00000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x6c00}, 0x36) 05:38:30 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 16) 05:38:30 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6000000}, 0x36) 05:38:30 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7000}, 0x36) 05:38:30 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff0000000f, 0x0, 0x0, 0x0) [ 1744.268492][T13168] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1744.276302][T13168] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1744.284121][T13168] [ 1744.325527][T13184] FAULT_INJECTION: forcing a failure. [ 1744.325527][T13184] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.341236][T13184] CPU: 0 PID: 13184 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1744.352781][T13184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1744.362675][T13184] Call Trace: [ 1744.365794][T13184] [ 1744.368571][T13184] dump_stack_lvl+0x151/0x1b7 [ 1744.373085][T13184] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1744.378550][T13184] ? kasan_check_range+0x4c/0x2a0 [ 1744.383411][T13184] dump_stack+0x15/0x17 [ 1744.387412][T13184] should_fail+0x3c6/0x510 [ 1744.391658][T13184] __should_failslab+0xa4/0xe0 [ 1744.396255][T13184] ? prepare_creds+0x2f/0x6a0 [ 1744.400770][T13184] should_failslab+0x9/0x20 [ 1744.405113][T13184] slab_pre_alloc_hook+0x37/0xd0 [ 1744.409885][T13184] ? prepare_creds+0x2f/0x6a0 [ 1744.414396][T13184] kmem_cache_alloc+0x44/0x200 [ 1744.419002][T13184] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1744.424292][T13184] prepare_creds+0x2f/0x6a0 [ 1744.428631][T13184] copy_creds+0xf0/0x630 [ 1744.432707][T13184] ? dup_task_struct+0x7e6/0xc60 [ 1744.437486][T13184] copy_process+0x7c3/0x3290 [ 1744.441914][T13184] ? timerqueue_add+0x250/0x270 [ 1744.446600][T13184] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1744.451545][T13184] kernel_clone+0x21e/0x9e0 [ 1744.455883][T13184] ? create_io_thread+0x1e0/0x1e0 [ 1744.460749][T13184] __x64_sys_clone+0x23f/0x290 [ 1744.465347][T13184] ? __do_sys_vfork+0x130/0x130 [ 1744.470035][T13184] ? debug_smp_processor_id+0x17/0x20 [ 1744.475237][T13184] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1744.481146][T13184] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1744.486613][T13184] do_syscall_64+0x3d/0xb0 [ 1744.490859][T13184] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1744.496505][T13184] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1744.502232][T13184] RIP: 0033:0x7f266d5a0da9 [ 1744.506486][T13184] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:38:30 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7100}, 0x36) 05:38:30 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7000000}, 0x36) 05:38:30 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7200}, 0x36) [ 1744.525925][T13184] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1744.534171][T13184] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1744.541982][T13184] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1744.549794][T13184] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1744.557606][T13184] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1744.565420][T13184] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1744.573232][T13184] 05:38:30 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000041, 0x0, 0x0, 0x0) 05:38:30 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x8000000}, 0x36) 05:38:30 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 17) 05:38:30 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7300}, 0x36) 05:38:30 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7400}, 0x36) 05:38:30 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x9000000}, 0x36) 05:38:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1744.641986][T13204] FAULT_INJECTION: forcing a failure. [ 1744.641986][T13204] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.682897][T13204] CPU: 1 PID: 13204 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1744.694472][T13204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1744.704361][T13204] Call Trace: [ 1744.707488][T13204] [ 1744.710261][T13204] dump_stack_lvl+0x151/0x1b7 [ 1744.714777][T13204] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1744.720245][T13204] dump_stack+0x15/0x17 [ 1744.724362][T13204] should_fail+0x3c6/0x510 [ 1744.728609][T13204] __should_failslab+0xa4/0xe0 [ 1744.733199][T13204] should_failslab+0x9/0x20 [ 1744.737542][T13204] slab_pre_alloc_hook+0x37/0xd0 [ 1744.742314][T13204] kmem_cache_alloc_trace+0x48/0x210 [ 1744.747437][T13204] ? mm_init+0x39a/0x970 [ 1744.751516][T13204] mm_init+0x39a/0x970 [ 1744.755425][T13204] copy_mm+0x1e3/0x13e0 [ 1744.759416][T13204] ? _raw_spin_lock+0xa4/0x1b0 [ 1744.764014][T13204] ? copy_signal+0x610/0x610 [ 1744.768440][T13204] ? __kasan_check_write+0x14/0x20 [ 1744.773411][T13204] ? __init_rwsem+0xd6/0x1c0 [ 1744.777814][T13204] ? copy_signal+0x4e3/0x610 [ 1744.782241][T13204] copy_process+0x1149/0x3290 [ 1744.786768][T13204] ? timerqueue_add+0x250/0x270 [ 1744.791440][T13204] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1744.796384][T13204] ? enqueue_hrtimer+0xca/0x240 [ 1744.801073][T13204] ? __hrtimer_run_queues+0x46b/0xad0 [ 1744.806284][T13204] kernel_clone+0x21e/0x9e0 [ 1744.810713][T13204] ? create_io_thread+0x1e0/0x1e0 [ 1744.815566][T13204] ? clockevents_program_event+0x22f/0x300 [ 1744.821214][T13204] __x64_sys_clone+0x23f/0x290 [ 1744.825817][T13204] ? __do_sys_vfork+0x130/0x130 [ 1744.830496][T13204] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1744.836315][T13204] do_syscall_64+0x3d/0xb0 [ 1744.840563][T13204] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1744.846208][T13204] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1744.851938][T13204] RIP: 0033:0x7f266d5a0da9 [ 1744.856189][T13204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1744.875627][T13204] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa000000}, 0x36) 05:38:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7900}, 0x36) 05:38:31 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000700, 0x0, 0x0, 0x0) 05:38:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7a00}, 0x36) 05:38:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xb000000}, 0x36) [ 1744.883888][T13204] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1744.891684][T13204] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1744.899496][T13204] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1744.907309][T13204] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1744.915119][T13204] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1744.923022][T13204] 05:38:31 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 18) 05:38:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7b00}, 0x36) 05:38:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xc000000}, 0x36) [ 1744.987457][T13225] FAULT_INJECTION: forcing a failure. [ 1744.987457][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.028588][T13225] CPU: 0 PID: 13225 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1745.040147][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1745.050044][T13225] Call Trace: [ 1745.053277][T13225] [ 1745.056045][T13225] dump_stack_lvl+0x151/0x1b7 [ 1745.060563][T13225] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1745.066029][T13225] ? __kasan_check_write+0x14/0x20 [ 1745.070978][T13225] dump_stack+0x15/0x17 [ 1745.074968][T13225] should_fail+0x3c6/0x510 [ 1745.079222][T13225] __should_failslab+0xa4/0xe0 [ 1745.083817][T13225] ? create_user_ns+0x55a/0x19d0 [ 1745.088592][T13225] should_failslab+0x9/0x20 [ 1745.092933][T13225] slab_pre_alloc_hook+0x37/0xd0 [ 1745.097704][T13225] ? create_user_ns+0x55a/0x19d0 [ 1745.102479][T13225] kmem_cache_alloc+0x44/0x200 [ 1745.107078][T13225] create_user_ns+0x55a/0x19d0 [ 1745.111677][T13225] ? utsns_owner+0x40/0x40 [ 1745.115935][T13225] ? security_prepare_creds+0x102/0x140 [ 1745.121676][T13225] ? prepare_creds+0x486/0x6a0 [ 1745.126347][T13225] copy_creds+0x20e/0x630 [ 1745.130510][T13225] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 1745.136171][T13225] copy_process+0x7c3/0x3290 [ 1745.140590][T13225] ? __kasan_check_write+0x14/0x20 [ 1745.145525][T13225] ? proc_fail_nth_write+0x20b/0x290 [ 1745.150647][T13225] ? selinux_file_permission+0x2c4/0x570 [ 1745.156115][T13225] ? fsnotify_perm+0x6a/0x5d0 [ 1745.160628][T13225] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1745.165583][T13225] ? vfs_write+0x9ec/0x1110 [ 1745.169916][T13225] ? __hrtimer_run_queues+0x46b/0xad0 [ 1745.175125][T13225] kernel_clone+0x21e/0x9e0 [ 1745.179465][T13225] ? file_end_write+0x1c0/0x1c0 [ 1745.184150][T13225] ? create_io_thread+0x1e0/0x1e0 [ 1745.189012][T13225] ? mutex_unlock+0xb2/0x260 [ 1745.193436][T13225] ? __mutex_lock_slowpath+0x10/0x10 [ 1745.198559][T13225] __x64_sys_clone+0x23f/0x290 [ 1745.203157][T13225] ? __do_sys_vfork+0x130/0x130 [ 1745.207845][T13225] ? ksys_write+0x260/0x2c0 [ 1745.212187][T13225] ? debug_smp_processor_id+0x17/0x20 [ 1745.217395][T13225] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1745.223294][T13225] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1745.228764][T13225] do_syscall_64+0x3d/0xb0 [ 1745.233020][T13225] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1745.238656][T13225] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1745.244393][T13225] RIP: 0033:0x7f266d5a0da9 [ 1745.248638][T13225] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1745.268077][T13225] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8300}, 0x36) 05:38:31 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:31 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000900, 0x0, 0x0, 0x0) 05:38:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xa000}, 0x36) 05:38:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xd000000}, 0x36) 05:38:31 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 19) [ 1745.276325][T13225] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1745.284133][T13225] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1745.291954][T13225] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1745.299760][T13225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1745.307570][T13225] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1745.315387][T13225] 05:38:31 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000f00, 0x0, 0x0, 0x0) 05:38:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xe000000}, 0x36) 05:38:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xdc17}, 0x36) 05:38:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xf000000}, 0x36) 05:38:31 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00001f00, 0x0, 0x0, 0x0) [ 1745.375181][T13245] FAULT_INJECTION: forcing a failure. [ 1745.375181][T13245] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.416400][T13245] CPU: 1 PID: 13245 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1745.427952][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1745.437853][T13245] Call Trace: [ 1745.440970][T13245] [ 1745.443748][T13245] dump_stack_lvl+0x151/0x1b7 [ 1745.448261][T13245] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1745.453730][T13245] dump_stack+0x15/0x17 [ 1745.457720][T13245] should_fail+0x3c6/0x510 [ 1745.461974][T13245] __should_failslab+0xa4/0xe0 [ 1745.466570][T13245] should_failslab+0x9/0x20 [ 1745.470910][T13245] slab_pre_alloc_hook+0x37/0xd0 [ 1745.475688][T13245] __kmalloc+0x6d/0x270 [ 1745.479677][T13245] ? __register_sysctl_table+0xea/0x1240 [ 1745.485148][T13245] __register_sysctl_table+0xea/0x1240 [ 1745.490439][T13245] ? memcpy+0x56/0x70 [ 1745.494261][T13245] setup_userns_sysctls+0x2b1/0x340 [ 1745.499296][T13245] create_user_ns+0x1230/0x19d0 [ 1745.503981][T13245] ? utsns_owner+0x40/0x40 [ 1745.508231][T13245] ? security_prepare_creds+0x102/0x140 [ 1745.513614][T13245] ? prepare_creds+0x486/0x6a0 [ 1745.518214][T13245] copy_creds+0x20e/0x630 [ 1745.522380][T13245] copy_process+0x7c3/0x3290 [ 1745.526811][T13245] ? timerqueue_add+0x250/0x270 [ 1745.531495][T13245] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1745.536438][T13245] ? enqueue_hrtimer+0xca/0x240 [ 1745.541138][T13245] ? __hrtimer_run_queues+0x46b/0xad0 [ 1745.546333][T13245] kernel_clone+0x21e/0x9e0 [ 1745.550676][T13245] ? create_io_thread+0x1e0/0x1e0 [ 1745.555534][T13245] ? clockevents_program_event+0x22f/0x300 [ 1745.561181][T13245] __x64_sys_clone+0x23f/0x290 [ 1745.565780][T13245] ? __do_sys_vfork+0x130/0x130 [ 1745.570462][T13245] ? debug_smp_processor_id+0x17/0x20 [ 1745.575666][T13245] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1745.581572][T13245] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1745.587041][T13245] do_syscall_64+0x3d/0xb0 [ 1745.591291][T13245] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1745.596937][T13245] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1745.602665][T13245] RIP: 0033:0x7f266d5a0da9 [ 1745.606919][T13245] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1745.626357][T13245] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1745.634604][T13245] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1745.642417][T13245] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1745.650224][T13245] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1745.658036][T13245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xdd00}, 0x36) 05:38:31 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xff00}, 0x36) 05:38:31 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00002000, 0x0, 0x0, 0x0) 05:38:31 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 20) 05:38:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x10000000}, 0x36) [ 1745.665846][T13245] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1745.673671][T13245] 05:38:31 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x11000000}, 0x36) [ 1745.739004][T13264] FAULT_INJECTION: forcing a failure. [ 1745.739004][T13264] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.763972][T13264] CPU: 0 PID: 13264 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1745.775522][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1745.785416][T13264] Call Trace: [ 1745.788539][T13264] [ 1745.791315][T13264] dump_stack_lvl+0x151/0x1b7 [ 1745.795827][T13264] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1745.801295][T13264] ? avc_denied+0x1b0/0x1b0 [ 1745.805636][T13264] dump_stack+0x15/0x17 [ 1745.809627][T13264] should_fail+0x3c6/0x510 [ 1745.813882][T13264] __should_failslab+0xa4/0xe0 [ 1745.818480][T13264] ? vm_area_dup+0x26/0x230 [ 1745.822820][T13264] should_failslab+0x9/0x20 [ 1745.827160][T13264] slab_pre_alloc_hook+0x37/0xd0 [ 1745.831935][T13264] ? vm_area_dup+0x26/0x230 [ 1745.836272][T13264] kmem_cache_alloc+0x44/0x200 [ 1745.840876][T13264] vm_area_dup+0x26/0x230 [ 1745.845041][T13264] copy_mm+0x9a1/0x13e0 [ 1745.849031][T13264] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1745.854677][T13264] ? copy_signal+0x610/0x610 [ 1745.859113][T13264] ? __init_rwsem+0xd6/0x1c0 [ 1745.863526][T13264] ? copy_signal+0x4e3/0x610 [ 1745.867955][T13264] copy_process+0x1149/0x3290 [ 1745.872469][T13264] ? timerqueue_add+0x250/0x270 [ 1745.877155][T13264] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1745.882102][T13264] ? enqueue_hrtimer+0xca/0x240 [ 1745.886788][T13264] ? __hrtimer_run_queues+0x46b/0xad0 [ 1745.891997][T13264] kernel_clone+0x21e/0x9e0 [ 1745.896338][T13264] ? create_io_thread+0x1e0/0x1e0 [ 1745.901195][T13264] ? clockevents_program_event+0x22f/0x300 [ 1745.906839][T13264] __x64_sys_clone+0x23f/0x290 [ 1745.911438][T13264] ? __do_sys_vfork+0x130/0x130 [ 1745.916128][T13264] ? syscall_enter_from_user_mode+0x102/0x1b0 [ 1745.922026][T13264] do_syscall_64+0x3d/0xb0 [ 1745.926279][T13264] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1745.931923][T13264] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1745.937648][T13264] RIP: 0033:0x7f266d5a0da9 [ 1745.941905][T13264] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1745.961343][T13264] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1745.969589][T13264] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1745.977400][T13264] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x100000}, 0x36) 05:38:32 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00003f00, 0x0, 0x0, 0x0) 05:38:32 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:32 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 21) 05:38:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x15edf2}, 0x36) [ 1745.985211][T13264] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1745.993021][T13264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1746.000834][T13264] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1746.008652][T13264] [ 1746.061835][T13282] FAULT_INJECTION: forcing a failure. [ 1746.061835][T13282] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.076839][T13282] CPU: 0 PID: 13282 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1746.088379][T13282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1746.098283][T13282] Call Trace: [ 1746.101397][T13282] [ 1746.104176][T13282] dump_stack_lvl+0x151/0x1b7 [ 1746.108688][T13282] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1746.114162][T13282] dump_stack+0x15/0x17 [ 1746.118149][T13282] should_fail+0x3c6/0x510 [ 1746.122401][T13282] __should_failslab+0xa4/0xe0 [ 1746.127001][T13282] should_failslab+0x9/0x20 [ 1746.131339][T13282] slab_pre_alloc_hook+0x37/0xd0 [ 1746.136115][T13282] __kmalloc+0x6d/0x270 [ 1746.140106][T13282] ? __register_sysctl_table+0x9de/0x1240 [ 1746.145663][T13282] __register_sysctl_table+0x9de/0x1240 [ 1746.151045][T13282] setup_userns_sysctls+0x2b1/0x340 [ 1746.156079][T13282] create_user_ns+0x1230/0x19d0 [ 1746.160767][T13282] ? utsns_owner+0x40/0x40 [ 1746.165016][T13282] ? security_prepare_creds+0x102/0x140 [ 1746.170399][T13282] ? prepare_creds+0x486/0x6a0 [ 1746.174998][T13282] copy_creds+0x20e/0x630 [ 1746.179175][T13282] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 1746.184810][T13282] copy_process+0x7c3/0x3290 [ 1746.189234][T13282] ? __kasan_check_write+0x14/0x20 [ 1746.194180][T13282] ? proc_fail_nth_write+0x20b/0x290 [ 1746.199298][T13282] ? selinux_file_permission+0x2c4/0x570 [ 1746.204769][T13282] ? fsnotify_perm+0x6a/0x5d0 [ 1746.209281][T13282] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1746.214237][T13282] ? vfs_write+0x9ec/0x1110 [ 1746.218568][T13282] ? __hrtimer_run_queues+0x46b/0xad0 [ 1746.223796][T13282] kernel_clone+0x21e/0x9e0 [ 1746.228117][T13282] ? file_end_write+0x1c0/0x1c0 [ 1746.232803][T13282] ? create_io_thread+0x1e0/0x1e0 [ 1746.237663][T13282] ? mutex_unlock+0xb2/0x260 [ 1746.242092][T13282] ? __mutex_lock_slowpath+0x10/0x10 [ 1746.247210][T13282] __x64_sys_clone+0x23f/0x290 [ 1746.251816][T13282] ? __do_sys_vfork+0x130/0x130 [ 1746.256517][T13282] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1746.262314][T13282] do_syscall_64+0x3d/0xb0 [ 1746.266671][T13282] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1746.272299][T13282] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1746.278025][T13282] RIP: 0033:0x7f266d5a0da9 [ 1746.282278][T13282] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1746.301719][T13282] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:32 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00004000, 0x0, 0x0, 0x0) [ 1746.309961][T13282] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1746.317772][T13282] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1746.325583][T13282] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1746.333404][T13282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1746.341208][T13282] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1746.349024][T13282] [ 1746.352334][T13282] sysctl could not get directory: //user -12 [ 1746.359655][T13282] CPU: 1 PID: 13282 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1746.371186][T13282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1746.381082][T13282] Call Trace: [ 1746.384207][T13282] [ 1746.386992][T13282] dump_stack_lvl+0x151/0x1b7 [ 1746.391493][T13282] ? slab_free_freelist_hook+0xbd/0x190 [ 1746.396877][T13282] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1746.402345][T13282] ? __register_sysctl_table+0x11a4/0x1240 [ 1746.407989][T13282] dump_stack+0x15/0x17 [ 1746.411977][T13282] __register_sysctl_table+0x11a9/0x1240 [ 1746.417447][T13282] setup_userns_sysctls+0x2b1/0x340 [ 1746.422481][T13282] create_user_ns+0x1230/0x19d0 [ 1746.427168][T13282] ? utsns_owner+0x40/0x40 [ 1746.431419][T13282] ? security_prepare_creds+0x102/0x140 [ 1746.436802][T13282] ? prepare_creds+0x486/0x6a0 [ 1746.441409][T13282] copy_creds+0x20e/0x630 [ 