_write+0x20b/0x290 [ 1836.883108][T18887] ? fsnotify_perm+0x6a/0x5d0 [ 1836.887619][T18887] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1836.892655][T18887] ? vfs_write+0x9ec/0x1110 [ 1836.896996][T18887] kernel_clone+0x21e/0x9e0 [ 1836.901332][T18887] ? file_end_write+0x1c0/0x1c0 [ 1836.906019][T18887] ? create_io_thread+0x1e0/0x1e0 [ 1836.910888][T18887] ? mutex_unlock+0xb2/0x1b0 [ 1836.915303][T18887] ? __mutex_lock_slowpath+0x10/0x10 [ 1836.920428][T18887] __x64_sys_clone+0x23f/0x290 [ 1836.925030][T18887] ? __do_sys_vfork+0x130/0x130 [ 1836.929711][T18887] ? ksys_write+0x260/0x2c0 [ 1836.934055][T18887] ? debug_smp_processor_id+0x17/0x20 [ 1836.939262][T18887] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1836.945296][T18887] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1836.950759][T18887] do_syscall_64+0x3d/0xb0 [ 1836.955016][T18887] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1836.960739][T18887] RIP: 0033:0x7f72394e6b29 [ 1836.964988][T18887] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1836.984700][T18887] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1836.992944][T18887] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1837.000832][T18887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1837.008644][T18887] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1837.016458][T18887] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1837.024478][T18887] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1837.032458][T18887] 11:07:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xa00, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:11 executing program 5: syz_clone(0x38040700, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:11 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:11 executing program 3: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x26}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x26}, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:11 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 11:07:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x3}, 0x48) r4 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r1, 0x25, 0x8}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r5}, 0x8) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r2}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x5, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x1, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x3, '\x00', r1, 0x0, r6, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x9, 0x4, 0x1f}, 0x10, 0x200c, r0, 0x0, &(0x7f00000004c0)=[r2, r7, r0, r8, r3, r9]}, 0x80) syz_clone(0x12010800, 0x0, 0x10, 0x0, 0x0, 0x0) 11:07:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000300)=0x935) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r5, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/242, 0xf2, 0x0, &(0x7f00000004c0)=""/19, 0x13}}, 0x10) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000280)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000340)={'veth1_to_bridge\x00'}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x55d, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x64, &(0x7f0000000080)=""/100, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x6, 0x8, 0x9}, 0x10, 0x1a669, r0, 0x0, &(0x7f00000001c0)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0x1, r7]}, 0x80) 11:07:11 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xb00, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1837.440122][T18919] FAULT_INJECTION: forcing a failure. [ 1837.440122][T18919] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.465416][T18919] CPU: 1 PID: 18919 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1837.477257][T18919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1837.487142][T18919] Call Trace: [ 1837.490266][T18919] [ 1837.493046][T18919] dump_stack_lvl+0x151/0x1b7 [ 1837.497552][T18919] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1837.503021][T18919] dump_stack+0x15/0x17 [ 1837.507015][T18919] should_fail+0x3c6/0x510 [ 1837.511268][T18919] __should_failslab+0xa4/0xe0 [ 1837.515871][T18919] ? vm_area_dup+0x26/0x230 [ 1837.520203][T18919] should_failslab+0x9/0x20 [ 1837.524542][T18919] slab_pre_alloc_hook+0x37/0xd0 [ 1837.529317][T18919] ? vm_area_dup+0x26/0x230 [ 1837.533668][T18919] kmem_cache_alloc+0x44/0x200 [ 1837.538256][T18919] vm_area_dup+0x26/0x230 [ 1837.542422][T18919] dup_mm+0x81b/0x12c0 [ 1837.546333][T18919] ? copy_init_mm+0x20/0x20 [ 1837.550673][T18919] copy_mm+0x107/0x1b0 [ 1837.554576][T18919] copy_process+0x12bc/0x3260 [ 1837.559091][T18919] ? proc_fail_nth_write+0x20b/0x290 [ 1837.564211][T18919] ? fsnotify_perm+0x6a/0x5d0 [ 1837.568726][T18919] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1837.573691][T18919] ? vfs_write+0x9ec/0x1110 [ 1837.578010][T18919] kernel_clone+0x21e/0x9e0 [ 1837.582353][T18919] ? file_end_write+0x1c0/0x1c0 [ 1837.587037][T18919] ? create_io_thread+0x1e0/0x1e0 [ 1837.591898][T18919] ? mutex_unlock+0xb2/0x1b0 [ 1837.596414][T18919] ? __mutex_lock_slowpath+0x10/0x10 [ 