1746.445572][T13282] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 1746.451213][T13282] copy_process+0x7c3/0x3290 [ 1746.455636][T13282] ? __kasan_check_write+0x14/0x20 [ 1746.460580][T13282] ? proc_fail_nth_write+0x20b/0x290 [ 1746.465701][T13282] ? selinux_file_permission+0x2c4/0x570 [ 1746.471174][T13282] ? fsnotify_perm+0x6a/0x5d0 [ 1746.475683][T13282] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1746.480631][T13282] ? vfs_write+0x9ec/0x1110 [ 1746.484972][T13282] ? __hrtimer_run_queues+0x46b/0xad0 [ 1746.490182][T13282] kernel_clone+0x21e/0x9e0 [ 1746.494518][T13282] ? file_end_write+0x1c0/0x1c0 [ 1746.499207][T13282] ? create_io_thread+0x1e0/0x1e0 [ 1746.504068][T13282] ? mutex_unlock+0xb2/0x260 [ 1746.508491][T13282] ? __mutex_lock_slowpath+0x10/0x10 [ 1746.513617][T13282] __x64_sys_clone+0x23f/0x290 [ 1746.518221][T13282] ? __do_sys_vfork+0x130/0x130 [ 1746.522907][T13282] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1746.528718][T13282] do_syscall_64+0x3d/0xb0 [ 1746.532976][T13282] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1746.538615][T13282] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1746.544337][T13282] RIP: 0033:0x7f266d5a0da9 [ 1746.548596][T13282] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1746.568036][T13282] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1746.576283][T13282] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1746.584089][T13282] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1746.591900][T13282] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1746.599714][T13282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:32 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x12000000}, 0x36) 05:38:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x15f1d6}, 0x36) 05:38:32 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 22) 05:38:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1ac4d1}, 0x36) [ 1746.607530][T13282] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1746.615344][T13282] 05:38:32 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x13000000}, 0x36) 05:38:32 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00004100, 0x0, 0x0, 0x0) 05:38:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x200000}, 0x36) 05:38:32 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x18000000}, 0x36) 05:38:32 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x400000}, 0x36) [ 1746.709307][T13293] FAULT_INJECTION: forcing a failure. [ 1746.709307][T13293] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.721958][T13293] CPU: 0 PID: 13293 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1746.733498][T13293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1746.743387][T13293] Call Trace: [ 1746.746508][T13293] [ 1746.749301][T13293] dump_stack_lvl+0x151/0x1b7 [ 1746.753802][T13293] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1746.759270][T13293] dump_stack+0x15/0x17 [ 1746.763260][T13293] should_fail+0x3c6/0x510 [ 1746.767513][T13293] __should_failslab+0xa4/0xe0 [ 1746.772115][T13293] should_failslab+0x9/0x20 [ 1746.776454][T13293] slab_pre_alloc_hook+0x37/0xd0 [ 1746.781226][T13293] kmem_cache_alloc_trace+0x48/0x210 [ 1746.786346][T13293] ? alloc_ucounts+0x15c/0x500 [ 1746.790947][T13293] alloc_ucounts+0x15c/0x500 [ 1746.795374][T13293] ? prepare_creds+0x486/0x6a0 [ 1746.799976][T13293] copy_creds+0x344/0x630 [ 1746.804143][T13293] copy_process+0x7c3/0x3290 [ 1746.808571][T13293] ? irqentry_exit+0x30/0x40 [ 1746.812992][T13293] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1746.818635][T13293] ? vfs_write+0x9d0/0x1110 [ 1746.822974][T13293] ? vfs_write+0x9ec/0x1110 [ 1746.827317][T13293] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1746.832260][T13293] ? vfs_write+0x9ec/0x1110 [ 1746.836608][T13293] ? __hrtimer_run_queues+0x46b/0xad0 [ 1746.841813][T13293] kernel_clone+0x21e/0x9e0 [ 1746.846153][T13293] ? irqentry_exit+0x30/0x40 [ 1746.850576][T13293] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1746.856218][T13293] ? create_io_thread+0x1e0/0x1e0 [ 1746.861078][T13293] __x64_sys_clone+0x23f/0x290 [ 1746.865679][T13293] ? __do_sys_vfork+0x130/0x130 [ 1746.870365][T13293] ? ksys_write+0x260/0x2c0 [ 1746.874703][T13293] ? debug_smp_processor_id+0x17/0x20 [ 1746.879909][T13293] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1746.885813][T13293] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1746.891291][T13293] do_syscall_64+0x3d/0xb0 [ 1746.895533][T13293] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1746.901176][T13293] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1746.906903][T13293] RIP: 0033:0x7f266d5a0da9 [ 1746.911157][T13293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1746.930600][T13293] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1746.938847][T13293] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1746.946743][T13293] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:33 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1f000000}, 0x36) 05:38:33 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1746.954552][T13293] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1746.962451][T13293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1746.970263][T13293] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1746.978079][T13293] 05:38:33 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff0003ffff, 0x0, 0x0, 0x0) [ 1747.001522][T13308] FAULT_INJECTION: forcing a failure. [ 1747.001522][T13308] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.014596][T13308] CPU: 1 PID: 13308 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1747.026135][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1747.036025][T13308] Call Trace: [ 1747.039150][T13308] [ 1747.041927][T13308] dump_stack_lvl+0x151/0x1b7 [ 1747.046442][T13308] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1747.051908][T13308] dump_stack+0x15/0x17 [ 1747.055898][T13308] should_fail+0x3c6/0x510 [ 1747.060154][T13308] __should_failslab+0xa4/0xe0 [ 1747.064756][T13308] should_failslab+0x9/0x20 [ 1747.069108][T13308] slab_pre_alloc_hook+0x37/0xd0 [ 1747.073867][T13308] kmem_cache_alloc_trace+0x48/0x210 [ 1747.078989][T13308] ? alloc_fdtable+0xaf/0x2a0 [ 1747.083506][T13308] alloc_fdtable+0xaf/0x2a0 [ 1747.087841][T13308] dup_fd+0x759/0xb00 [ 1747.091663][T13308] ? avc_has_perm+0x16f/0x260 [ 1747.096179][T13308] copy_files+0xe6/0x200 [ 1747.100252][T13308] ? perf_event_attrs+0x30/0x30 [ 1747.104939][T13308] ? dup_task_struct+0xc60/0xc60 [ 1747.109715][T13308] ? security_task_alloc+0xf9/0x130 [ 1747.114750][T13308] copy_process+0x1080/0x3290 [ 1747.119268][T13308] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1747.125255][T13308] ? _raw_write_unlock_irqrestore+0x70/0x70 [ 1747.131520][T13308] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1747.136448][T13308] ? vfs_write+0x9ec/0x1110 [ 1747.140878][T13308] ? __hrtimer_run_queues+0x46b/0xad0 [ 1747.146090][T13308] kernel_clone+0x21e/0x9e0 [ 1747.150419][T13308] ? file_end_write+0x1c0/0x1c0 [ 1747.155108][T13308] ? create_io_thread+0x1e0/0x1e0 [ 1747.160055][T13308] ? mutex_unlock+0xb2/0x260 [ 1747.164481][T13308] ? __mutex_lock_slowpath+0x10/0x10 [ 1747.169602][T13308] __x64_sys_clone+0x23f/0x290 [ 1747.174201][T13308] ? __do_sys_vfork+0x130/0x130 [ 1747.178886][T13308] ? ksys_write+0x260/0x2c0 [ 1747.183230][T13308] ? debug_smp_processor_id+0x17/0x20 [ 1747.188438][T13308] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1747.194341][T13308] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1747.199811][T13308] do_syscall_64+0x3d/0xb0 [ 1747.204154][T13308] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1747.209787][T13308] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1747.215515][T13308] RIP: 0033:0x7f266d5a0da9 [ 1747.219770][T13308] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1747.239210][T13308] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x800000}, 0x36) 05:38:33 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:33 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 24) 05:38:33 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x20000000}, 0x36) 05:38:33 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x21000000}, 0x36) 05:38:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x80ffff}, 0x36) [ 1747.247455][T13308] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1747.255271][T13308] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1747.263080][T13308] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1747.270891][T13308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1747.278701][T13308] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1747.286522][T13308] 05:38:33 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25000000}, 0x36) 05:38:33 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00040000, 0x0, 0x0, 0x0) [ 1747.354320][T13322] FAULT_INJECTION: forcing a failure. [ 1747.354320][T13322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1747.368957][T13322] CPU: 0 PID: 13322 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1747.380507][T13322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1747.390401][T13322] Call Trace: [ 1747.393522][T13322] [ 1747.396301][T13322] dump_stack_lvl+0x151/0x1b7 [ 1747.400818][T13322] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1747.406280][T13322] ? copy_mm+0xa3a/0x13e0 [ 1747.410447][T13322] dump_stack+0x15/0x17 [ 1747.414441][T13322] should_fail+0x3c6/0x510 [ 1747.418694][T13322] should_fail_alloc_page+0x5a/0x80 [ 1747.423726][T13322] prepare_alloc_pages+0x15c/0x700 [ 1747.428674][T13322] ? irqentry_exit+0x30/0x40 [ 1747.433105][T13322] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1747.438741][T13322] ? __alloc_pages_bulk+0xe40/0xe40 [ 1747.443774][T13322] ? copy_page_range+0x6e3/0x2f90 [ 1747.448636][T13322] __alloc_pages+0x18c/0x8f0 [ 1747.453061][T13322] ? prep_new_page+0x110/0x110 [ 1747.457665][T13322] ? irqentry_exit+0x30/0x40 [ 1747.462094][T13322] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1747.468080][T13322] get_zeroed_page+0x1b/0x40 [ 1747.472502][T13322] __pud_alloc+0x8b/0x260 [ 1747.476675][T13322] ? do_handle_mm_fault+0x2330/0x2330 [ 1747.481880][T13322] ? __stack_depot_save+0x34/0x470 [ 1747.486826][T13322] ? anon_vma_clone+0x9a/0x500 [ 1747.491430][T13322] copy_page_range+0x2bcf/0x2f90 [ 1747.496201][T13322] ? __kasan_slab_alloc+0xb1/0xe0 [ 1747.501064][T13322] ? slab_post_alloc_hook+0x53/0x2c0 [ 1747.506179][T13322] ? copy_mm+0xa3a/0x13e0 [ 1747.510350][T13322] ? copy_process+0x1149/0x3290 [ 1747.515030][T13322] ? kernel_clone+0x21e/0x9e0 [ 1747.519546][T13322] ? __x64_sys_clone+0x23f/0x290 [ 1747.524323][T13322] ? do_syscall_64+0x3d/0xb0 [ 1747.528747][T13322] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1747.534658][T13322] ? pfn_valid+0x1e0/0x1e0 [ 1747.538903][T13322] ? rwsem_write_trylock+0x15b/0x290 [ 1747.544028][T13322] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1747.550277][T13322] copy_mm+0xc7e/0x13e0 [ 1747.554262][T13322] ? irqentry_exit+0x30/0x40 [ 1747.558703][T13322] ? copy_signal+0x610/0x610 [ 1747.563116][T13322] ? __init_rwsem+0xd6/0x1c0 [ 1747.567541][T13322] ? copy_signal+0x4e3/0x610 [ 1747.571970][T13322] copy_process+0x1149/0x3290 [ 1747.576486][T13322] ? irqentry_exit+0x30/0x40 [ 1747.580914][T13322] ? irqentry_exit+0x30/0x40 [ 1747.585334][T13322] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1747.590285][T13322] ? kernel_clone+0x1fa/0x9e0 [ 1747.594797][T13322] kernel_clone+0x21e/0x9e0 [ 1747.599135][T13322] ? file_end_write+0x1c0/0x1c0 [ 1747.603825][T13322] ? create_io_thread+0x1e0/0x1e0 [ 1747.608681][T13322] ? mutex_unlock+0xb2/0x260 [ 1747.613113][T13322] ? __mutex_lock_slowpath+0x10/0x10 [ 1747.618232][T13322] __x64_sys_clone+0x23f/0x290 [ 1747.622828][T13322] ? __do_sys_vfork+0x130/0x130 [ 1747.627515][T13322] ? ksys_write+0x260/0x2c0 [ 1747.631862][T13322] ? debug_smp_processor_id+0x17/0x20 [ 1747.637064][T13322] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1747.642974][T13322] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1747.648437][T13322] do_syscall_64+0x3d/0xb0 [ 1747.652686][T13322] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1747.658328][T13322] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1747.664145][T13322] RIP: 0033:0x7f266d5a0da9 [ 1747.668396][T13322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1747.687842][T13322] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1747.696085][T13322] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xa00000}, 0x36) 05:38:33 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 25) [ 1747.703894][T13322] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1747.711709][T13322] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1747.719519][T13322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1747.727328][T13322] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1747.735154][T13322] 05:38:33 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc002a0}, 0x36) 05:38:33 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x29000000}, 0x36) [ 1747.763934][T13334] FAULT_INJECTION: forcing a failure. [ 1747.763934][T13334] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.782052][T13334] CPU: 1 PID: 13334 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1747.793604][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1747.803500][T13334] Call Trace: [ 1747.806622][T13334] [ 1747.809401][T13334] dump_stack_lvl+0x151/0x1b7 [ 1747.813910][T13334] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1747.819382][T13334] ? __kasan_check_read+0x11/0x20 [ 1747.824238][T13334] ? preempt_schedule_irq+0xe7/0x140 [ 1747.829362][T13334] dump_stack+0x15/0x17 [ 1747.833350][T13334] should_fail+0x3c6/0x510 [ 1747.837605][T13334] __should_failslab+0xa4/0xe0 [ 1747.842202][T13334] should_failslab+0x9/0x20 [ 1747.846628][T13334] slab_pre_alloc_hook+0x37/0xd0 [ 1747.851403][T13334] __kmalloc+0x6d/0x270 [ 1747.855395][T13334] ? kvmalloc_node+0xc1/0x4d0 [ 1747.859907][T13334] ? kvmalloc_node+0x1f0/0x4d0 [ 1747.864518][T13334] kvmalloc_node+0x1f0/0x4d0 [ 1747.868956][T13334] ? vm_mmap+0xb0/0xb0 [ 1747.872839][T13334] ? __kasan_kmalloc+0x9/0x10 [ 1747.877353][T13334] ? kmem_cache_alloc_trace+0x115/0x210 [ 1747.882739][T13334] ? alloc_fdtable+0xaf/0x2a0 [ 1747.887249][T13334] alloc_fdtable+0xeb/0x2a0 [ 1747.891589][T13334] dup_fd+0x759/0xb00 [ 1747.895406][T13334] ? avc_has_perm+0x16f/0x260 [ 1747.899920][T13334] copy_files+0xe6/0x200 [ 1747.903998][T13334] ? perf_event_attrs+0x30/0x30 [ 1747.908685][T13334] ? dup_task_struct+0xc60/0xc60 [ 1747.913459][T13334] ? security_task_alloc+0xf9/0x130 [ 1747.918492][T13334] copy_process+0x1080/0x3290 [ 1747.923010][T13334] ? proc_fail_nth_write+0x20b/0x290 [ 1747.928127][T13334] ? fsnotify_perm+0x6a/0x5d0 [ 1747.932640][T13334] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1747.937587][T13334] ? vfs_write+0x9ec/0x1110 [ 1747.941927][T13334] ? __hrtimer_run_queues+0x46b/0xad0 [ 1747.947136][T13334] kernel_clone+0x21e/0x9e0 [ 1747.951475][T13334] ? file_end_write+0x1c0/0x1c0 [ 1747.956160][T13334] ? create_io_thread+0x1e0/0x1e0 [ 1747.961019][T13334] ? mutex_unlock+0xb2/0x260 [ 1747.965458][T13334] ? __mutex_lock_slowpath+0x10/0x10 [ 1747.970570][T13334] __x64_sys_clone+0x23f/0x290 [ 1747.975168][T13334] ? __do_sys_vfork+0x130/0x130 [ 1747.979857][T13334] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1747.985671][T13334] do_syscall_64+0x3d/0xb0 [ 1747.989925][T13334] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1747.995565][T13334] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1748.001291][T13334] RIP: 0033:0x7f266d5a0da9 [ 1748.005547][T13334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1748.024987][T13334] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1748.033318][T13334] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1748.041133][T13334] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1748.048944][T13334] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1748.056758][T13334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:34 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00080000, 0x0, 0x0, 0x0) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1000000}, 0x36) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1010000}, 0x36) 05:38:34 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 26) [ 1748.064654][T13334] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1748.072467][T13334] 05:38:34 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x30000000}, 0x36) [ 1748.125856][T13349] FAULT_INJECTION: forcing a failure. [ 1748.125856][T13349] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.142720][T13349] CPU: 0 PID: 13349 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1748.154272][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1748.164167][T13349] Call Trace: [ 1748.167288][T13349] [ 1748.170066][T13349] dump_stack_lvl+0x151/0x1b7 [ 1748.174578][T13349] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1748.180050][T13349] dump_stack+0x15/0x17 [ 1748.184036][T13349] should_fail+0x3c6/0x510 [ 1748.188294][T13349] __should_failslab+0xa4/0xe0 [ 1748.192894][T13349] should_failslab+0x9/0x20 [ 1748.197236][T13349] slab_pre_alloc_hook+0x37/0xd0 [ 1748.202003][T13349] __kmalloc+0x6d/0x270 [ 1748.205996][T13349] ? kvmalloc_node+0x1f0/0x4d0 [ 1748.210596][T13349] kvmalloc_node+0x1f0/0x4d0 [ 1748.215025][T13349] ? vm_mmap+0xb0/0xb0 [ 1748.218933][T13349] ? __kasan_kmalloc+0x9/0x10 [ 1748.223441][T13349] ? kmem_cache_alloc_trace+0x115/0x210 [ 1748.228824][T13349] ? alloc_fdtable+0xaf/0x2a0 [ 1748.233337][T13349] alloc_fdtable+0x163/0x2a0 [ 1748.237765][T13349] dup_fd+0x759/0xb00 [ 1748.241580][T13349] ? avc_has_perm+0x16f/0x260 [ 1748.246098][T13349] copy_files+0xe6/0x200 [ 1748.250175][T13349] ? perf_event_attrs+0x30/0x30 [ 1748.254860][T13349] ? dup_task_struct+0xc60/0xc60 [ 1748.259638][T13349] ? security_task_alloc+0xf9/0x130 [ 1748.264673][T13349] copy_process+0x1080/0x3290 [ 1748.269184][T13349] ? proc_fail_nth_write+0x20b/0x290 [ 1748.274305][T13349] ? irqentry_exit_cond_resched+0x2a/0x30 [ 1748.279858][T13349] ? irqentry_exit+0x30/0x40 [ 1748.284285][T13349] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1748.289233][T13349] ? kernel_clone+0x165/0x9e0 [ 1748.293756][T13349] kernel_clone+0x21e/0x9e0 [ 1748.298086][T13349] ? ksys_write+0x219/0x2c0 [ 1748.302428][T13349] ? create_io_thread+0x1e0/0x1e0 [ 1748.307284][T13349] ? mutex_unlock+0xb2/0x260 [ 1748.311713][T13349] ? __mutex_lock_slowpath+0x10/0x10 [ 1748.316836][T13349] __x64_sys_clone+0x23f/0x290 [ 1748.321434][T13349] ? __do_sys_vfork+0x130/0x130 [ 1748.326117][T13349] ? ksys_write+0x260/0x2c0 [ 1748.330460][T13349] ? debug_smp_processor_id+0x17/0x20 [ 1748.335665][T13349] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1748.341567][T13349] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1748.347038][T13349] do_syscall_64+0x3d/0xb0 [ 1748.351288][T13349] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1748.356929][T13349] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1748.362658][T13349] RIP: 0033:0x7f266d5a0da9 [ 1748.366916][T13349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1748.386352][T13349] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1748.394598][T13349] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1748.402410][T13349] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1748.410339][T13349] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1748.418120][T13349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:34 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00c002a0, 0x0, 0x0, 0x0) 05:38:34 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3c000000}, 0x36) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x2000000}, 0x36) 05:38:34 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x3000000}, 0x36) [ 1748.425930][T13349] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1748.433744][T13349] 05:38:34 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3e000000}, 0x36) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x4000000}, 0x36) 05:38:34 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3f000000}, 0x36) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x5000000}, 0x36) 05:38:34 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00f0ff1f, 0x0, 0x0, 0x0) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x6000000}, 0x36) 05:38:34 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x40000000}, 0x36) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7000000}, 0x36) 05:38:34 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 27) 05:38:34 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:34 