1837.601586][T18919] __x64_sys_clone+0x23f/0x290 [ 1837.606132][T18919] ? __do_sys_vfork+0x130/0x130 [ 1837.610820][T18919] ? ksys_write+0x260/0x2c0 [ 1837.615159][T18919] ? debug_smp_processor_id+0x17/0x20 [ 1837.620359][T18919] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1837.626269][T18919] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1837.631747][T18919] do_syscall_64+0x3d/0xb0 [ 1837.635991][T18919] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1837.641716][T18919] RIP: 0033:0x7f72394e6b29 [ 1837.646054][T18919] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1837.665618][T18919] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1837.673861][T18919] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1837.681676][T18919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 11:07:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x3}, 0x48) r4 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r1, 0x25, 0x8}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r5}, 0x8) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r2}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x5, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x1, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x3, '\x00', r1, 0x0, r6, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x9, 0x4, 0x1f}, 0x10, 0x200c, r0, 0x0, &(0x7f00000004c0)=[r2, r7, r0, r8, r3, r9]}, 0x80) syz_clone(0x12010800, 0x0, 0x10, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x3}, 0x48) (async) openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r1, 0x25, 0x8}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r5}, 0x8) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r2}, 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x5, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x1, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x3, '\x00', r1, 0x0, r6, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x9, 0x4, 0x1f}, 0x10, 0x200c, r0, 0x0, &(0x7f00000004c0)=[r2, r7, r0, r8, r3, r9]}, 0x80) (async) syz_clone(0x12010800, 0x0, 0x10, 0x0, 0x0, 0x0) (async) 11:07:11 executing program 3: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x26}, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:11 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xc00, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000300)=0x935) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (rerun: 32) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r5, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/242, 0xf2, 0x0, &(0x7f00000004c0)=""/19, 0x13}}, 0x10) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000280)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000340)={'veth1_to_bridge\x00'}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x55d, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x64, &(0x7f0000000080)=""/100, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x6, 0x8, 0x9}, 0x10, 0x1a669, r0, 0x0, &(0x7f00000001c0)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0x1, r7]}, 0x80) 11:07:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xd00, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1837.689487][T18919] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1837.697294][T18919] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1837.705104][T18919] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1837.713390][T18919] 11:07:11 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:11 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 11:07:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x448502, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x600}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1a, 0x9, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x1, 0xb, 0x3, 0xffffffffffffffc0, 0xfffffffffffffffc}, @generic={0x0, 0x8, 0xa, 0x400, 0x100}, @alu={0x7, 0x0, 0xa, 0x4, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx={0x18, 0x3}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @alu={0x7, 0x1, 0x1, 0xb, 0x2, 0x10, 0x4}], &(0x7f0000000100)='GPL\x00', 0xfffffff7, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x10, 0x100, 0x3f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0x1]}, 0x80) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)) 11:07:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xe00, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:11 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000300)=0x935) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r5, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/242, 0xf2, 0x0, &(0x7f00000004c0)=""/19, 0x13}}, 0x10) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000280)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000340)={'veth1_to_bridge\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x55d, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x64, &(0x7f0000000080)=""/100, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x6, 0x8, 0x9}, 0x10, 0x1a669, r0, 0x0, &(0x7f00000001c0)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0x1, r7]}, 