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff01000000, 0x0, 0x0, 0x0) 05:38:34 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x48000000}, 0x36) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8000000}, 0x36) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x9000000}, 0x36) 05:38:34 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x4c000000}, 0x36) 05:38:34 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xa000000}, 0x36) 05:38:34 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff02000000, 0x0, 0x0, 0x0) [ 1748.700243][T13391] FAULT_INJECTION: forcing a failure. [ 1748.700243][T13391] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.722102][T13391] CPU: 0 PID: 13391 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1748.733656][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1748.743547][T13391] Call Trace: [ 1748.746671][T13391] [ 1748.749450][T13391] dump_stack_lvl+0x151/0x1b7 [ 1748.753962][T13391] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1748.759432][T13391] dump_stack+0x15/0x17 [ 1748.763425][T13391] should_fail+0x3c6/0x510 [ 1748.767676][T13391] __should_failslab+0xa4/0xe0 [ 1748.772275][T13391] ? vm_area_dup+0x26/0x230 [ 1748.776616][T13391] should_failslab+0x9/0x20 [ 1748.780956][T13391] slab_pre_alloc_hook+0x37/0xd0 [ 1748.785726][T13391] ? vm_area_dup+0x26/0x230 [ 1748.790064][T13391] kmem_cache_alloc+0x44/0x200 [ 1748.794667][T13391] vm_area_dup+0x26/0x230 [ 1748.798830][T13391] copy_mm+0x9a1/0x13e0 [ 1748.802820][T13391] ? irqentry_exit+0x30/0x40 [ 1748.807255][T13391] ? copy_signal+0x610/0x610 [ 1748.811677][T13391] ? __init_rwsem+0xd6/0x1c0 [ 1748.816101][T13391] copy_process+0x1149/0x3290 [ 1748.820628][T13391] ? timerqueue_add+0x250/0x270 [ 1748.825311][T13391] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1748.830248][T13391] ? enqueue_hrtimer+0xca/0x240 [ 1748.834936][T13391] ? __hrtimer_run_queues+0x46b/0xad0 [ 1748.840146][T13391] kernel_clone+0x21e/0x9e0 [ 1748.844485][T13391] ? create_io_thread+0x1e0/0x1e0 [ 1748.849345][T13391] ? clockevents_program_event+0x22f/0x300 [ 1748.854985][T13391] __x64_sys_clone+0x23f/0x290 [ 1748.859586][T13391] ? __do_sys_vfork+0x130/0x130 [ 1748.864276][T13391] ? debug_smp_processor_id+0x17/0x20 [ 1748.869480][T13391] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1748.875379][T13391] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1748.880855][T13391] do_syscall_64+0x3d/0xb0 [ 1748.885103][T13391] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1748.890744][T13391] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1748.896471][T13391] RIP: 0033:0x7f266d5a0da9 [ 1748.900726][T13391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1748.920167][T13391] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1748.928410][T13391] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1748.936222][T13391] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x55971400}, 0x36) 05:38:35 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff04000000, 0x0, 0x0, 0x0) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xb000000}, 0x36) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc000000}, 0x36) 05:38:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x60000000}, 0x36) 05:38:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1748.944036][T13391] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1748.951851][T13391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1748.959656][T13391] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1748.967472][T13391] 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xd000000}, 0x36) 05:38:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x61000000}, 0x36) 05:38:35 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff07000000, 0x0, 0x0, 0x0) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xe000000}, 0x36) 05:38:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x62000000}, 0x36) 05:38:35 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 28) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xf000000}, 0x36) 05:38:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x63000000}, 0x36) 05:38:35 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff08000000, 0x0, 0x0, 0x0) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x10000000}, 0x36) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x11000000}, 0x36) 05:38:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x64000000}, 0x36) [ 1749.069385][T13430] FAULT_INJECTION: forcing a failure. [ 1749.069385][T13430] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.111511][T13430] CPU: 1 PID: 13430 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1749.123059][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1749.132953][T13430] Call Trace: [ 1749.136078][T13430] [ 1749.138854][T13430] dump_stack_lvl+0x151/0x1b7 [ 1749.143364][T13430] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1749.148835][T13430] dump_stack+0x15/0x17 [ 1749.152826][T13430] should_fail+0x3c6/0x510 [ 1749.157078][T13430] __should_failslab+0xa4/0xe0 [ 1749.161679][T13430] ? copy_mm+0x192/0x13e0 [ 1749.165845][T13430] should_failslab+0x9/0x20 [ 1749.170184][T13430] slab_pre_alloc_hook+0x37/0xd0 [ 1749.174956][T13430] ? copy_mm+0x192/0x13e0 [ 1749.179175][T13430] kmem_cache_alloc+0x44/0x200 [ 1749.183727][T13430] copy_mm+0x192/0x13e0 [ 1749.187718][T13430] ? _raw_spin_lock+0xa4/0x1b0 [ 1749.192318][T13430] ? _raw_spin_lock+0xa4/0x1b0 [ 1749.196918][T13430] ? copy_signal+0x610/0x610 [ 1749.201342][T13430] ? __kasan_check_write+0x14/0x20 [ 1749.206290][T13430] ? __init_rwsem+0xd6/0x1c0 [ 1749.210718][T13430] ? copy_signal+0x4e3/0x610 [ 1749.215142][T13430] copy_process+0x1149/0x3290 [ 1749.219657][T13430] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1749.225299][T13430] ? vfs_write+0x506/0x1110 [ 1749.229639][T13430] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1749.234586][T13430] ? vfs_write+0x9ec/0x1110 [ 1749.238924][T13430] ? __hrtimer_run_queues+0x46b/0xad0 [ 1749.244132][T13430] kernel_clone+0x21e/0x9e0 [ 1749.248474][T13430] ? irqentry_exit+0x30/0x40 [ 1749.252898][T13430] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1749.258539][T13430] ? create_io_thread+0x1e0/0x1e0 [ 1749.263401][T13430] __x64_sys_clone+0x23f/0x290 [ 1749.268005][T13430] ? __do_sys_vfork+0x130/0x130 [ 1749.272690][T13430] ? ksys_write+0x260/0x2c0 [ 1749.277029][T13430] ? debug_smp_processor_id+0x17/0x20 [ 1749.282247][T13430] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1749.288137][T13430] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1749.293606][T13430] do_syscall_64+0x3d/0xb0 [ 1749.297857][T13430] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1749.303513][T13430] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1749.309225][T13430] RIP: 0033:0x7f266d5a0da9 [ 1749.313484][T13430] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1749.332928][T13430] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1749.341168][T13430] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1749.348977][T13430] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x12000000}, 0x36) 05:38:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x68000000}, 0x36) 05:38:35 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff09000000, 0x0, 0x0, 0x0) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x13000000}, 0x36) [ 1749.356795][T13430] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1749.364602][T13430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1749.372411][T13430] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1749.380228][T13430] 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x18000000}, 0x36) 05:38:35 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 29) 05:38:35 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff0f000000, 0x0, 0x0, 0x0) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x188102a0}, 0x36) 05:38:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x69000000}, 0x36) 05:38:35 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6a000000}, 0x36) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1f000000}, 0x36) [ 1749.479301][T13457] FAULT_INJECTION: forcing a failure. [ 1749.479301][T13457] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.513047][T13457] CPU: 0 PID: 13457 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1749.524608][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1749.534493][T13457] Call Trace: [ 1749.537621][T13457] [ 1749.540396][T13457] dump_stack_lvl+0x151/0x1b7 [ 1749.544907][T13457] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1749.550376][T13457] ? ___ratelimit+0x456/0x5a0 [ 1749.554887][T13457] dump_stack+0x15/0x17 [ 1749.558896][T13457] should_fail+0x3c6/0x510 [ 1749.563136][T13457] __should_failslab+0xa4/0xe0 [ 1749.567735][T13457] ? copy_mm+0x192/0x13e0 [ 1749.571901][T13457] should_failslab+0x9/0x20 [ 1749.576240][T13457] slab_pre_alloc_hook+0x37/0xd0 [ 1749.581016][T13457] ? copy_mm+0x192/0x13e0 [ 1749.585179][T13457] kmem_cache_alloc+0x44/0x200 [ 1749.589792][T13457] copy_mm+0x192/0x13e0 [ 1749.593777][T13457] ? _raw_spin_lock+0xa4/0x1b0 [ 1749.598373][T13457] ? copy_signal+0x610/0x610 [ 1749.602813][T13457] ? __kasan_check_write+0x14/0x20 [ 1749.607759][T13457] ? __init_rwsem+0xd6/0x1c0 [ 1749.612176][T13457] ? copy_signal+0x4e3/0x610 [ 1749.616602][T13457] copy_process+0x1149/0x3290 [ 1749.621118][T13457] ? timerqueue_add+0x250/0x270 [ 1749.625816][T13457] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1749.630759][T13457] kernel_clone+0x21e/0x9e0 [ 1749.635089][T13457] ? create_io_thread+0x1e0/0x1e0 [ 1749.639961][T13457] __x64_sys_clone+0x23f/0x290 [ 1749.644563][T13457] ? __do_sys_vfork+0x130/0x130 [ 1749.649338][T13457] ? debug_smp_processor_id+0x17/0x20 [ 1749.654530][T13457] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1749.660430][T13457] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1749.665899][T13457] do_syscall_64+0x3d/0xb0 [ 1749.670149][T13457] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1749.675802][T13457] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1749.681521][T13457] RIP: 0033:0x7f266d5a0da9 [ 1749.685794][T13457] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1749.705223][T13457] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1749.713466][T13457] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1749.721360][T13457] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:35 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:35 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 30) [ 1749.729171][T13457] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1749.736982][T13457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1749.744797][T13457] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1749.752616][T13457] 05:38:35 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff0fffffff, 0x0, 0x0, 0x0) 05:38:35 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x20000000}, 0x36) [ 1749.775086][T13472] FAULT_INJECTION: forcing a failure. [ 1749.775086][T13472] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.788646][T13472] CPU: 1 PID: 13472 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1749.800195][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1749.810089][T13472] Call Trace: [ 1749.813211][T13472] [ 1749.815988][T13472] dump_stack_lvl+0x151/0x1b7 [ 1749.820500][T13472] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1749.826055][T13472] ? slab_post_alloc_hook+0x53/0x2c0 [ 1749.831177][T13472] ? kernel_clone+0x21e/0x9e0 [ 1749.835692][T13472] ? do_syscall_64+0x3d/0xb0 [ 1749.840114][T13472] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1749.846027][T13472] dump_stack+0x15/0x17 [ 1749.850011][T13472] should_fail+0x3c6/0x510 [ 1749.854264][T13472] __should_failslab+0xa4/0xe0 [ 1749.858864][T13472] ? copy_mm+0x192/0x13e0 [ 1749.863030][T13472] should_failslab+0x9/0x20 [ 1749.867368][T13472] slab_pre_alloc_hook+0x37/0xd0 [ 1749.872147][T13472] ? copy_mm+0x192/0x13e0 [ 1749.876321][T13472] kmem_cache_alloc+0x44/0x200 [ 1749.880909][T13472] copy_mm+0x192/0x13e0 [ 1749.884903][T13472] ? _raw_spin_lock+0xa4/0x1b0 [ 1749.889507][T13472] ? copy_signal+0x610/0x610 [ 1749.893927][T13472] ? __kasan_check_write+0x14/0x20 [ 1749.898874][T13472] ? __init_rwsem+0xd6/0x1c0 [ 1749.903300][T13472] ? copy_signal+0x4e3/0x610 [ 1749.907728][T13472] copy_process+0x1149/0x3290 [ 1749.912241][T13472] ? irqentry_exit+0x30/0x40 [ 1749.916670][T13472] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1749.921617][T13472] ? kernel_clone+0xb7/0x9e0 [ 1749.926040][T13472] kernel_clone+0x21e/0x9e0 [ 1749.930382][T13472] ? create_io_thread+0x1e0/0x1e0 [ 1749.935241][T13472] ? clockevents_program_event+0x22f/0x300 [ 1749.940884][T13472] __x64_sys_clone+0x23f/0x290 [ 1749.945484][T13472] ? __do_sys_vfork+0x130/0x130 [ 1749.950170][T13472] ? debug_smp_processor_id+0x17/0x20 [ 1749.955375][T13472] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1749.961282][T13472] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1749.966747][T13472] do_syscall_64+0x3d/0xb0 [ 1749.971000][T13472] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1749.976643][T13472] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1749.982392][T13472] RIP: 0033:0x7f266d5a0da9 [ 1749.986624][T13472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1750.006067][T13472] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1750.014309][T13472] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:36 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6b000000}, 0x36) 05:38:36 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 31) [ 1750.022123][T13472] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1750.029933][T13472] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1750.037744][T13472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1750.045555][T13472] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1750.053376][T13472] 05:38:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x21000000}, 0x36) [ 1750.096107][T13479] FAULT_INJECTION: forcing a failure. [ 1750.096107][T13479] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.120255][T13479] CPU: 0 PID: 13479 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1750.131812][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1750.141699][T13479] Call Trace: [ 1750.144822][T13479] [ 1750.147599][T13479] dump_stack_lvl+0x151/0x1b7 [ 1750.152114][T13479] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1750.157588][T13479] dump_stack+0x15/0x17 [ 1750.161577][T13479] should_fail+0x3c6/0x510 [ 1750.165828][T13479] __should_failslab+0xa4/0xe0 [ 1750.170432][T13479] should_failslab+0x9/0x20 [ 1750.174763][T13479] slab_pre_alloc_hook+0x37/0xd0 [ 1750.179539][T13479] kmem_cache_alloc_trace+0x48/0x210 [ 1750.184660][T13479] ? mm_init+0x39a/0x970 [ 1750.188738][T13479] mm_init+0x39a/0x970 [ 1750.192644][T13479] copy_mm+0x1e3/0x13e0 [ 1750.196637][T13479] ? irqentry_exit+0x30/0x40 [ 1750.201061][T13479] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1750.206703][T13479] ? copy_signal+0x610/0x610 [ 1750.211130][T13479] ? __kasan_check_write+0x14/0x20 [ 1750.216078][T13479] ? __init_rwsem+0xd6/0x1c0 [ 1750.220506][T13479] ? copy_signal+0x4e3/0x610 [ 1750.224930][T13479] copy_process+0x1149/0x3290 [ 1750.229445][T13479] ? proc_fail_nth_write+0x20b/0x290 [ 1750.234567][T13479] ? fsnotify_perm+0x6a/0x5d0 [ 1750.239079][T13479] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1750.244026][T13479] ? vfs_write+0x9ec/0x1110 [ 1750.248364][T13479] ? __hrtimer_run_queues+0x46b/0xad0 [ 1750.253571][T13479] kernel_clone+0x21e/0x9e0 [ 1750.257914][T13479] ? create_io_thread+0x1e0/0x1e0 [ 1750.262772][T13479] ? mutex_unlock+0xb2/0x260 [ 1750.267199][T13479] ? __mutex_lock_slowpath+0x10/0x10 [ 1750.272320][T13479] __x64_sys_clone+0x23f/0x290 [ 1750.276921][T13479] ? __do_sys_vfork+0x130/0x130 [ 1750.281607][T13479] ? ksys_write+0x260/0x2c0 [ 1750.285948][T13479] ? debug_smp_processor_id+0x17/0x20 [ 1750.291154][T13479] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1750.297057][T13479] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1750.302538][T13479] do_syscall_64+0x3d/0xb0 [ 1750.306775][T13479] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1750.312418][T13479] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1750.318147][T13479] RIP: 0033:0x7f266d5a0da9 [ 1750.322400][T13479] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:38:36 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff1f000000, 0x0, 0x0, 0x0) 05:38:36 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6c000000}, 0x36) 05:38:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x25000000}, 0x36) 05:38:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:36 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6c8202a0}, 0x36) [ 1750.341843][T13479] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1750.350085][T13479] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1750.357909][T13479] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1750.365709][T13479] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1750.373521][T13479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1750.381332][T13479] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1750.389145][T13479] 05:38:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x29000000}, 0x36) 05:38:36 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 32) 05:38:36 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x70000000}, 0x36) 05:38:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x30000000}, 0x36) [ 1750.469130][T13500] FAULT_INJECTION: forcing a failure. [ 1750.469130][T13500] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.485287][T13500] CPU: 0 PID: 13500 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1750.496832][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1750.506729][T13500] Call Trace: [ 1750.509853][T13500] [ 1750.512631][T13500] dump_stack_lvl+0x151/0x1b7 [ 1750.517144][T13500] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1750.522697][T13500] ? __alloc_pages+0x27e/0x8f0 [ 1750.527299][T13500] dump_stack+0x15/0x17 [ 1750.531289][T13500] should_fail+0x3c6/0x510 [ 1750.535544][T13500] __should_failslab+0xa4/0xe0 [ 1750.540143][T13500] ? vm_area_dup+0x26/0x230 [ 1750.544480][T13500] should_failslab+0x9/0x20 [ 1750.548934][T13500] slab_pre_alloc_hook+0x37/0xd0 [ 1750.553701][T13500] ? vm_area_dup+0x26/0x230 [ 1750.558050][T13500] kmem_cache_alloc+0x44/0x200 [ 1750.562641][T13500] vm_area_dup+0x26/0x230 [ 1750.566817][T13500] copy_mm+0x9a1/0x13e0 [ 1750.570800][T13500] ? copy_signal+0x610/0x610 [ 1750.575229][T13500] copy_process+0x1149/0x3290 [ 1750.579742][T13500] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1750.585383][T13500] ? vfs_write+0x9d0/0x1110 [ 1750.589721][T13500] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1750.594670][T13500] ? vfs_write+0x9ec/0x1110 [ 1750.599003][T13500] ? __hrtimer_run_queues+0x46b/0xad0 [ 1750.604212][T13500] kernel_clone+0x21e/0x9e0 [ 1750.608553][T13500] ? file_end_write+0x1c0/0x1c0 [ 1750.613327][T13500] ? create_io_thread+0x1e0/0x1e0 [ 1750.618187][T13500] ? mutex_unlock+0xb2/0x260 [ 1750.622613][T13500] ? __mutex_lock_slowpath+0x10/0x10 [ 1750.627735][T13500] __x64_sys_clone+0x23f/0x290 [ 1750.632338][T13500] ? __do_sys_vfork+0x130/0x130 [ 1750.637019][T13500] ? ksys_write+0x260/0x2c0 [ 1750.641448][T13500] ? debug_smp_processor_id+0x17/0x20 [ 1750.646653][T13500] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1750.652556][T13500] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1750.658025][T13500] do_syscall_64+0x3d/0xb0 [ 1750.662287][T13500] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1750.667923][T13500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1750.673646][T13500] RIP: 0033:0x7f266d5a0da9 [ 1750.677988][T13500] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1750.697428][T13500] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1750.705675][T13500] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:36 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 33) 05:38:36 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x71000000}, 0x36) 05:38:36 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff1ffff000, 0x0, 0x0, 0x0) 05:38:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x3c000000}, 0x36) [ 1750.713486][T13500] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1750.721305][T13500] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1750.729117][T13500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1750.736923][T13500] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1750.744894][T13500] 05:38:36 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x72000000}, 0x36) 05:38:36 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x3e000000}, 0x36) [ 1750.809741][T13511] FAULT_INJECTION: forcing a failure. [ 1750.809741][T13511] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.855266][T13511] CPU: 1 PID: 13511 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1750.866817][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1750.876711][T13511] Call Trace: [ 1750.879833][T13511] [ 1750.882613][T13511] dump_stack_lvl+0x151/0x1b7 [ 1750.887129][T13511] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1750.892592][T13511] ? avc_denied+0x1b0/0x1b0 [ 1750.896932][T13511] dump_stack+0x15/0x17 [ 1750.900935][T13511] should_fail+0x3c6/0x510 [ 1750.905180][T13511] __should_failslab+0xa4/0xe0 [ 1750.909776][T13511] ? vm_area_dup+0x26/0x230 [ 1750.914126][T13511] should_failslab+0x9/0x20 [ 1750.918455][T13511] slab_pre_alloc_hook+0x37/0xd0 [ 1750.923229][T13511] ? vm_area_dup+0x26/0x230 [ 1750.927574][T13511] kmem_cache_alloc+0x44/0x200 [ 1750.932175][T13511] vm_area_dup+0x26/0x230 [ 1750.936336][T13511] copy_mm+0x9a1/0x13e0 [ 1750.940336][T13511] ? copy_signal+0x610/0x610 [ 1750.944762][T13511] ? __init_rwsem+0xd6/0x1c0 [ 1750.949181][T13511] ? copy_signal+0x4e3/0x610 [ 1750.953607][T13511] copy_process+0x1149/0x3290 [ 1750.958126][T13511] ? proc_fail_nth_write+0x20b/0x290 [ 1750.963243][T13511] ? fsnotify_perm+0x6a/0x5d0 [ 1750.967771][T13511] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1750.972792][T13511] ? vfs_write+0x9ec/0x1110 [ 1750.977125][T13511] ? irqentry_exit+0x30/0x40 [ 1750.981571][T13511] kernel_clone+0x21e/0x9e0 [ 1750.985902][T13511] ? create_io_thread+0x1e0/0x1e0 [ 1750.990763][T13511] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1750.996745][T13511] __x64_sys_clone+0x23f/0x290 [ 1751.001345][T13511] ? __do_sys_vfork+0x130/0x130 [ 1751.006029][T13511] ? ksys_write+0x260/0x2c0 [ 1751.010372][T13511] ? debug_smp_processor_id+0x17/0x20 [ 1751.015578][T13511] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1751.021483][T13511] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1751.026947][T13511] do_syscall_64+0x3d/0xb0 [ 1751.031201][T13511] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1751.036849][T13511] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1751.042569][T13511] RIP: 0033:0x7f266d5a0da9 [ 1751.046828][T13511] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1751.066355][T13511] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1751.074599][T13511] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1751.082408][T13511] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1751.090221][T13511] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1751.098026][T13511] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:37 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff20000000, 0x0, 0x0, 0x0) 05:38:37 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x73000000}, 0x36) 05:38:37 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 34) 05:38:37 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x74000000}, 0x36) 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x3f000000}, 0x36) 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x40000000}, 0x36) 05:38:37 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:37 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff3f000000, 0x0, 0x0, 0x0) [ 1751.105837][T13511] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1751.113662][T13511] 05:38:37 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x79000000}, 0x36) [ 1751.168837][T13528] FAULT_INJECTION: forcing a failure. [ 1751.168837][T13528] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.207239][T13528] CPU: 1 PID: 13528 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x48000000}, 0x36) 05:38:37 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7a000000}, 0x36) 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x4c000000}, 0x36) [ 1751.218793][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1751.228789][T13528] Call Trace: [ 1751.231897][T13528] [ 1751.234677][T13528] dump_stack_lvl+0x151/0x1b7 [ 1751.239189][T13528] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1751.244656][T13528] dump_stack+0x15/0x17 [ 1751.248647][T13528] should_fail+0x3c6/0x510 [ 1751.252902][T13528] __should_failslab+0xa4/0xe0 [ 1751.257499][T13528] ? anon_vma_fork+0x1df/0x4e0 [ 1751.262098][T13528] should_failslab+0x9/0x20 [ 1751.266437][T13528] slab_pre_alloc_hook+0x37/0xd0 [ 1751.271212][T13528] ? anon_vma_fork+0x1df/0x4e0 [ 1751.275808][T13528] kmem_cache_alloc+0x44/0x200 [ 1751.280410][T13528] anon_vma_fork+0x1df/0x4e0 [ 1751.284837][T13528] copy_mm+0xa3a/0x13e0 [ 1751.288830][T13528] ? copy_signal+0x610/0x610 [ 1751.293256][T13528] ? __init_rwsem+0xd6/0x1c0 [ 1751.297682][T13528] ? copy_signal+0x4e3/0x610 [ 1751.302108][T13528] copy_process+0x1149/0x3290 [ 1751.306625][T13528] ? timerqueue_add+0x250/0x270 [ 1751.311308][T13528] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1751.316254][T13528] ? enqueue_hrtimer+0xca/0x240 [ 1751.320941][T13528] ? __hrtimer_run_queues+0x46b/0xad0 [ 1751.326151][T13528] kernel_clone+0x21e/0x9e0 [ 1751.330497][T13528] ? create_io_thread+0x1e0/0x1e0 [ 1751.335348][T13528] ? clockevents_program_event+0x22f/0x300 [ 1751.340992][T13528] __x64_sys_clone+0x23f/0x290 [ 1751.345592][T13528] ? __do_sys_vfork+0x130/0x130 [ 1751.350278][T13528] ? debug_smp_processor_id+0x17/0x20 [ 1751.355486][T13528] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1751.361388][T13528] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1751.366854][T13528] do_syscall_64+0x3d/0xb0 [ 1751.371106][T13528] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1751.376755][T13528] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1751.382477][T13528] RIP: 0033:0x7f266d5a0da9 [ 1751.386743][T13528] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1751.406172][T13528] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:37 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff40000000, 0x0, 0x0, 0x0) 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x60000000}, 0x36) 05:38:37 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 35) [ 1751.414416][T13528] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1751.422228][T13528] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1751.430048][T13528] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1751.437853][T13528] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1751.445751][T13528] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1751.453565][T13528] [ 1751.482912][T13550] FAULT_INJECTION: forcing a failure. [ 1751.482912][T13550] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.508037][T13550] CPU: 1 PID: 13550 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1751.519587][T13550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1751.529480][T13550] Call Trace: [ 1751.532603][T13550] [ 1751.535378][T13550] dump_stack_lvl+0x151/0x1b7 [ 1751.539889][T13550] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1751.545358][T13550] dump_stack+0x15/0x17 [ 1751.549349][T13550] should_fail+0x3c6/0x510 [ 1751.553604][T13550] __should_failslab+0xa4/0xe0 [ 1751.558202][T13550] ? anon_vma_clone+0x9a/0x500 [ 1751.562802][T13550] should_failslab+0x9/0x20 [ 1751.567141][T13550] slab_pre_alloc_hook+0x37/0xd0 [ 1751.571928][T13550] ? anon_vma_clone+0x9a/0x500 [ 1751.576517][T13550] kmem_cache_alloc+0x44/0x200 [ 1751.581118][T13550] anon_vma_clone+0x9a/0x500 [ 1751.585547][T13550] anon_vma_fork+0x91/0x4e0 [ 1751.589971][T13550] ? anon_vma_name+0x4c/0x70 [ 1751.594395][T13550] ? vm_area_dup+0x17a/0x230 [ 1751.598831][T13550] copy_mm+0xa3a/0x13e0 [ 1751.602826][T13550] ? copy_signal+0x610/0x610 [ 1751.607241][T13550] ? __init_rwsem+0xd6/0x1c0 [ 1751.611667][T13550] ? copy_signal+0x4e3/0x610 [ 1751.616094][T13550] copy_process+0x1149/0x3290 [ 1751.620609][T13550] ? timerqueue_add+0x250/0x270 [ 1751.625296][T13550] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1751.630241][T13550] ? enqueue_hrtimer+0xca/0x240 [ 1751.634925][T13550] ? __hrtimer_run_queues+0x46b/0xad0 [ 1751.640147][T13550] kernel_clone+0x21e/0x9e0 [ 1751.644479][T13550] ? create_io_thread+0x1e0/0x1e0 [ 1751.649334][T13550] ? clockevents_program_event+0x22f/0x300 [ 1751.654981][T13550] __x64_sys_clone+0x23f/0x290 [ 1751.659578][T13550] ? __do_sys_vfork+0x130/0x130 [ 1751.664266][T13550] ? debug_smp_processor_id+0x17/0x20 [ 1751.669477][T13550] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1751.675374][T13550] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1751.680840][T13550] do_syscall_64+0x3d/0xb0 [ 1751.685096][T13550] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1751.690743][T13550] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1751.696464][T13550] RIP: 0033:0x7f266d5a0da9 [ 1751.700727][T13550] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1751.720165][T13550] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x61000000}, 0x36) 05:38:37 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7b000000}, 0x36) 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x62000000}, 0x36) 05:38:37 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:37 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff41000000, 0x0, 0x0, 0x0) [ 1751.728404][T13550] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1751.736219][T13550] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1751.744026][T13550] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1751.751839][T13550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1751.759659][T13550] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1751.767476][T13550] 05:38:37 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x80ffffff}, 0x36) 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x63000000}, 0x36) 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x64000000}, 0x36) 05:38:37 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x68000000}, 0x36) 05:38:37 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 36) 05:38:37 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x83000000}, 0x36) 05:38:38 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffffa002c000, 0x0, 0x0, 0x0) 05:38:38 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x85ffffff}, 0x36) 05:38:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x69000000}, 0x36) [ 1751.872240][T13573] FAULT_INJECTION: forcing a failure. [ 1751.872240][T13573] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1751.894184][T13573] CPU: 1 PID: 13573 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1751.905730][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1751.915629][T13573] Call Trace: [ 1751.918750][T13573] 05:38:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x6a000000}, 0x36) 05:38:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x6b000000}, 0x36) 05:38:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x6c000000}, 0x36) [ 1751.921527][T13573] dump_stack_lvl+0x151/0x1b7 [ 1751.926040][T13573] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1751.931510][T13573] dump_stack+0x15/0x17 [ 1751.935499][T13573] should_fail+0x3c6/0x510 [ 1751.939756][T13573] should_fail_alloc_page+0x5a/0x80 [ 1751.944788][T13573] prepare_alloc_pages+0x15c/0x700 [ 1751.949736][T13573] ? __alloc_pages_bulk+0xe40/0xe40 [ 1751.954771][T13573] __alloc_pages+0x18c/0x8f0 [ 1751.959197][T13573] ? prep_new_page+0x110/0x110 [ 1751.963812][T13573] ? __alloc_pages+0x27e/0x8f0 [ 1751.968398][T13573] ? __kasan_check_write+0x14/0x20 [ 1751.973341][T13573] ? _raw_spin_lock+0xa4/0x1b0 [ 1751.977942][T13573] __pmd_alloc+0xb1/0x550 [ 1751.982105][T13573] ? __pud_alloc+0x260/0x260 [ 1751.986530][T13573] ? __pud_alloc+0x213/0x260 [ 1751.990957][T13573] ? do_handle_mm_fault+0x2330/0x2330 [ 1751.996166][T13573] ? __stack_depot_save+0x34/0x470 [ 1752.001111][T13573] copy_page_range+0x2b3d/0x2f90 [ 1752.005884][T13573] ? __kasan_slab_alloc+0xb1/0xe0 [ 1752.010744][T13573] ? slab_post_alloc_hook+0x53/0x2c0 [ 1752.015866][T13573] ? copy_mm+0xa3a/0x13e0 [ 1752.020031][T13573] ? copy_process+0x1149/0x3290 [ 1752.024717][T13573] ? kernel_clone+0x21e/0x9e0 [ 1752.029231][T13573] ? do_syscall_64+0x3d/0xb0 [ 1752.033659][T13573] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1752.039568][T13573] ? pfn_valid+0x1e0/0x1e0 [ 1752.043813][T13573] ? irqentry_exit+0x30/0x40 [ 1752.048238][T13573] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1752.053881][T13573] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1752.059439][T13573] ? __rb_insert_augmented+0x5de/0x610 [ 1752.064730][T13573] ? __vma_link_rb+0x374/0x550 [ 1752.069333][T13573] copy_mm+0xc7e/0x13e0 [ 1752.073327][T13573] ? copy_signal+0x610/0x610 [ 1752.077751][T13573] ? __init_rwsem+0xd6/0x1c0 [ 1752.082175][T13573] ? copy_signal+0x4e3/0x610 [ 1752.086606][T13573] copy_process+0x1149/0x3290 [ 1752.091117][T13573] ? proc_fail_nth_write+0x20b/0x290 [ 1752.096242][T13573] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1752.101186][T13573] kernel_clone+0x21e/0x9e0 [ 1752.105527][T13573] ? file_end_write+0x1c0/0x1c0 [ 1752.110211][T13573] ? create_io_thread+0x1e0/0x1e0 [ 1752.115069][T13573] ? mutex_unlock+0xb2/0x260 [ 1752.119497][T13573] ? __mutex_lock_slowpath+0x10/0x10 [ 1752.124619][T13573] __x64_sys_clone+0x23f/0x290 [ 1752.129222][T13573] ? __do_sys_vfork+0x130/0x130 [ 1752.133907][T13573] ? ksys_write+0x260/0x2c0 [ 1752.138246][T13573] ? debug_smp_processor_id+0x17/0x20 [ 1752.143451][T13573] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1752.149355][T13573] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1752.154823][T13573] do_syscall_64+0x3d/0xb0 [ 1752.159075][T13573] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1752.164719][T13573] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1752.170446][T13573] RIP: 0033:0x7f266d5a0da9 [ 1752.174703][T13573] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1752.194146][T13573] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1752.202386][T13573] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1752.210199][T13573] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x70000000}, 0x36) 05:38:38 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x90ffffff}, 0x36) 05:38:38 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 37) [ 1752.218008][T13573] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1752.225821][T13573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1752.233632][T13573] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1752.241447][T13573] 05:38:38 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x9cffffff}, 0x36) 05:38:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x71000000}, 0x36) 05:38:38 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xfffffffff5ffffff, 0x0, 0x0, 0x0) [ 1752.296234][T13597] FAULT_INJECTION: forcing a failure. [ 1752.296234][T13597] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1752.315373][T13597] CPU: 1 PID: 13597 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1752.326915][T13597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1752.336806][T13597] Call Trace: [ 1752.339929][T13597] [ 1752.342707][T13597] dump_stack_lvl+0x151/0x1b7 [ 1752.347219][T13597] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1752.352688][T13597] dump_stack+0x15/0x17 [ 1752.356679][T13597] should_fail+0x3c6/0x510 [ 1752.360932][T13597] should_fail_alloc_page+0x5a/0x80 [ 1752.365964][T13597] prepare_alloc_pages+0x15c/0x700 [ 1752.370914][T13597] ? __alloc_pages_bulk+0xe40/0xe40 [ 1752.375948][T13597] __alloc_pages+0x18c/0x8f0 [ 1752.380374][T13597] ? prep_new_page+0x110/0x110 [ 1752.384977][T13597] ? __kasan_check_write+0x14/0x20 [ 1752.389921][T13597] ? _raw_spin_lock+0xa4/0x1b0 [ 1752.394522][T13597] pte_alloc_one+0x73/0x1b0 [ 1752.398860][T13597] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1752.403896][T13597] ? __pmd_alloc+0x48d/0x550 [ 1752.408324][T13597] __pte_alloc+0x86/0x350 [ 1752.412487][T13597] ? __pud_alloc+0x260/0x260 [ 1752.416914][T13597] ? __pud_alloc+0x213/0x260 [ 1752.421340][T13597] ? free_pgtables+0x280/0x280 [ 1752.425941][T13597] ? do_handle_mm_fault+0x2330/0x2330 [ 1752.431146][T13597] ? __stack_depot_save+0x34/0x470 [ 1752.436094][T13597] ? anon_vma_clone+0x9a/0x500 [ 1752.440696][T13597] copy_page_range+0x28a8/0x2f90 [ 1752.445478][T13597] ? __kasan_slab_alloc+0xb1/0xe0 [ 1752.450329][T13597] ? slab_post_alloc_hook+0x53/0x2c0 [ 1752.455450][T13597] ? kernel_clone+0x21e/0x9e0 [ 1752.459962][T13597] ? do_syscall_64+0x3d/0xb0 [ 1752.464392][T13597] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1752.470297][T13597] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1752.475934][T13597] ? pfn_valid+0x1e0/0x1e0 [ 1752.480185][T13597] ? __sanitizer_cov_trace_pc+0x49/0x60 [ 1752.485567][T13597] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1752.491817][T13597] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1752.497371][T13597] ? __rb_insert_augmented+0x5de/0x610 [ 1752.502671][T13597] copy_mm+0xc7e/0x13e0 [ 1752.506659][T13597] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1752.512301][T13597] ? copy_signal+0x610/0x610 [ 1752.516727][T13597] ? __init_rwsem+0xd6/0x1c0 [ 1752.521155][T13597] ? copy_signal+0x4e3/0x610 [ 1752.525579][T13597] copy_process+0x1149/0x3290 [ 1752.530093][T13597] ? proc_fail_nth_write+0x20b/0x290 [ 1752.535222][T13597] ? fsnotify_perm+0x6a/0x5d0 [ 1752.539727][T13597] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1752.544675][T13597] ? vfs_write+0x9ec/0x1110 [ 1752.549013][T13597] ? __hrtimer_run_queues+0x46b/0xad0 [ 1752.554226][T13597] kernel_clone+0x21e/0x9e0 [ 1752.558565][T13597] ? irqentry_exit+0x30/0x40 [ 1752.562987][T13597] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1752.568628][T13597] ? create_io_thread+0x1e0/0x1e0 [ 1752.573493][T13597] __x64_sys_clone+0x23f/0x290 [ 1752.578091][T13597] ? __do_sys_vfork+0x130/0x130 [ 1752.582774][T13597] ? ksys_write+0x260/0x2c0 [ 1752.587118][T13597] ? debug_smp_processor_id+0x17/0x20 [ 1752.592323][T13597] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1752.598226][T13597] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1752.603693][T13597] do_syscall_64+0x3d/0xb0 [ 1752.607946][T13597] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1752.613587][T13597] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1752.619316][T13597] RIP: 0033:0x7f266d5a0da9 [ 1752.623573][T13597] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:38:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x72000000}, 0x36) 05:38:38 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:38 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 38) 05:38:38 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x9fffffff}, 0x36) [ 1752.643011][T13597] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1752.651255][T13597] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1752.659069][T13597] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1752.666878][T13597] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1752.674688][T13597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1752.682503][T13597] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1752.690318][T13597] 05:38:38 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xfffffffffbffffff, 0x0, 0x0, 0x0) 05:38:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x73000000}, 0x36) 05:38:38 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa002826c}, 0x36) 05:38:38 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xfffffffffeffffff, 0x0, 0x0, 0x0) [ 1752.743947][T13610] FAULT_INJECTION: forcing a failure. [ 1752.743947][T13610] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.774813][T13610] CPU: 1 PID: 13610 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 05:38:38 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x74000000}, 0x36) [ 1752.786375][T13610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1752.796267][T13610] Call Trace: [ 1752.799391][T13610] [ 1752.802164][T13610] dump_stack_lvl+0x151/0x1b7 [ 1752.806689][T13610] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1752.812153][T13610] dump_stack+0x15/0x17 [ 1752.816142][T13610] should_fail+0x3c6/0x510 [ 1752.820395][T13610] __should_failslab+0xa4/0xe0 [ 1752.824994][T13610] ? vm_area_dup+0x26/0x230 [ 1752.829327][T13610] should_failslab+0x9/0x20 [ 1752.833681][T13610] slab_pre_alloc_hook+0x37/0xd0 [ 1752.838441][T13610] ? vm_area_dup+0x26/0x230 [ 1752.842784][T13610] kmem_cache_alloc+0x44/0x200 [ 1752.847383][T13610] vm_area_dup+0x26/0x230 [ 1752.851547][T13610] copy_mm+0x9a1/0x13e0 [ 1752.855544][T13610] ? copy_signal+0x610/0x610 [ 1752.859966][T13610] ? __init_rwsem+0xd6/0x1c0 [ 1752.864393][T13610] ? copy_signal+0x4e3/0x610 [ 1752.868819][T13610] copy_process+0x1149/0x3290 [ 1752.873340][T13610] ? proc_fail_nth_write+0x20b/0x290 [ 1752.878453][T13610] ? fsnotify_perm+0x6a/0x5d0 [ 1752.882968][T13610] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1752.887918][T13610] ? vfs_write+0x9ec/0x1110 [ 1752.892251][T13610] ? __hrtimer_run_queues+0x46b/0xad0 [ 1752.897461][T13610] kernel_clone+0x21e/0x9e0 [ 1752.901801][T13610] ? irqentry_exit+0x30/0x40 [ 1752.906225][T13610] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1752.911868][T13610] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1752.917873][T13610] ? create_io_thread+0x1e0/0x1e0 [ 1752.922726][T13610] ? fput_many+0x42/0x1b0 [ 1752.926889][T13610] ? fput_many+0x28/0x1b0 [ 1752.931051][T13610] __x64_sys_clone+0x23f/0x290 [ 1752.935653][T13610] ? __do_sys_vfork+0x130/0x130 [ 1752.940341][T13610] ? ksys_write+0x260/0x2c0 [ 1752.944679][T13610] ? debug_smp_processor_id+0x17/0x20 [ 1752.949885][T13610] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1752.955785][T13610] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1752.961256][T13610] do_syscall_64+0x3d/0xb0 [ 1752.965508][T13610] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1752.971149][T13610] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1752.976876][T13610] RIP: 0033:0x7f266d5a0da9 [ 1752.981137][T13610] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1753.000657][T13610] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1753.008904][T13610] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1753.016715][T13610] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1753.024527][T13610] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1753.032340][T13610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:39 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x79000000}, 0x36) 05:38:39 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 39) 05:38:39 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7a000000}, 0x36) 05:38:39 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffffffff0300, 0x0, 0x0, 0x0) [ 1753.040149][T13610] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1753.047963][T13610] 05:38:39 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa002c000}, 0x36) 05:38:39 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x7b000000}, 0x36) 05:38:39 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x80ffffff}, 0x36) [ 1753.128221][T13637] FAULT_INJECTION: forcing a failure. [ 1753.128221][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.142409][T13637] CPU: 1 PID: 13637 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1753.153944][T13637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1753.163843][T13637] Call Trace: [ 1753.166964][T13637] [ 1753.169744][T13637] dump_stack_lvl+0x151/0x1b7 [ 1753.174255][T13637] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1753.179719][T13637] ? avc_denied+0x1b0/0x1b0 [ 1753.184069][T13637] dump_stack+0x15/0x17 [ 1753.188056][T13637] should_fail+0x3c6/0x510 [ 1753.192302][T13637] __should_failslab+0xa4/0xe0 [ 1753.196906][T13637] ? vm_area_dup+0x26/0x230 [ 1753.201241][T13637] should_failslab+0x9/0x20 [ 1753.205587][T13637] slab_pre_alloc_hook+0x37/0xd0 [ 1753.210354][T13637] ? vm_area_dup+0x26/0x230 [ 1753.214696][T13637] kmem_cache_alloc+0x44/0x200 [ 1753.219298][T13637] vm_area_dup+0x26/0x230 [ 1753.223463][T13637] copy_mm+0x9a1/0x13e0 [ 1753.227461][T13637] ? copy_signal+0x610/0x610 [ 1753.231879][T13637] ? __init_rwsem+0xd6/0x1c0 [ 1753.236310][T13637] ? copy_signal+0x4e3/0x610 [ 1753.240732][T13637] copy_process+0x1149/0x3290 [ 1753.245246][T13637] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1753.251235][T13637] ? _raw_write_unlock_irqrestore+0x70/0x70 [ 1753.256963][T13637] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1753.261909][T13637] ? vfs_write+0x9ec/0x1110 [ 1753.266248][T13637] ? __hrtimer_run_queues+0x46b/0xad0 [ 1753.271458][T13637] kernel_clone+0x21e/0x9e0 [ 1753.275796][T13637] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1753.281441][T13637] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1753.287429][T13637] ? create_io_thread+0x1e0/0x1e0 [ 1753.292290][T13637] ? memset_erms+0xb/0x10 [ 1753.296453][T13637] __x64_sys_clone+0x23f/0x290 [ 1753.301053][T13637] ? __do_sys_vfork+0x130/0x130 [ 1753.305739][T13637] ? ksys_write+0x260/0x2c0 [ 1753.310082][T13637] ? debug_smp_processor_id+0x17/0x20 [ 1753.315288][T13637] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1753.321190][T13637] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1753.326660][T13637] do_syscall_64+0x3d/0xb0 [ 1753.330911][T13637] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1753.336553][T13637] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1753.342281][T13637] RIP: 0033:0x7f266d5a0da9 [ 1753.346539][T13637] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1753.365974][T13637] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:39 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xb0ffffff}, 0x36) 05:38:39 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x83000000}, 0x36) 05:38:39 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x0) 05:38:39 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 40) 05:38:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:39 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xc0ffffff}, 0x36) [ 1753.374220][T13637] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1753.382031][T13637] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1753.389849][T13637] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1753.397654][T13637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1753.405468][T13637] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1753.413282][T13637] [ 1753.458178][T13650] FAULT_INJECTION: forcing a failure. [ 1753.458178][T13650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1753.471407][T13650] CPU: 1 PID: 13650 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1753.482937][T13650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1753.492830][T13650] Call Trace: [ 1753.495952][T13650] [ 1753.498734][T13650] dump_stack_lvl+0x151/0x1b7 [ 1753.503247][T13650] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1753.508714][T13650] dump_stack+0x15/0x17 [ 1753.512705][T13650] should_fail+0x3c6/0x510 [ 1753.516956][T13650] should_fail_alloc_page+0x5a/0x80 [ 1753.521989][T13650] prepare_alloc_pages+0x15c/0x700 [ 1753.526940][T13650] ? __alloc_pages_bulk+0xe40/0xe40 [ 1753.531972][T13650] __alloc_pages+0x18c/0x8f0 [ 1753.536400][T13650] ? prep_new_page+0x110/0x110 [ 1753.541000][T13650] ? __alloc_pages+0x27e/0x8f0 [ 1753.545599][T13650] ? __kasan_check_write+0x14/0x20 [ 1753.550547][T13650] ? _raw_spin_lock+0xa4/0x1b0 [ 1753.555148][T13650] pte_alloc_one+0x73/0x1b0 [ 1753.559489][T13650] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1753.564522][T13650] __pte_alloc+0x86/0x350 [ 1753.568699][T13650] ? irqentry_exit+0x30/0x40 [ 1753.573112][T13650] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1753.578755][T13650] ? free_pgtables+0x280/0x280 [ 1753.583359][T13650] copy_page_range+0x28a8/0x2f90 [ 1753.588126][T13650] ? __kasan_slab_alloc+0xb1/0xe0 [ 1753.592988][T13650] ? slab_post_alloc_hook+0x53/0x2c0 [ 1753.598108][T13650] ? kernel_clone+0x21e/0x9e0 [ 1753.602623][T13650] ? do_syscall_64+0x3d/0xb0 [ 1753.607046][T13650] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1753.612964][T13650] ? pfn_valid+0x1e0/0x1e0 [ 1753.617203][T13650] ? rwsem_write_trylock+0x15b/0x290 [ 1753.622328][T13650] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1753.628577][T13650] copy_mm+0xc7e/0x13e0 [ 1753.632570][T13650] ? copy_signal+0x610/0x610 [ 1753.636992][T13650] ? __init_rwsem+0xd6/0x1c0 [ 1753.641420][T13650] ? copy_signal+0x4e3/0x610 [ 1753.645846][T13650] copy_process+0x1149/0x3290 [ 1753.650361][T13650] ? proc_fail_nth_write+0x20b/0x290 [ 1753.655478][T13650] ? fsnotify_perm+0x6a/0x5d0 [ 1753.659997][T13650] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1753.664939][T13650] ? vfs_write+0x9ec/0x1110 [ 1753.669278][T13650] ? __hrtimer_run_queues+0x46b/0xad0 [ 1753.674487][T13650] kernel_clone+0x21e/0x9e0 [ 1753.678826][T13650] ? file_end_write+0x1c0/0x1c0 [ 1753.683514][T13650] ? create_io_thread+0x1e0/0x1e0 [ 1753.688373][T13650] ? mutex_unlock+0xb2/0x260 [ 1753.692801][T13650] ? __mutex_lock_slowpath+0x10/0x10 [ 1753.697921][T13650] __x64_sys_clone+0x23f/0x290 [ 1753.702520][T13650] ? __do_sys_vfork+0x130/0x130 [ 1753.707216][T13650] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1753.713023][T13650] do_syscall_64+0x3d/0xb0 [ 1753.717275][T13650] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1753.722918][T13650] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1753.728646][T13650] RIP: 0033:0x7f266d5a0da9 [ 1753.732902][T13650] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:38:39 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x85ffffff}, 0x36) 05:38:39 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x0) 05:38:39 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 41) [ 1753.752434][T13650] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1753.760675][T13650] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1753.768490][T13650] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1753.776296][T13650] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1753.784108][T13650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1753.791920][T13650] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1753.799735][T13650] [ 1753.841597][T13661] FAULT_INJECTION: forcing a failure. [ 1753.841597][T13661] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.855208][T13661] CPU: 0 PID: 13661 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1753.866739][T13661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1753.876636][T13661] Call Trace: [ 1753.879757][T13661] [ 1753.882538][T13661] dump_stack_lvl+0x151/0x1b7 [ 1753.887049][T13661] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1753.892517][T13661] dump_stack+0x15/0x17 [ 1753.896509][T13661] should_fail+0x3c6/0x510 [ 1753.900761][T13661] __should_failslab+0xa4/0xe0 [ 1753.905363][T13661] ? vm_area_dup+0x26/0x230 [ 1753.909702][T13661] should_failslab+0x9/0x20 [ 1753.914043][T13661] slab_pre_alloc_hook+0x37/0xd0 [ 1753.918815][T13661] ? vm_area_dup+0x26/0x230 [ 1753.923153][T13661] kmem_cache_alloc+0x44/0x200 [ 1753.927758][T13661] vm_area_dup+0x26/0x230 [ 1753.931920][T13661] copy_mm+0x9a1/0x13e0 [ 1753.935917][T13661] ? copy_signal+0x610/0x610 [ 1753.940349][T13661] ? __init_rwsem+0xd6/0x1c0 [ 1753.944765][T13661] ? copy_signal+0x4e3/0x610 [ 1753.949194][T13661] copy_process+0x1149/0x3290 [ 1753.953709][T13661] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1753.958657][T13661] kernel_clone+0x21e/0x9e0 [ 1753.962996][T13661] ? create_io_thread+0x1e0/0x1e0 [ 1753.967852][T13661] ? clockevents_program_event+0x22f/0x300 [ 1753.973495][T13661] __x64_sys_clone+0x23f/0x290 [ 1753.978104][T13661] ? __do_sys_vfork+0x130/0x130 [ 1753.982785][T13661] ? debug_smp_processor_id+0x17/0x20 [ 1753.987993][T13661] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1753.993891][T13661] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1753.999363][T13661] do_syscall_64+0x3d/0xb0 [ 1754.003612][T13661] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1754.009254][T13661] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1754.014986][T13661] RIP: 0033:0x7f266d5a0da9 [ 1754.019237][T13661] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x90ffffff}, 0x36) 05:38:40 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xd0ffffff}, 0x36) [ 1754.038678][T13661] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1754.046922][T13661] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1754.054742][T13661] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1754.062545][T13661] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1754.070356][T13661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1754.078169][T13661] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1754.085986][T13661] 05:38:40 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 42) 05:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x9cffffff}, 0x36) 05:38:40 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0) [ 1754.131194][T13669] FAULT_INJECTION: forcing a failure. [ 1754.131194][T13669] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.163497][T13669] CPU: 1 PID: 13669 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1754.175052][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1754.184953][T13669] Call Trace: [ 1754.188072][T13669] [ 1754.190843][T13669] dump_stack_lvl+0x151/0x1b7 [ 1754.195358][T13669] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1754.200825][T13669] ? irqentry_exit+0x30/0x40 [ 1754.205253][T13669] dump_stack+0x15/0x17 [ 1754.209242][T13669] should_fail+0x3c6/0x510 [ 1754.213495][T13669] __should_failslab+0xa4/0xe0 [ 1754.218095][T13669] ? vm_area_dup+0x26/0x230 [ 1754.222439][T13669] should_failslab+0x9/0x20 [ 1754.226774][T13669] slab_pre_alloc_hook+0x37/0xd0 [ 1754.231551][T13669] ? vm_area_dup+0x26/0x230 [ 1754.235889][T13669] kmem_cache_alloc+0x44/0x200 [ 1754.240489][T13669] vm_area_dup+0x26/0x230 [ 1754.244656][T13669] copy_mm+0x9a1/0x13e0 [ 1754.248650][T13669] ? copy_signal+0x610/0x610 [ 1754.253072][T13669] ? __init_rwsem+0xd6/0x1c0 [ 1754.257500][T13669] ? copy_signal+0x4e3/0x610 [ 1754.261925][T13669] copy_process+0x1149/0x3290 [ 1754.266454][T13669] ? timerqueue_add+0x250/0x270 [ 1754.271130][T13669] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1754.276073][T13669] ? enqueue_hrtimer+0xca/0x240 [ 1754.280763][T13669] ? __hrtimer_run_queues+0x46b/0xad0 [ 1754.285970][T13669] kernel_clone+0x21e/0x9e0 [ 1754.290313][T13669] ? create_io_thread+0x1e0/0x1e0 [ 1754.295168][T13669] ? clockevents_program_event+0x22f/0x300 [ 1754.300810][T13669] __x64_sys_clone+0x23f/0x290 [ 1754.305411][T13669] ? __do_sys_vfork+0x130/0x130 [ 1754.310098][T13669] ? debug_smp_processor_id+0x17/0x20 [ 1754.315308][T13669] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1754.321206][T13669] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1754.326675][T13669] do_syscall_64+0x3d/0xb0 [ 1754.330932][T13669] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1754.336570][T13669] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1754.342298][T13669] RIP: 0033:0x7f266d5a0da9 [ 1754.346552][T13669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1754.365993][T13669] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1754.374239][T13669] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x9fffffff}, 0x36) 05:38:40 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 43) [ 1754.382049][T13669] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1754.389860][T13669] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1754.397671][T13669] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1754.405483][T13669] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1754.413301][T13669] 05:38:40 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xd1c41a00}, 0x36) 05:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xa0028118}, 0x36) [ 1754.441603][T13679] FAULT_INJECTION: forcing a failure. [ 1754.441603][T13679] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.457470][T13679] CPU: 1 PID: 13679 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1754.469011][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1754.478902][T13679] Call Trace: [ 1754.482027][T13679] [ 1754.484802][T13679] dump_stack_lvl+0x151/0x1b7 [ 1754.489322][T13679] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1754.494786][T13679] dump_stack+0x15/0x17 [ 1754.498776][T13679] should_fail+0x3c6/0x510 [ 1754.503033][T13679] __should_failslab+0xa4/0xe0 [ 1754.507630][T13679] ? anon_vma_clone+0x9a/0x500 [ 1754.512260][T13679] should_failslab+0x9/0x20 [ 1754.516571][T13679] slab_pre_alloc_hook+0x37/0xd0 [ 1754.521344][T13679] ? anon_vma_clone+0x9a/0x500 [ 1754.525945][T13679] kmem_cache_alloc+0x44/0x200 [ 1754.530545][T13679] anon_vma_clone+0x9a/0x500 [ 1754.534971][T13679] anon_vma_fork+0x91/0x4e0 [ 1754.539310][T13679] ? anon_vma_name+0x4c/0x70 [ 1754.543738][T13679] ? vm_area_dup+0x17a/0x230 [ 1754.548165][T13679] copy_mm+0xa3a/0x13e0 [ 1754.552157][T13679] ? copy_signal+0x610/0x610 [ 1754.556581][T13679] ? __init_rwsem+0xd6/0x1c0 [ 1754.561015][T13679] ? copy_signal+0x4e3/0x610 [ 1754.565437][T13679] copy_process+0x1149/0x3290 [ 1754.569955][T13679] ? timerqueue_add+0x250/0x270 [ 1754.574639][T13679] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1754.579595][T13679] ? enqueue_hrtimer+0xca/0x240 [ 1754.584275][T13679] ? __hrtimer_run_queues+0x46b/0xad0 [ 1754.589482][T13679] kernel_clone+0x21e/0x9e0 [ 1754.593820][T13679] ? create_io_thread+0x1e0/0x1e0 [ 1754.598679][T13679] ? clockevents_program_event+0x22f/0x300 [ 1754.604321][T13679] __x64_sys_clone+0x23f/0x290 [ 1754.608920][T13679] ? __do_sys_vfork+0x130/0x130 [ 1754.613609][T13679] ? debug_smp_processor_id+0x17/0x20 [ 1754.618814][T13679] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1754.624715][T13679] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1754.630183][T13679] do_syscall_64+0x3d/0xb0 [ 1754.634443][T13679] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1754.640078][T13679] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1754.645808][T13679] RIP: 0033:0x7f266d5a0da9 [ 1754.650063][T13679] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1754.669501][T13679] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1754.677745][T13679] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xa002a6e8}, 0x36) 05:38:40 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xdb451100}, 0x36) 05:38:40 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) [ 1754.685559][T13679] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1754.693368][T13679] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1754.701181][T13679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1754.708995][T13679] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1754.716807][T13679] 05:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xa002c000}, 0x36) 05:38:40 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xdd000000}, 0x36) 05:38:40 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:40 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x2000, &(0x7f00000000c0)="9870c45986a0", 0x6, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="2fa1b9e5386a2afd218a004ca6154140f00c5f789021c4cd5888fdc9d828ddaaa2f51757beb8a22a50d26f4acf1661f3e53e55b2b7fd0848ae99513dc4257d862801b8df31f7cc6825ad") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6, 0x7, 0x3f, 0x9, 0x0, 0x3, 0x0, 0xa37f55be46089138, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40f, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x800, 0x2, 0x8, 0x4, 0x0, 0x4, 0xe870, 0x0, 0x8, 0x0, 0x6}, r2, 0xf, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:40 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xe03f0300}, 0x36) 05:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xb0ffffff}, 0x36) 05:38:40 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 44) 05:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc0ffffff}, 0x36) 05:38:40 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xf5ffffff}, 0x36) 05:38:40 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xd0ffffff}, 0x36) 05:38:40 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xf8ffffff}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xd1c41a00}, 0x36) 05:38:41 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xff000000}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xd6f11500}, 0x36) 05:38:41 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x2000, &(0x7f00000000c0)="9870c45986a0", 0x6, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="2fa1b9e5386a2afd218a004ca6154140f00c5f789021c4cd5888fdc9d828ddaaa2f51757beb8a22a50d26f4acf1661f3e53e55b2b7fd0848ae99513dc4257d862801b8df31f7cc6825ad") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6, 0x7, 0x3f, 0x9, 0x0, 0x3, 0x0, 0xa37f55be46089138, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40f, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x800, 0x2, 0x8, 0x4, 0x0, 0x4, 0xe870, 0x0, 0x8, 0x0, 0x6}, r2, 0xf, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x2000, &(0x7f00000000c0)="9870c45986a0", 0x6, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="2fa1b9e5386a2afd218a004ca6154140f00c5f789021c4cd5888fdc9d828ddaaa2f51757beb8a22a50d26f4acf1661f3e53e55b2b7fd0848ae99513dc4257d862801b8df31f7cc6825ad") (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6, 0x7, 0x3f, 0x9, 0x0, 0x3, 0x0, 