0x80) 11:07:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0xf00, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1837.808829][T18957] FAULT_INJECTION: forcing a failure. [ 1837.808829][T18957] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.838270][T18957] CPU: 0 PID: 18957 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1837.850108][T18957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1837.859997][T18957] Call Trace: [ 1837.863120][T18957] [ 1837.865906][T18957] dump_stack_lvl+0x151/0x1b7 [ 1837.870410][T18957] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1837.875883][T18957] dump_stack+0x15/0x17 [ 1837.879874][T18957] should_fail+0x3c6/0x510 [ 1837.884129][T18957] __should_failslab+0xa4/0xe0 [ 1837.888723][T18957] ? anon_vma_fork+0x1df/0x4e0 [ 1837.893325][T18957] should_failslab+0x9/0x20 [ 1837.897751][T18957] slab_pre_alloc_hook+0x37/0xd0 [ 1837.902523][T18957] ? anon_vma_fork+0x1df/0x4e0 [ 1837.907126][T18957] kmem_cache_alloc+0x44/0x200 [ 1837.911727][T18957] anon_vma_fork+0x1df/0x4e0 [ 1837.916151][T18957] dup_mm+0x8c5/0x12c0 [ 1837.920057][T18957] ? copy_init_mm+0x20/0x20 [ 1837.924399][T18957] copy_mm+0x107/0x1b0 [ 1837.928301][T18957] copy_process+0x12bc/0x3260 [ 1837.932819][T18957] ? proc_fail_nth_write+0x20b/0x290 [ 1837.937942][T18957] ? fsnotify_perm+0x6a/0x5d0 [ 1837.942454][T18957] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1837.947396][T18957] ? vfs_write+0x9ec/0x1110 [ 1837.951736][T18957] kernel_clone+0x21e/0x9e0 [ 1837.956079][T18957] ? file_end_write+0x1c0/0x1c0 [ 1837.960764][T18957] ? create_io_thread+0x1e0/0x1e0 [ 1837.965628][T18957] ? mutex_unlock+0xb2/0x1b0 [ 1837.970050][T18957] ? __mutex_lock_slowpath+0x10/0x10 [ 1837.975177][T18957] __x64_sys_clone+0x23f/0x290 [ 1837.979776][T18957] ? __do_sys_vfork+0x130/0x130 [ 1837.984461][T18957] ? ksys_write+0x260/0x2c0 [ 1837.988805][T18957] ? debug_smp_processor_id+0x17/0x20 [ 1837.994009][T18957] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1837.999909][T18957] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1838.005377][T18957] do_syscall_64+0x3d/0xb0 [ 1838.009631][T18957] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1838.015362][T18957] RIP: 0033:0x7f72394e6b29 [ 1838.019609][T18957] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1838.039053][T18957] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1838.047297][T18957] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 11:07:11 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x1fffe00, 0x5, 0x6, 0x200, 0xffffffffffffffff, 0x2, '\x00', r1, r2, 0x0, 0x4, 0x3}, 0x48) r4 = openat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r1, 0x25, 0x8}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r5}, 0x8) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r5}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r2}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x5, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x1, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x3, '\x00', r1, 0x0, r6, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x9, 0x4, 0x1f}, 0x10, 0x200c, r0, 0x0, &(0x7f00000004c0)=[r2, r7, r0, r8, r3, r9]}, 0x80) syz_clone(0x12010800, 0x0, 0x10, 0x0, 0x0, 0x0) (async) syz_clone(0x12010800, 0x0, 0x10, 0x0, 0x0, 0x0) 11:07:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x448502, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x600}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1a, 0x9, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x1, 0xb, 0x3, 0xffffffffffffffc0, 0xfffffffffffffffc}, @generic={0x0, 0x8, 0xa, 0x400, 0x100}, @alu={0x7, 0x0, 0xa, 0x4, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx={0x18, 0x3}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @alu={0x7, 0x1, 0x1, 0xb, 0x2, 0x10, 0x4}], &(0x7f0000000100)='GPL\x00', 0xfffffff7, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x10, 0x100, 0x3f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0x1]}, 0x80) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)) 11:07:11 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:11 executing program 5: syz_clone(0x3a04b600, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1100, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:11 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1200, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1838.055108][T18957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1838.062924][T18957] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1838.070733][T18957] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1838.078542][T18957] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1838.086364][T18957] 11:07:12 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 11:07:12 executing program 5: syz_clone(0x3a04b600, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x448502, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x600}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1a, 0x9, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x1, 0xb, 0x3, 0xffffffffffffffc0, 