0xa37f55be46089138, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40f, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x800, 0x2, 0x8, 0x4, 0x0, 0x4, 0xe870, 0x0, 0x8, 0x0, 0x6}, r2, 0xf, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:41 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffff8000}, 0x36) 05:38:41 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffff80}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xdc170000}, 0x36) 05:38:41 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffff85}, 0x36) 05:38:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x2000, &(0x7f00000000c0)="9870c45986a0", 0x6, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="2fa1b9e5386a2afd218a004ca6154140f00c5f789021c4cd5888fdc9d828ddaaa2f51757beb8a22a50d26f4acf1661f3e53e55b2b7fd0848ae99513dc4257d862801b8df31f7cc6825ad") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6, 0x7, 0x3f, 0x9, 0x0, 0x3, 0x0, 0xa37f55be46089138, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40f, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x800, 0x2, 0x8, 0x4, 0x0, 0x4, 0xe870, 0x0, 0x8, 0x0, 0x6}, r2, 0xf, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xdd000000}, 0x36) [ 1755.001100][T13740] FAULT_INJECTION: forcing a failure. [ 1755.001100][T13740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1755.032352][T13740] CPU: 0 PID: 13740 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1755.043913][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1755.053805][T13740] Call Trace: [ 1755.056964][T13740] [ 1755.059703][T13740] dump_stack_lvl+0x151/0x1b7 [ 1755.064216][T13740] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1755.069683][T13740] dump_stack+0x15/0x17 [ 1755.073674][T13740] should_fail+0x3c6/0x510 [ 1755.077931][T13740] should_fail_alloc_page+0x5a/0x80 [ 1755.082962][T13740] prepare_alloc_pages+0x15c/0x700 [ 1755.087910][T13740] ? __alloc_pages_bulk+0xe40/0xe40 [ 1755.092945][T13740] __alloc_pages+0x18c/0x8f0 [ 1755.097373][T13740] ? prep_new_page+0x110/0x110 [ 1755.101971][T13740] ? __alloc_pages+0x27e/0x8f0 [ 1755.106572][T13740] ? __kasan_check_write+0x14/0x20 [ 1755.111517][T13740] ? _raw_spin_lock+0xa4/0x1b0 [ 1755.116118][T13740] __pmd_alloc+0xb1/0x550 [ 1755.120288][T13740] ? __pud_alloc+0x260/0x260 [ 1755.124711][T13740] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1755.130703][T13740] copy_page_range+0x2b3d/0x2f90 [ 1755.135474][T13740] ? __kasan_slab_alloc+0xb1/0xe0 [ 1755.140333][T13740] ? slab_post_alloc_hook+0x53/0x2c0 [ 1755.145454][T13740] ? copy_mm+0xa3a/0x13e0 [ 1755.149621][T13740] ? copy_process+0x1149/0x3290 [ 1755.154306][T13740] ? kernel_clone+0x21e/0x9e0 [ 1755.158821][T13740] ? do_syscall_64+0x3d/0xb0 [ 1755.163251][T13740] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1755.169155][T13740] ? pfn_valid+0x1e0/0x1e0 [ 1755.173402][T13740] ? rwsem_write_trylock+0x15b/0x290 [ 1755.178523][T13740] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1755.184777][T13740] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1755.190326][T13740] ? __rb_insert_augmented+0x5de/0x610 [ 1755.195622][T13740] copy_mm+0xc7e/0x13e0 [ 1755.199616][T13740] ? copy_signal+0x610/0x610 [ 1755.204039][T13740] ? __init_rwsem+0xd6/0x1c0 [ 1755.208467][T13740] ? copy_signal+0x4e3/0x610 [ 1755.212893][T13740] copy_process+0x1149/0x3290 [ 1755.217406][T13740] ? proc_fail_nth_write+0x20b/0x290 [ 1755.222526][T13740] ? irqentry_exit+0x30/0x40 [ 1755.226955][T13740] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1755.231902][T13740] ? kernel_clone+0x165/0x9e0 [ 1755.236505][T13740] ? kernel_clone+0x1b6/0x9e0 [ 1755.241015][T13740] kernel_clone+0x21e/0x9e0 [ 1755.245354][T13740] ? file_end_write+0x1c0/0x1c0 [ 1755.250043][T13740] ? create_io_thread+0x1e0/0x1e0 [ 1755.254899][T13740] ? mutex_unlock+0xb2/0x260 [ 1755.259328][T13740] ? __mutex_lock_slowpath+0x10/0x10 [ 1755.264449][T13740] __x64_sys_clone+0x23f/0x290 [ 1755.269049][T13740] ? __do_sys_vfork+0x130/0x130 [ 1755.273735][T13740] ? debug_smp_processor_id+0x17/0x20 [ 1755.278941][T13740] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1755.284846][T13740] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1755.290315][T13740] do_syscall_64+0x3d/0xb0 [ 1755.294564][T13740] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1755.300207][T13740] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1755.305937][T13740] RIP: 0033:0x7f266d5a0da9 [ 1755.310194][T13740] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1755.329628][T13740] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1755.337874][T13740] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xe8a602a0}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xf2ed1500}, 0x36) [ 1755.345685][T13740] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1755.353497][T13740] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1755.361315][T13740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1755.369119][T13740] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1755.376935][T13740] 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xf5ffffff}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xf8ffffff}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xff000000}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffff8000}, 0x36) 05:38:41 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x1, 0x0, 0x8, 0x0, 0x1, 0x3200, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x1813, 0x7, 0x81, 0x0, 0x6, 0x9, 0x1f}, 0xffffffffffffffff, 0x7, r2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffffff80}, 0x36) 05:38:41 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffff90}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffffff85}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffffff90}, 0x36) 05:38:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(0x0, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffffff9c}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffffff9f}, 0x36) 05:38:41 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 45) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffffffb0}, 0x36) 05:38:41 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffffffc0}, 0x36) [ 1755.678662][T13785] FAULT_INJECTION: forcing a failure. [ 1755.678662][T13785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1755.707576][T13785] CPU: 1 PID: 13785 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1755.719126][T13785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1755.729020][T13785] Call Trace: [ 1755.732147][T13785] [ 1755.734924][T13785] dump_stack_lvl+0x151/0x1b7 [ 1755.739436][T13785] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1755.744906][T13785] dump_stack+0x15/0x17 [ 1755.748897][T13785] should_fail+0x3c6/0x510 [ 1755.753150][T13785] should_fail_alloc_page+0x5a/0x80 [ 1755.758192][T13785] prepare_alloc_pages+0x15c/0x700 [ 1755.763132][T13785] ? __alloc_pages_bulk+0xe40/0xe40 [ 1755.768166][T13785] __alloc_pages+0x18c/0x8f0 [ 1755.772592][T13785] ? prep_new_page+0x110/0x110 [ 1755.777185][T13785] ? __alloc_pages+0x27e/0x8f0 [ 1755.781786][T13785] ? __kasan_check_write+0x14/0x20 [ 1755.786731][T13785] ? _raw_spin_lock+0xa4/0x1b0 [ 1755.791336][T13785] pte_alloc_one+0x73/0x1b0 [ 1755.795812][T13785] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1755.800833][T13785] __pte_alloc+0x86/0x350 [ 1755.805004][T13785] ? irqentry_exit+0x30/0x40 [ 1755.809424][T13785] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1755.815071][T13785] ? free_pgtables+0x280/0x280 [ 1755.819667][T13785] copy_page_range+0x28a8/0x2f90 [ 1755.824438][T13785] ? __kasan_slab_alloc+0xb1/0xe0 [ 1755.829300][T13785] ? slab_post_alloc_hook+0x53/0x2c0 [ 1755.834418][T13785] ? kernel_clone+0x21e/0x9e0 [ 1755.838933][T13785] ? do_syscall_64+0x3d/0xb0 [ 1755.843372][T13785] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1755.849264][T13785] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1755.854902][T13785] ? pfn_valid+0x1e0/0x1e0 [ 1755.859155][T13785] ? rwsem_write_trylock+0x15b/0x290 [ 1755.864274][T13785] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1755.870523][T13785] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1755.876086][T13785] ? __rb_insert_augmented+0x5de/0x610 [ 1755.881375][T13785] copy_mm+0xc7e/0x13e0 [ 1755.885376][T13785] ? irqentry_exit+0x30/0x40 [ 1755.889800][T13785] ? copy_signal+0x610/0x610 [ 1755.894220][T13785] ? __init_rwsem+0xd6/0x1c0 [ 1755.898646][T13785] ? copy_signal+0x4e3/0x610 [ 1755.903071][T13785] copy_process+0x1149/0x3290 [ 1755.907587][T13785] ? proc_fail_nth_write+0x20b/0x290 [ 1755.912706][T13785] ? vfs_write+0x340/0x1110 [ 1755.917046][T13785] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1755.921994][T13785] ? vfs_write+0x9ec/0x1110 [ 1755.926418][T13785] ? __hrtimer_run_queues+0x46b/0xad0 [ 1755.931634][T13785] kernel_clone+0x21e/0x9e0 [ 1755.935965][T13785] ? file_end_write+0x1c0/0x1c0 [ 1755.940653][T13785] ? create_io_thread+0x1e0/0x1e0 [ 1755.945511][T13785] ? mutex_unlock+0xb2/0x260 [ 1755.949942][T13785] ? __mutex_lock_slowpath+0x10/0x10 [ 1755.955065][T13785] __x64_sys_clone+0x23f/0x290 [ 1755.959661][T13785] ? __do_sys_vfork+0x130/0x130 [ 1755.964347][T13785] ? switch_fpu_return+0x1ed/0x3d0 [ 1755.969298][T13785] ? __kasan_check_read+0x11/0x20 [ 1755.974159][T13785] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 1755.979624][T13785] do_syscall_64+0x3d/0xb0 [ 1755.983875][T13785] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1755.989519][T13785] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1755.995593][T13785] RIP: 0033:0x7f266d5a0da9 [ 1755.999849][T13785] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1756.019289][T13785] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:42 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 46) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffffffd0}, 0x36) [ 1756.027533][T13785] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1756.035345][T13785] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1756.043158][T13785] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1756.050969][T13785] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1756.058779][T13785] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1756.066592][T13785] 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xfffffff5}, 0x36) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xfffffff8}, 0x36) 05:38:42 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x1, 0x0, 0x8, 0x0, 0x1, 0x3200, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x1813, 0x7, 0x81, 0x0, 0x6, 0x9, 0x1f}, 0xffffffffffffffff, 0x7, r2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x1, 0x0, 0x8, 0x0, 0x1, 0x3200, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x1813, 0x7, 0x81, 0x0, 0x6, 0x9, 0x1f}, 0xffffffffffffffff, 0x7, r2, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffff9c}, 0x36) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xffffffff}, 0x36) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x36) 05:38:42 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(0x0, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffff9f}, 0x36) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffffb0}, 0x36) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x36) [ 1756.197757][T13796] FAULT_INJECTION: forcing a failure. [ 1756.197757][T13796] name failslab, interval 1, probability 0, space 0, times 0 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffffc0}, 0x36) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffffd0}, 0x36) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3}, 0x36) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xfffffff5}, 0x36) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x4}, 0x36) [ 1756.369864][T13796] CPU: 0 PID: 13796 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1756.381409][T13796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1756.391303][T13796] Call Trace: [ 1756.394427][T13796] [ 1756.397209][T13796] dump_stack_lvl+0x151/0x1b7 [ 1756.401716][T13796] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1756.407186][T13796] dump_stack+0x15/0x17 [ 1756.411177][T13796] should_fail+0x3c6/0x510 [ 1756.415430][T13796] __should_failslab+0xa4/0xe0 [ 1756.420033][T13796] ? vm_area_dup+0x26/0x230 [ 1756.424369][T13796] should_failslab+0x9/0x20 [ 1756.428707][T13796] slab_pre_alloc_hook+0x37/0xd0 [ 1756.433487][T13796] ? vm_area_dup+0x26/0x230 [ 1756.437823][T13796] kmem_cache_alloc+0x44/0x200 [ 1756.442422][T13796] vm_area_dup+0x26/0x230 [ 1756.446765][T13796] copy_mm+0x9a1/0x13e0 [ 1756.450757][T13796] ? copy_signal+0x610/0x610 [ 1756.455181][T13796] ? __init_rwsem+0xd6/0x1c0 [ 1756.459607][T13796] ? copy_signal+0x4e3/0x610 [ 1756.464035][T13796] copy_process+0x1149/0x3290 [ 1756.468552][T13796] ? timerqueue_add+0x250/0x270 [ 1756.473237][T13796] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1756.478182][T13796] ? enqueue_hrtimer+0xca/0x240 [ 1756.482954][T13796] ? __hrtimer_run_queues+0x46b/0xad0 [ 1756.488172][T13796] kernel_clone+0x21e/0x9e0 [ 1756.492509][T13796] ? create_io_thread+0x1e0/0x1e0 [ 1756.497365][T13796] ? clockevents_program_event+0x22f/0x300 [ 1756.503016][T13796] __x64_sys_clone+0x23f/0x290 [ 1756.507606][T13796] ? __do_sys_vfork+0x130/0x130 [ 1756.512293][T13796] ? debug_smp_processor_id+0x17/0x20 [ 1756.517501][T13796] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1756.523402][T13796] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1756.528869][T13796] do_syscall_64+0x3d/0xb0 [ 1756.533127][T13796] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1756.538763][T13796] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1756.544493][T13796] RIP: 0033:0x7f266d5a0da9 [ 1756.548747][T13796] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:38:42 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x1, 0x0, 0x8, 0x0, 0x1, 0x3200, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x1813, 0x7, 0x81, 0x0, 0x6, 0x9, 0x1f}, 0xffffffffffffffff, 0x7, r2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x5}, 0x36) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xfffffff8}, 0x36) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6}, 0x36) [ 1756.568194][T13796] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1756.576435][T13796] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1756.584250][T13796] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1756.592058][T13796] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1756.599867][T13796] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1756.607690][T13796] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1756.615496][T13796] 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7}, 0x36) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffffff}, 0x36) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x36) 05:38:42 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a00000000a0000000000000000000001000000000000000000000000000000030000000000000000000000000000000000000000070000040000000000000000000000000000000000836f9bb10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000005f00"], 0x0, 0xc2}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000003007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d95e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96582438ca5b713841afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e430000000005cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce6b24a404ae9e7c4fe142b5a519ffe11ccfd0daa3679e332c77b3d8ab9a67631e3c19ceb4c68ec47f44d7a9e024a91a38484b90a131c912fcc652a120c672d1bde7c27d3123b6e0d227984d9ca511a6d5af09fd411b439b318cc436d472f05d47de4288ce5c963c30154724e1430b29036a2394cc9a9ea5491c582bb51856041eede3f645a8a465fe429e38bd53d5dfa1154c7eea1ec71511dba066fd4052c4c039b1d046f2534c7300d6dde2712962f895bc3707b590f2c8cc9b0efc29ac7f66f6c37efcc7f9e4f73440e9afc3a79bcb4cc1dd15718c2a21a288af91fbc0b98268fc1966989327c632381e935cd880481652896eb53277634989c8eb4e1fbcd72b933c6c5d028db5aa02f250328f2f8abd7db5f9a18df6e181fdf9501b7664e77b1ee621e48ab5e166544e8d2724e087035d60a5ddd9b428e4ff13c21c0bcc2e51b3d80272"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x891, 0x3}, 0x202, 0x0, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='($-/-\\-}!\x00') perf_event_open(&(0x7f0000000080)={0xde58e223ce8e7f07, 0x80, 0x7, 0xfc, 0x9, 0x1, 0x0, 0x1f, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x1ff}, 0x80080, 0x40e1, 0x6, 0x6, 0x5, 0xb5, 0x2, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x1f, 0x8, 0x0, 0x0, 0x9, 0x810, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0xa4c}, 0x4401, 0x5, 0x4e939f80, 0x6, 0x8, 0x401, 0xffc1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_pid(r4, &(0x7f0000000000)=r1, 0x12) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x36) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x36) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x36) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x36) 05:38:42 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 47) 05:38:42 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x36) 05:38:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x36) [ 1756.757660][T13870] FAULT_INJECTION: forcing a failure. [ 1756.757660][T13870] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.777973][T13870] CPU: 0 PID: 13870 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1756.789519][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1756.799413][T13870] Call Trace: [ 1756.802539][T13870] [ 1756.805318][T13870] dump_stack_lvl+0x151/0x1b7 [ 1756.809828][T13870] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1756.815296][T13870] ? ___ratelimit+0xb2/0x5a0 [ 1756.819732][T13870] dump_stack+0x15/0x17 [ 1756.823715][T13870] should_fail+0x3c6/0x510 [ 1756.827973][T13870] __should_failslab+0xa4/0xe0 [ 1756.832569][T13870] ? anon_vma_fork+0x1df/0x4e0 [ 1756.837172][T13870] should_failslab+0x9/0x20 [ 1756.841509][T13870] slab_pre_alloc_hook+0x37/0xd0 [ 1756.846283][T13870] ? anon_vma_fork+0x1df/0x4e0 [ 1756.850880][T13870] kmem_cache_alloc+0x44/0x200 [ 1756.855482][T13870] anon_vma_fork+0x1df/0x4e0 [ 1756.859911][T13870] copy_mm+0xa3a/0x13e0 [ 1756.863914][T13870] ? copy_signal+0x610/0x610 [ 1756.868327][T13870] ? __init_rwsem+0xd6/0x1c0 [ 1756.872753][T13870] ? copy_signal+0x4e3/0x610 [ 1756.877182][T13870] copy_process+0x1149/0x3290 [ 1756.881699][T13870] ? timerqueue_add+0x250/0x270 [ 1756.886554][T13870] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1756.891592][T13870] ? enqueue_hrtimer+0xca/0x240 [ 1756.896369][T13870] ? __hrtimer_run_queues+0x46b/0xad0 [ 1756.901569][T13870] kernel_clone+0x21e/0x9e0 [ 1756.905916][T13870] ? create_io_thread+0x1e0/0x1e0 [ 1756.910770][T13870] ? clockevents_program_event+0x22f/0x300 [ 1756.916419][T13870] __x64_sys_clone+0x23f/0x290 [ 1756.921012][T13870] ? __do_sys_vfork+0x130/0x130 [ 1756.925698][T13870] ? debug_smp_processor_id+0x17/0x20 [ 1756.930903][T13870] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1756.936816][T13870] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1756.942275][T13870] do_syscall_64+0x3d/0xb0 [ 1756.946528][T13870] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1756.952169][T13870] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1756.958087][T13870] RIP: 0033:0x7f266d5a0da9 [ 1756.962330][T13870] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1756.981766][T13870] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1756.990009][T13870] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1756.997822][T13870] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(0x0, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1757.005633][T13870] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1757.013447][T13870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1757.021257][T13870] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1757.029070][T13870] 05:38:43 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 48) [ 1757.227827][T13880] FAULT_INJECTION: forcing a failure. [ 1757.227827][T13880] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.247470][T13880] CPU: 0 PID: 13880 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1757.259019][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1757.268913][T13880] Call Trace: [ 1757.272034][T13880] [ 1757.274813][T13880] dump_stack_lvl+0x151/0x1b7 [ 1757.279326][T13880] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1757.284793][T13880] dump_stack+0x15/0x17 [ 1757.288784][T13880] should_fail+0x3c6/0x510 [ 1757.293043][T13880] __should_failslab+0xa4/0xe0 [ 1757.297640][T13880] ? vm_area_dup+0x26/0x230 [ 1757.301980][T13880] should_failslab+0x9/0x20 [ 1757.306316][T13880] slab_pre_alloc_hook+0x37/0xd0 [ 1757.311093][T13880] ? vm_area_dup+0x26/0x230 [ 1757.315431][T13880] kmem_cache_alloc+0x44/0x200 [ 1757.320033][T13880] vm_area_dup+0x26/0x230 [ 1757.324197][T13880] copy_mm+0x9a1/0x13e0 [ 1757.328191][T13880] ? copy_signal+0x610/0x610 [ 1757.332615][T13880] ? __init_rwsem+0xd6/0x1c0 [ 1757.337044][T13880] ? copy_signal+0x4e3/0x610 [ 1757.341469][T13880] copy_process+0x1149/0x3290 [ 1757.345991][T13880] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1757.350930][T13880] ? kasan_check_range+0x82/0x2a0 [ 1757.355791][T13880] kernel_clone+0x21e/0x9e0 [ 1757.360129][T13880] ? file_end_write+0x1c0/0x1c0 [ 1757.364819][T13880] ? create_io_thread+0x1e0/0x1e0 [ 1757.369678][T13880] ? mutex_unlock+0xb2/0x260 [ 1757.374108][T13880] ? __mutex_lock_slowpath+0x10/0x10 [ 1757.379226][T13880] __x64_sys_clone+0x23f/0x290 [ 1757.383824][T13880] ? __do_sys_vfork+0x130/0x130 [ 1757.388512][T13880] ? ksys_write+0x260/0x2c0 [ 1757.392851][T13880] ? debug_smp_processor_id+0x17/0x20 [ 1757.398060][T13880] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1757.403965][T13880] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1757.409431][T13880] do_syscall_64+0x3d/0xb0 [ 1757.413682][T13880] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1757.419322][T13880] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1757.425053][T13880] RIP: 0033:0x7f266d5a0da9 [ 1757.429309][T13880] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1757.448747][T13880] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1757.456991][T13880] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1757.464803][T13880] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:43 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x36) 05:38:43 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 49) 05:38:43 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x36) [ 1757.472614][T13880] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1757.480427][T13880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1757.488241][T13880] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1757.496052][T13880] 05:38:43 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x36) 05:38:43 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a00000000a0000000000000000000001000000000000000000000000000000030000000000000000000000000000000000000000070000040000000000000000000000000000000000836f9bb10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000005f00"], 0x0, 0xc2}, 0x20) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x891, 0x3}, 0x202, 0x0, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='($-/-\\-}!