0xfffffffffffffffc}, @generic={0x0, 0x8, 0xa, 0x400, 0x100}, @alu={0x7, 0x0, 0xa, 0x4, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx={0x18, 0x3}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @alu={0x7, 0x1, 0x1, 0xb, 0x2, 0x10, 0x4}], &(0x7f0000000100)='GPL\x00', 0xfffffff7, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x10, 0x100, 0x3f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0x1]}, 0x80) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x448502, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'macsec0\x00', 0x600}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'bond0\x00', 0x2e11}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1a, 0x9, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x1, 0xb, 0x3, 0xffffffffffffffc0, 0xfffffffffffffffc}, @generic={0x0, 0x8, 0xa, 0x400, 0x100}, @alu={0x7, 0x0, 0xa, 0x4, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx={0x18, 0x3}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @alu={0x7, 0x1, 0x1, 0xb, 0x2, 0x10, 0x4}], &(0x7f0000000100)='GPL\x00', 0xfffffff7, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x10, 0x100, 0x3f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0x1]}, 0x80) (async) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r3) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)) (async) 11:07:12 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1300, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1838.179890][T19006] FAULT_INJECTION: forcing a failure. [ 1838.179890][T19006] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.213892][T19006] CPU: 0 PID: 19006 Comm: syz-executor.2 Tainted: G B 5.15.119-syzkaller-android13-5.15.119_r00 #0 [ 1838.225728][T19006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 1838.235959][T19006] Call Trace: [ 1838.239078][T19006] [ 1838.241856][T19006] dump_stack_lvl+0x151/0x1b7 [ 1838.246370][T19006] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1838.251839][T19006] ? flush_tlb_func+0x372/0x550 [ 1838.256524][T19006] dump_stack+0x15/0x17 [ 1838.260522][T19006] should_fail+0x3c6/0x510 [ 1838.264785][T19006] __should_failslab+0xa4/0xe0 [ 1838.269370][T19006] ? create_new_namespaces+0x34/0x670 [ 1838.274575][T19006] should_failslab+0x9/0x20 [ 1838.278927][T19006] slab_pre_alloc_hook+0x37/0xd0 [ 1838.283690][T19006] ? create_new_namespaces+0x34/0x670 [ 1838.288985][T19006] kmem_cache_alloc+0x44/0x200 [ 1838.293596][T19006] ? cap_capable+0x16e/0x270 [ 1838.298014][T19006] create_new_namespaces+0x34/0x670 [ 1838.303140][T19006] ? security_capable+0x87/0xb0 [ 1838.307830][T19006] ? ns_capable+0x89/0xe0 [ 1838.311990][T19006] copy_namespaces+0x1d1/0x220 [ 1838.316587][T19006] ? copy_mm+0x118/0x1b0 [ 1838.320838][T19006] copy_process+0x12e7/0x3260 [ 1838.325357][T19006] ? proc_fail_nth_write+0x20b/0x290 [ 1838.330473][T19006] ? fsnotify_perm+0x6a/0x5d0 [ 1838.334991][T19006] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1838.339934][T19006] ? vfs_write+0x9ec/0x1110 [ 1838.344272][T19006] kernel_clone+0x21e/0x9e0 [ 1838.348622][T19006] ? file_end_write+0x1c0/0x1c0 [ 1838.353310][T19006] ? create_io_thread+0x1e0/0x1e0 [ 1838.358160][T19006] ? mutex_unlock+0xb2/0x1b0 [ 1838.362587][T19006] ? __mutex_lock_slowpath+0x10/0x10 [ 1838.367825][T19006] __x64_sys_clone+0x23f/0x290 [ 1838.372425][T19006] ? __do_sys_vfork+0x130/0x130 [ 1838.377112][T19006] ? ksys_write+0x260/0x2c0 [ 1838.381453][T19006] ? debug_smp_processor_id+0x17/0x20 [ 1838.386660][T19006] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1838.392561][T19006] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1838.398039][T19006] do_syscall_64+0x3d/0xb0 [ 1838.402290][T19006] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1838.408106][T19006] RIP: 0033:0x7f72394e6b29 [ 1838.412457][T19006] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1838.431879][T19006] RSP: 002b:00007f7238269078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1838.440126][T19006] RAX: ffffffffffffffda RBX: 00007f7239605f80 RCX: 00007f72394e6b29 [ 1838.447940][T19006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 1838.455743][T19006] RBP: 00007f7238269120 R08: 0000000000000000 R09: 0000000000000000 [ 1838.463555][T19006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1838.471374][T19006] R13: 000000000000000b R14: 00007f7239605f80 R15: 00007ffc45efec38 [ 1838.479182][T19006] 11:07:12 executing program 0: syz_clone(0x7b03300, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') 11:07:12 executing program 5: syz_clone(0x3a04b600, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:12 executing program 3: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 11:07:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1400, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:12 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x1500, 0x0, 0xd, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 11:07:12 executing program 1: perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:07:12 executing program 2: syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0