\x00') (async) perf_event_open(&(0x7f0000000080)={0xde58e223ce8e7f07, 0x80, 0x7, 0xfc, 0x9, 0x1, 0x0, 0x1f, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x1ff}, 0x80080, 0x40e1, 0x6, 0x6, 0x5, 0xb5, 0x2, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x1f, 0x8, 0x0, 0x0, 0x9, 0x810, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0xa4c}, 0x4401, 0x5, 0x4e939f80, 0x6, 0x8, 0x401, 0xffc1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_pid(r4, &(0x7f0000000000)=r1, 0x12) 05:38:43 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x36) 05:38:43 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x36) 05:38:43 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x36) 05:38:43 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x36) 05:38:43 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x36) 05:38:43 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xa}, 0x36) 05:38:43 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x10}, 0x36) 05:38:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:43 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xb}, 0x36) [ 1757.694097][T13908] FAULT_INJECTION: forcing a failure. [ 1757.694097][T13908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1757.717277][T13908] CPU: 0 PID: 13908 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1757.728828][T13908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1757.738726][T13908] Call Trace: [ 1757.741846][T13908] [ 1757.744626][T13908] dump_stack_lvl+0x151/0x1b7 [ 1757.749137][T13908] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1757.754603][T13908] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1757.760248][T13908] dump_stack+0x15/0x17 [ 1757.764258][T13908] should_fail+0x3c6/0x510 [ 1757.768492][T13908] should_fail_alloc_page+0x5a/0x80 [ 1757.773525][T13908] prepare_alloc_pages+0x15c/0x700 [ 1757.778478][T13908] ? __alloc_pages_bulk+0xe40/0xe40 [ 1757.783509][T13908] __alloc_pages+0x18c/0x8f0 [ 1757.787936][T13908] ? prep_new_page+0x110/0x110 [ 1757.792534][T13908] ? __alloc_pages+0x27e/0x8f0 [ 1757.797142][T13908] ? __kasan_check_write+0x14/0x20 [ 1757.802083][T13908] ? _raw_spin_lock+0xa4/0x1b0 [ 1757.806681][T13908] __pmd_alloc+0xb1/0x550 [ 1757.810861][T13908] ? __pud_alloc+0x260/0x260 [ 1757.815274][T13908] ? __pud_alloc+0x213/0x260 [ 1757.819700][T13908] ? do_handle_mm_fault+0x2330/0x2330 [ 1757.824913][T13908] ? __stack_depot_save+0x34/0x470 [ 1757.829857][T13908] ? anon_vma_clone+0x9a/0x500 [ 1757.834457][T13908] copy_page_range+0x2b3d/0x2f90 [ 1757.839228][T13908] ? __kasan_slab_alloc+0xb1/0xe0 [ 1757.844091][T13908] ? slab_post_alloc_hook+0x53/0x2c0 [ 1757.849219][T13908] ? copy_mm+0xa3a/0x13e0 [ 1757.853381][T13908] ? copy_process+0x1149/0x3290 [ 1757.858063][T13908] ? kernel_clone+0x21e/0x9e0 [ 1757.862577][T13908] ? do_syscall_64+0x3d/0xb0 [ 1757.867004][T13908] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1757.872917][T13908] ? pfn_valid+0x1e0/0x1e0 [ 1757.877159][T13908] ? rwsem_write_trylock+0x15b/0x290 [ 1757.882279][T13908] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1757.888527][T13908] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1757.894083][T13908] ? __rb_insert_augmented+0x5de/0x610 [ 1757.899379][T13908] copy_mm+0xc7e/0x13e0 [ 1757.903375][T13908] ? copy_signal+0x610/0x610 [ 1757.907801][T13908] ? __init_rwsem+0xd6/0x1c0 [ 1757.912221][T13908] ? copy_signal+0x4e3/0x610 [ 1757.916650][T13908] copy_process+0x1149/0x3290 [ 1757.921164][T13908] ? timerqueue_add+0x250/0x270 [ 1757.925848][T13908] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1757.930796][T13908] ? enqueue_hrtimer+0xca/0x240 [ 1757.935481][T13908] ? __hrtimer_run_queues+0x46b/0xad0 [ 1757.940692][T13908] kernel_clone+0x21e/0x9e0 [ 1757.945031][T13908] ? create_io_thread+0x1e0/0x1e0 [ 1757.949890][T13908] ? clockevents_program_event+0x22f/0x300 [ 1757.955532][T13908] __x64_sys_clone+0x23f/0x290 [ 1757.960134][T13908] ? __do_sys_vfork+0x130/0x130 [ 1757.964821][T13908] ? debug_smp_processor_id+0x17/0x20 [ 1757.970026][T13908] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1757.975927][T13908] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1757.981395][T13908] do_syscall_64+0x3d/0xb0 [ 1757.985648][T13908] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1757.991290][T13908] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1757.997021][T13908] RIP: 0033:0x7f266d5a0da9 [ 1758.001306][T13908] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1758.020713][T13908] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1758.028958][T13908] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1758.036771][T13908] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x36) 05:38:44 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x11}, 0x36) 05:38:44 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 50) [ 1758.044580][T13908] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1758.052392][T13908] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1758.060207][T13908] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1758.068019][T13908] 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x36) 05:38:44 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x12}, 0x36) 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xe}, 0x36) 05:38:44 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a00000000a0000000000000000000001000000000000000000000000000000030000000000000000000000000000000000000000070000040000000000000000000000000000000000836f9bb10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000005f00"], 0x0, 0xc2}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x891, 0x3}, 0x202, 0x0, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='($-/-\\-}!\x00') perf_event_open(&(0x7f0000000080)={0xde58e223ce8e7f07, 0x80, 0x7, 0xfc, 0x9, 0x1, 0x0, 0x1f, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x1ff}, 0x80080, 0x40e1, 0x6, 0x6, 0x5, 0xb5, 0x2, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x1f, 0x8, 0x0, 0x0, 0x9, 0x810, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0xa4c}, 0x4401, 0x5, 0x4e939f80, 0x6, 0x8, 0x401, 0xffc1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_pid(r4, &(0x7f0000000000)=r1, 0x12) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000a0000000a00000000a0000000000000000000001000000000000000000000000000000030000000000000000000000000000000000000000070000040000000000000000000000000000000000836f9bb10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000005f00"], 0x0, 0xc2}, 0x20) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002480)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000003007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d95e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96582438ca5b713841afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e430000000005cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce6b24a404ae9e7c4fe142b5a519ffe11ccfd0daa3679e332c77b3d8ab9a67631e3c19ceb4c68ec47f44d7a9e024a91a38484b90a131c912fcc652a120c672d1bde7c27d3123b6e0d227984d9ca511a6d5af09fd411b439b318cc436d472f05d47de4288ce5c963c30154724e1430b29036a2394cc9a9ea5491c582bb51856041eede3f645a8a465fe429e38bd53d5dfa1154c7eea1ec71511dba066fd4052c4c039b1d046f2534c7300d6dde2712962f895bc3707b590f2c8cc9b0efc29ac7f66f6c37efcc7f9e4f73440e9afc3a79bcb4cc1dd15718c2a21a288af91fbc0b98268fc1966989327c632381e935cd880481652896eb53277634989c8eb4e1fbcd72b933c6c5d028db5aa02f250328f2f8abd7db5f9a18df6e181fdf9501b7664e77b1ee621e48ab5e166544e8d2724e087035d60a5ddd9b428e4ff13c21c0bcc2e51b3d80272"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x891, 0x3}, 0x202, 0x0, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='($-/-\\-}!\x00') (async) perf_event_open(&(0x7f0000000080)={0xde58e223ce8e7f07, 0x80, 0x7, 0xfc, 0x9, 0x1, 0x0, 0x1f, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x1ff}, 0x80080, 0x40e1, 0x6, 0x6, 0x5, 0xb5, 0x2, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x1f, 0x8, 0x0, 0x0, 0x9, 0x810, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0xa4c}, 0x4401, 0x5, 0x4e939f80, 0x6, 0x8, 0x401, 0xffc1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) write$cgroup_pid(r4, &(0x7f0000000000)=r1, 0x12) (async) [ 1758.171583][T13922] FAULT_INJECTION: forcing a failure. [ 1758.171583][T13922] name failslab, interval 1, probability 0, space 0, times 0 05:38:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1758.216375][T13922] CPU: 1 PID: 13922 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1758.227931][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1758.237821][T13922] Call Trace: [ 1758.240947][T13922] [ 1758.243722][T13922] dump_stack_lvl+0x151/0x1b7 [ 1758.248236][T13922] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1758.253705][T13922] dump_stack+0x15/0x17 [ 1758.257704][T13922] should_fail+0x3c6/0x510 [ 1758.261953][T13922] __should_failslab+0xa4/0xe0 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf}, 0x36) [ 1758.266551][T13922] ? vm_area_dup+0x26/0x230 [ 1758.270903][T13922] should_failslab+0x9/0x20 [ 1758.275227][T13922] slab_pre_alloc_hook+0x37/0xd0 [ 1758.280003][T13922] ? vm_area_dup+0x26/0x230 [ 1758.284340][T13922] kmem_cache_alloc+0x44/0x200 [ 1758.288943][T13922] vm_area_dup+0x26/0x230 [ 1758.293106][T13922] copy_mm+0x9a1/0x13e0 [ 1758.297100][T13922] ? copy_signal+0x610/0x610 [ 1758.301541][T13922] ? __init_rwsem+0xd6/0x1c0 [ 1758.305954][T13922] ? copy_signal+0x4e3/0x610 [ 1758.310378][T13922] copy_process+0x1149/0x3290 [ 1758.314896][T13922] ? _raw_spin_unlock+0x4d/0x70 [ 1758.319577][T13922] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1758.324524][T13922] ? __schedule+0xcd4/0x1590 [ 1758.328952][T13922] kernel_clone+0x21e/0x9e0 [ 1758.333290][T13922] ? create_io_thread+0x1e0/0x1e0 [ 1758.338150][T13922] ? __cond_resched+0x20/0x20 [ 1758.342664][T13922] __x64_sys_clone+0x23f/0x290 [ 1758.347274][T13922] ? __do_sys_vfork+0x130/0x130 [ 1758.351971][T13922] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1758.357766][T13922] do_syscall_64+0x3d/0xb0 [ 1758.362025][T13922] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1758.367659][T13922] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1758.373388][T13922] RIP: 0033:0x7f266d5a0da9 [ 1758.377659][T13922] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1758.397084][T13922] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1758.405328][T13922] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:44 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x36) 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x10}, 0x36) 05:38:44 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x18}, 0x36) [ 1758.413139][T13922] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1758.420950][T13922] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1758.428765][T13922] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1758.436575][T13922] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1758.444390][T13922] 05:38:44 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x40, 0x8, 0x18, 0x0, 0x37, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x4}, 0x4000, 0x0, 0xb4f7, 0x4, 0x0, 0x5, 0xff, 0x0, 0xcc4, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x7, 0x8b8}, 0x2c0, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x4, 0x0, 0x5}, r1, 0x8, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x36) 05:38:44 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x21}, 0x36) 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x36) 05:38:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:44 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25}, 0x36) 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x13}, 0x36) 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x17}, 0x36) 05:38:44 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x29}, 0x36) 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x18}, 0x36) 05:38:44 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = getpid() (rerun: 32) r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x40, 0x8, 0x18, 0x0, 0x37, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x4}, 0x4000, 0x0, 0xb4f7, 0x4, 0x0, 0x5, 0xff, 0x0, 0xcc4, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') (async, rerun: 32) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x7, 0x8b8}, 0x2c0, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x4, 0x0, 0x5}, r1, 0x8, r0, 0xa) (rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:44 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x30}, 0x36) 05:38:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:44 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 51) 05:38:44 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3582}, 0x36) 05:38:44 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3c}, 0x36) [ 1758.728917][T13993] FAULT_INJECTION: forcing a failure. [ 1758.728917][T13993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1758.742394][T13993] CPU: 1 PID: 13993 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1758.753937][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1758.763832][T13993] Call Trace: [ 1758.766952][T13993] [ 1758.769729][T13993] dump_stack_lvl+0x151/0x1b7 [ 1758.774244][T13993] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1758.779712][T13993] dump_stack+0x15/0x17 [ 1758.783711][T13993] should_fail+0x3c6/0x510 [ 1758.787957][T13993] should_fail_alloc_page+0x5a/0x80 [ 1758.792991][T13993] prepare_alloc_pages+0x15c/0x700 [ 1758.797938][T13993] ? __alloc_pages_bulk+0xe40/0xe40 [ 1758.803015][T13993] __alloc_pages+0x18c/0x8f0 [ 1758.807404][T13993] ? prep_new_page+0x110/0x110 [ 1758.811998][T13993] ? __alloc_pages+0x27e/0x8f0 [ 1758.816604][T13993] ? __kasan_check_write+0x14/0x20 [ 1758.821543][T13993] ? _raw_spin_lock+0xa4/0x1b0 [ 1758.826147][T13993] pte_alloc_one+0x73/0x1b0 [ 1758.830488][T13993] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1758.835520][T13993] ? __pmd_alloc+0x48d/0x550 [ 1758.839949][T13993] __pte_alloc+0x86/0x350 [ 1758.844113][T13993] ? __pud_alloc+0x260/0x260 [ 1758.848539][T13993] ? __pud_alloc+0x213/0x260 [ 1758.852968][T13993] ? free_pgtables+0x280/0x280 [ 1758.857568][T13993] ? do_handle_mm_fault+0x2330/0x2330 [ 1758.862772][T13993] ? __stack_depot_save+0x34/0x470 [ 1758.867721][T13993] ? anon_vma_clone+0x9a/0x500 [ 1758.872320][T13993] copy_page_range+0x28a8/0x2f90 [ 1758.877125][T13993] ? __kasan_slab_alloc+0xb1/0xe0 [ 1758.881953][T13993] ? slab_post_alloc_hook+0x53/0x2c0 [ 1758.887074][T13993] ? kernel_clone+0x21e/0x9e0 [ 1758.891589][T13993] ? do_syscall_64+0x3d/0xb0 [ 1758.896012][T13993] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1758.901924][T13993] ? pfn_valid+0x1e0/0x1e0 [ 1758.906176][T13993] ? irqentry_exit+0x30/0x40 [ 1758.910595][T13993] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1758.916238][T13993] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1758.921793][T13993] ? __rb_insert_augmented+0x5de/0x610 [ 1758.927092][T13993] copy_mm+0xc7e/0x13e0 [ 1758.931085][T13993] ? copy_signal+0x610/0x610 [ 1758.935507][T13993] ? __init_rwsem+0xd6/0x1c0 [ 1758.939931][T13993] ? copy_signal+0x4e3/0x610 [ 1758.944357][T13993] copy_process+0x1149/0x3290 [ 1758.948874][T13993] ? timerqueue_add+0x250/0x270 [ 1758.953556][T13993] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1758.958506][T13993] ? enqueue_hrtimer+0xca/0x240 [ 1758.963190][T13993] ? __hrtimer_run_queues+0x46b/0xad0 [ 1758.968399][T13993] kernel_clone+0x21e/0x9e0 [ 1758.972740][T13993] ? create_io_thread+0x1e0/0x1e0 [ 1758.977602][T13993] ? clockevents_program_event+0x22f/0x300 [ 1758.983246][T13993] __x64_sys_clone+0x23f/0x290 [ 1758.987842][T13993] ? __do_sys_vfork+0x130/0x130 [ 1758.992529][T13993] ? debug_smp_processor_id+0x17/0x20 [ 1758.997736][T13993] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1759.003639][T13993] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1759.009137][T13993] do_syscall_64+0x3d/0xb0 [ 1759.013357][T13993] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1759.019001][T13993] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1759.024727][T13993] RIP: 0033:0x7f266d5a0da9 [ 1759.028983][T13993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1759.048421][T13993] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1759.056667][T13993] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1759.064479][T13993] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1759.072293][T13993] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3e}, 0x36) 05:38:45 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 52) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x27dd8}, 0x36) [ 1759.080104][T13993] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1759.087913][T13993] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1759.095727][T13993] 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf4240}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x48}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x1fffffff}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x4c}, 0x36) [ 1759.184265][T14008] FAULT_INJECTION: forcing a failure. [ 1759.184265][T14008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1759.239066][T14008] CPU: 0 PID: 14008 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1759.250617][T14008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1759.260513][T14008] Call Trace: [ 1759.263637][T14008] [ 1759.266414][T14008] dump_stack_lvl+0x151/0x1b7 [ 1759.270926][T14008] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1759.276398][T14008] dump_stack+0x15/0x17 [ 1759.280385][T14008] should_fail+0x3c6/0x510 [ 1759.284641][T14008] should_fail_alloc_page+0x5a/0x80 [ 1759.289675][T14008] prepare_alloc_pages+0x15c/0x700 [ 1759.294709][T14008] ? __alloc_pages_bulk+0xe40/0xe40 [ 1759.299745][T14008] __alloc_pages+0x18c/0x8f0 [ 1759.304166][T14008] ? prep_new_page+0x110/0x110 [ 1759.308776][T14008] ? 0xffffffffa002c000 [ 1759.312754][T14008] ? is_bpf_text_address+0x172/0x190 [ 1759.317882][T14008] pte_alloc_one+0x73/0x1b0 [ 1759.322217][T14008] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1759.327253][T14008] __pte_alloc+0x86/0x350 [ 1759.331424][T14008] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1759.337059][T14008] ? free_pgtables+0x280/0x280 [ 1759.341665][T14008] ? __kasan_check_write+0x14/0x20 [ 1759.346609][T14008] copy_page_range+0x28a8/0x2f90 [ 1759.351387][T14008] ? __kasan_slab_alloc+0xb1/0xe0 [ 1759.356243][T14008] ? pfn_valid+0x1e0/0x1e0 [ 1759.360493][T14008] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 1759.366745][T14008] copy_mm+0xc7e/0x13e0 [ 1759.370739][T14008] ? copy_signal+0x610/0x610 [ 1759.375162][T14008] ? __init_rwsem+0xd6/0x1c0 [ 1759.379587][T14008] ? copy_signal+0x4e3/0x610 [ 1759.384014][T14008] copy_process+0x1149/0x3290 [ 1759.388528][T14008] ? timerqueue_add+0x250/0x270 [ 1759.393222][T14008] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1759.398161][T14008] ? enqueue_hrtimer+0xca/0x240 [ 1759.402849][T14008] ? __hrtimer_run_queues+0x46b/0xad0 [ 1759.408059][T14008] kernel_clone+0x21e/0x9e0 [ 1759.412397][T14008] ? create_io_thread+0x1e0/0x1e0 [ 1759.417255][T14008] ? clockevents_program_event+0x22f/0x300 [ 1759.422900][T14008] __x64_sys_clone+0x23f/0x290 [ 1759.427499][T14008] ? __do_sys_vfork+0x130/0x130 [ 1759.432188][T14008] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1759.438001][T14008] do_syscall_64+0x3d/0xb0 [ 1759.442251][T14008] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1759.447896][T14008] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1759.453625][T14008] RIP: 0033:0x7f266d5a0da9 [ 1759.457880][T14008] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1759.477324][T14008] RSP: 002b:00007f266c301078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:45 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x40, 0x8, 0x18, 0x0, 0x37, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x4}, 0x4000, 0x0, 0xb4f7, 0x4, 0x0, 0x5, 0xff, 0x0, 0xcc4, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x7, 0x8b8}, 0x2c0, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x4, 0x0, 0x5}, r1, 0x8, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x40, 0x8, 0x18, 0x0, 0x37, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x4}, 0x4000, 0x0, 0xb4f7, 0x4, 0x0, 0x5, 0xff, 0x0, 0xcc4, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00') (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x7, 0x8b8}, 0x2c0, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x4, 0x0, 0x5}, r1, 0x8, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x60}, 0x36) [ 1759.485561][T14008] RAX: ffffffffffffffda RBX: 00007f266d6cf050 RCX: 00007f266d5a0da9 [ 1759.493374][T14008] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1759.501185][T14008] RBP: 00007f266c301120 R08: 0000000000000000 R09: 0000000000000000 [ 1759.509008][T14008] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1759.516810][T14008] R13: 000000000000006e R14: 00007f266d6cf050 R15: 00007ffe00499038 [ 1759.524630][T14008] 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x61}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x62}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x63}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x64}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7}, 0x36) 05:38:45 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x7f, 0x39, 0x1, 0x0, 0x9, 0x50, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0x3, 0x8, 0x2, 0x2, 0x10001, 0x14dd, 0x0, 0x2, 0x0, 0x7f}, r1, 0x6, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x68}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x69}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x9}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6a}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6b}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa}, 0x36) 05:38:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6c}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xb}, 0x36) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x70}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc}, 0x36) 05:38:45 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 53) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x36) 05:38:45 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x7f, 0x39, 0x1, 0x0, 0x9, 0x50, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0x3, 0x8, 0x2, 0x2, 0x10001, 0x14dd, 0x0, 0x2, 0x0, 0x7f}, r1, 0x6, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:45 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x71}, 0x36) 05:38:45 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xe}, 0x36) 05:38:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x72}, 0x36) 05:38:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x73}, 0x36) 05:38:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x7f, 0x39, 0x1, 0x0, 0x9, 0x50, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0x3, 0x8, 0x2, 0x2, 0x10001, 0x14dd, 0x0, 0x2, 0x0, 0x7f}, r1, 0x6, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x7f, 0x39, 0x1, 0x0, 0x9, 0x50, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0x3, 0x8, 0x2, 0x2, 0x10001, 0x14dd, 0x0, 0x2, 0x0, 0x7f}, r1, 0x6, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:46 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xf}, 0x36) [ 1759.892132][T14096] FAULT_INJECTION: forcing a failure. [ 1759.892132][T14096] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.929346][T14096] CPU: 0 PID: 14096 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1759.940894][T14096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1759.950785][T14096] Call Trace: [ 1759.953910][T14096] [ 1759.956689][T14096] dump_stack_lvl+0x151/0x1b7 [ 1759.961199][T14096] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1759.966669][T14096] dump_stack+0x15/0x17 [ 1759.970662][T14096] should_fail+0x3c6/0x510 [ 1759.974915][T14096] __should_failslab+0xa4/0xe0 [ 1759.979512][T14096] ? anon_vma_clone+0x9a/0x500 [ 1759.984112][T14096] should_failslab+0x9/0x20 [ 1759.988538][T14096] slab_pre_alloc_hook+0x37/0xd0 [ 1759.993315][T14096] ? anon_vma_clone+0x9a/0x500 [ 1759.997913][T14096] kmem_cache_alloc+0x44/0x200 [ 1760.002514][T14096] anon_vma_clone+0x9a/0x500 [ 1760.006941][T14096] anon_vma_fork+0x91/0x4e0 [ 1760.011280][T14096] ? anon_vma_name+0x4c/0x70 [ 1760.015703][T14096] ? vm_area_dup+0x17a/0x230 [ 1760.020132][T14096] copy_mm+0xa3a/0x13e0 [ 1760.024128][T14096] ? copy_signal+0x610/0x610 [ 1760.028550][T14096] ? __init_rwsem+0xd6/0x1c0 [ 1760.032976][T14096] ? copy_signal+0x4e3/0x610 [ 1760.037407][T14096] copy_process+0x1149/0x3290 [ 1760.041920][T14096] ? timerqueue_add+0x250/0x270 [ 1760.046605][T14096] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1760.051550][T14096] ? enqueue_hrtimer+0xca/0x240 [ 1760.056237][T14096] ? __hrtimer_run_queues+0x46b/0xad0 [ 1760.061446][T14096] kernel_clone+0x21e/0x9e0 [ 1760.065788][T14096] ? create_io_thread+0x1e0/0x1e0 [ 1760.070646][T14096] ? clockevents_program_event+0x22f/0x300 [ 1760.076288][T14096] __x64_sys_clone+0x23f/0x290 [ 1760.080888][T14096] ? __do_sys_vfork+0x130/0x130 [ 1760.085576][T14096] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1760.091392][T14096] do_syscall_64+0x3d/0xb0 [ 1760.095643][T14096] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1760.101283][T14096] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1760.107014][T14096] RIP: 0033:0x7f266d5a0da9 [ 1760.111266][T14096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1760.130705][T14096] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x74}, 0x36) 05:38:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1760.138952][T14096] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1760.146764][T14096] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1760.154573][T14096] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1760.162387][T14096] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1760.170198][T14096] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1760.178013][T14096] 05:38:46 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x10}, 0x36) 05:38:46 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 54) 05:38:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x79}, 0x36) [ 1760.277535][T14116] FAULT_INJECTION: forcing a failure. [ 1760.277535][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.290169][T14116] CPU: 1 PID: 14116 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1760.301696][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1760.311589][T14116] Call Trace: [ 1760.314713][T14116] [ 1760.317493][T14116] dump_stack_lvl+0x151/0x1b7 [ 1760.322004][T14116] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1760.327474][T14116] dump_stack+0x15/0x17 [ 1760.331463][T14116] should_fail+0x3c6/0x510 [ 1760.335719][T14116] __should_failslab+0xa4/0xe0 [ 1760.340324][T14116] ? vm_area_dup+0x26/0x230 [ 1760.344656][T14116] should_failslab+0x9/0x20 [ 1760.348999][T14116] slab_pre_alloc_hook+0x37/0xd0 [ 1760.353772][T14116] ? vm_area_dup+0x26/0x230 [ 1760.358110][T14116] kmem_cache_alloc+0x44/0x200 [ 1760.362714][T14116] vm_area_dup+0x26/0x230 [ 1760.366876][T14116] copy_mm+0x9a1/0x13e0 [ 1760.370873][T14116] ? copy_signal+0x610/0x610 [ 1760.375298][T14116] ? __init_rwsem+0xd6/0x1c0 [ 1760.379725][T14116] ? copy_signal+0x4e3/0x610 [ 1760.384158][T14116] copy_process+0x1149/0x3290 [ 1760.388669][T14116] ? timerqueue_add+0x250/0x270 [ 1760.393347][T14116] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1760.398294][T14116] ? enqueue_hrtimer+0xca/0x240 [ 1760.402981][T14116] ? __hrtimer_run_queues+0x46b/0xad0 [ 1760.408193][T14116] kernel_clone+0x21e/0x9e0 [ 1760.412529][T14116] ? irqentry_exit+0x30/0x40 [ 1760.416959][T14116] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1760.422601][T14116] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1760.428585][T14116] ? create_io_thread+0x1e0/0x1e0 [ 1760.433448][T14116] __x64_sys_clone+0x23f/0x290 [ 1760.438048][T14116] ? __do_sys_vfork+0x130/0x130 [ 1760.442736][T14116] ? debug_smp_processor_id+0x17/0x20 [ 1760.447942][T14116] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1760.453847][T14116] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1760.459315][T14116] do_syscall_64+0x3d/0xb0 [ 1760.463562][T14116] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1760.469206][T14116] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1760.474933][T14116] RIP: 0033:0x7f266d5a0da9 [ 1760.479191][T14116] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1760.498627][T14116] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1760.506876][T14116] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1760.514686][T14116] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:46 executing program 4: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r2, 0x0, r1, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x20, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40002000000ffb}, 0x202, 0x8, 0x1, 0x8, 0x0, 0xfffffffc}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x26, 0x80, 0x24, 0x0, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x195, 0x1ff}, 0x824, 0x4, 0x0, 0x9, 0x1, 0xc9, 0x6, 0x0, 0x3ff, 0x0, 0x7}, 0x0, 0x0, r1, 0x2) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x88, 0x9, 0x0, 0x9f, 0x0, 0x6, 0x12254, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x12200, 0x3, 0x10001, 0x2, 0x5, 0x8e0, 0x0, 0x0, 0x2, 0x0, 0xea}, 0xffffffffffffffff, 0x9, r4, 0x8) r5 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x8d, 0x21, 0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x8040, 0x80000001, 0x8, 0x3, 0x3, 0x80000000, 0x3, 0x0, 0x401, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r3, 0xf) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x5, 0x1, 0x0, 0xd8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x2}, 0x114000, 0x4, 0x2, 0x8, 0x5, 0xc964, 0x3, 0x0, 0xa7a6, 0x0, 0x1f}, 0xffffffffffffffff, 0x0, r5, 0x9) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:46 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 55) 05:38:46 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x11}, 0x36) [ 1760.522495][T14116] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1760.530307][T14116] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1760.538125][T14116] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1760.545941][T14116] 05:38:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7a}, 0x36) 05:38:46 executing program 4: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r2, 0x0, r1, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x20, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40002000000ffb}, 0x202, 0x8, 0x1, 0x8, 0x0, 0xfffffffc}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x26, 0x80, 0x24, 0x0, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x195, 0x1ff}, 0x824, 0x4, 0x0, 0x9, 0x1, 0xc9, 0x6, 0x0, 0x3ff, 0x0, 0x7}, 0x0, 0x0, r1, 0x2) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x26, 0x80, 0x24, 0x0, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x195, 0x1ff}, 0x824, 0x4, 0x0, 0x9, 0x1, 0xc9, 0x6, 0x0, 0x3ff, 0x0, 0x7}, 0x0, 0x0, r1, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x88, 0x9, 0x0, 0x9f, 0x0, 0x6, 0x12254, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x12200, 0x3, 0x10001, 0x2, 0x5, 0x8e0, 0x0, 0x0, 0x2, 0x0, 0xea}, 0xffffffffffffffff, 0x9, r4, 0x8) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x8d, 0x21, 0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x8040, 0x80000001, 0x8, 0x3, 0x3, 0x80000000, 0x3, 0x0, 0x401, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r3, 0xf) (async) r5 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x8d, 0x21, 0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x8040, 0x80000001, 0x8, 0x3, 0x3, 0x80000000, 0x3, 0x0, 0x401, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r3, 0xf) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x5, 0x1, 0x0, 0xd8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x2}, 0x114000, 0x4, 0x2, 0x8, 0x5, 0xc964, 0x3, 0x0, 0xa7a6, 0x0, 0x1f}, 0xffffffffffffffff, 0x0, r5, 0x9) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:46 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x12}, 0x36) 05:38:46 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x13}, 0x36) 05:38:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7b}, 0x36) 05:38:46 executing program 4: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r2, 0x0, r1, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x20, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40002000000ffb}, 0x202, 0x8, 0x1, 0x8, 0x0, 0xfffffffc}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x26, 0x80, 0x24, 0x0, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x195, 0x1ff}, 0x824, 0x4, 0x0, 0x9, 0x1, 0xc9, 0x6, 0x0, 0x3ff, 0x0, 0x7}, 0x0, 0x0, r1, 0x2) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x88, 0x9, 0x0, 0x9f, 0x0, 0x6, 0x12254, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x12200, 0x3, 0x10001, 0x2, 0x5, 0x8e0, 0x0, 0x0, 0x2, 0x0, 0xea}, 0xffffffffffffffff, 0x9, r4, 0x8) r5 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x8d, 0x21, 0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x8040, 0x80000001, 0x8, 0x3, 0x3, 0x80000000, 0x3, 0x0, 0x401, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r3, 0xf) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x5, 0x1, 0x0, 0xd8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x2}, 0x114000, 0x4, 0x2, 0x8, 0x5, 0xc964, 0x3, 0x0, 0xa7a6, 0x0, 0x1f}, 0xffffffffffffffff, 0x0, r5, 0x9) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) gettid() (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r2, 0x0, r1, 0xa) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x3a) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0x20, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40002000000ffb}, 0x202, 0x8, 0x1, 0x8, 0x0, 0xfffffffc}, r2, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x26, 0x80, 0x24, 0x0, 0x100000000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x195, 0x1ff}, 0x824, 0x4, 0x0, 0x9, 0x1, 0xc9, 0x6, 0x0, 0x3ff, 0x0, 0x7}, 0x0, 0x0, r1, 0x2) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x88, 0x9, 0x0, 0x9f, 0x0, 0x6, 0x12254, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x12200, 0x3, 0x10001, 0x2, 0x5, 0x8e0, 0x0, 0x0, 0x2, 0x0, 0xea}, 0xffffffffffffffff, 0x9, r4, 0x8) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x8d, 0x21, 0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x8040, 0x80000001, 0x8, 0x3, 0x3, 0x80000000, 0x3, 0x0, 0x401, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r3, 0xf) (async) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x5, 0x1, 0x0, 0xd8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x2}, 0x114000, 0x4, 0x2, 0x8, 0x5, 0xc964, 0x3, 0x0, 0xa7a6, 0x0, 0x1f}, 0xffffffffffffffff, 0x0, r5, 0x9) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) [ 1760.629644][T14123] FAULT_INJECTION: forcing a failure. [ 1760.629644][T14123] name failslab, interval 1, probability 0, space 0, times 0 05:38:46 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x83}, 0x36) [ 1760.675190][T14123] CPU: 1 PID: 14123 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1760.686746][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1760.696645][T14123] Call Trace: [ 1760.699770][T14123] [ 1760.702541][T14123] dump_stack_lvl+0x151/0x1b7 [ 1760.707054][T14123] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1760.712541][T14123] dump_stack+0x15/0x17 [ 1760.716518][T14123] should_fail+0x3c6/0x510 [ 1760.720764][T14123] __should_failslab+0xa4/0xe0 [ 1760.725486][T14123] ? anon_vma_fork+0xf7/0x4e0 [ 1760.729992][T14123] should_failslab+0x9/0x20 [ 1760.734329][T14123] slab_pre_alloc_hook+0x37/0xd0 [ 1760.739107][T14123] ? anon_vma_fork+0xf7/0x4e0 [ 1760.743615][T14123] kmem_cache_alloc+0x44/0x200 [ 1760.748215][T14123] anon_vma_fork+0xf7/0x4e0 [ 1760.752553][T14123] ? anon_vma_name+0x4c/0x70 [ 1760.756989][T14123] ? vm_area_dup+0x17a/0x230 [ 1760.761407][T14123] copy_mm+0xa3a/0x13e0 [ 1760.765400][T14123] ? copy_signal+0x610/0x610 [ 1760.769833][T14123] ? __init_rwsem+0xd6/0x1c0 [ 1760.774337][T14123] ? copy_signal+0x4e3/0x610 [ 1760.778766][T14123] copy_process+0x1149/0x3290 [ 1760.783280][T14123] ? timerqueue_add+0x250/0x270 [ 1760.787968][T14123] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1760.792911][T14123] ? enqueue_hrtimer+0xca/0x240 [ 1760.797597][T14123] ? __hrtimer_run_queues+0x46b/0xad0 [ 1760.802806][T14123] kernel_clone+0x21e/0x9e0 [ 1760.807147][T14123] ? create_io_thread+0x1e0/0x1e0 [ 1760.812009][T14123] ? clockevents_program_event+0x22f/0x300 [ 1760.817648][T14123] __x64_sys_clone+0x23f/0x290 [ 1760.822248][T14123] ? __do_sys_vfork+0x130/0x130 [ 1760.826935][T14123] ? debug_smp_processor_id+0x17/0x20 [ 1760.832142][T14123] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1760.838044][T14123] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1760.843512][T14123] do_syscall_64+0x3d/0xb0 [ 1760.847766][T14123] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1760.853410][T14123] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1760.859136][T14123] RIP: 0033:0x7f266d5a0da9 [ 1760.863389][T14123] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x18}, 0x36) 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa0}, 0x36) 05:38:47 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x0, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:47 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 56) [ 1760.882843][T14123] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1760.891076][T14123] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1760.898886][T14123] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1760.906699][T14123] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1760.914508][T14123] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1760.922320][T14123] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1760.930138][T14123] 05:38:47 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x30440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xdd}, 0x36) 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x21}, 0x36) 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x25}, 0x36) 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x36) [ 1761.001200][T14164] FAULT_INJECTION: forcing a failure. [ 1761.001200][T14164] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.020418][T14164] CPU: 0 PID: 14164 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1761.031988][T14164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1761.041859][T14164] Call Trace: [ 1761.045076][T14164] [ 1761.047853][T14164] dump_stack_lvl+0x151/0x1b7 [ 1761.052363][T14164] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1761.057828][T14164] dump_stack+0x15/0x17 [ 1761.061819][T14164] should_fail+0x3c6/0x510 [ 1761.066070][T14164] __should_failslab+0xa4/0xe0 [ 1761.070759][T14164] ? vm_area_dup+0x26/0x230 [ 1761.075099][T14164] should_failslab+0x9/0x20 [ 1761.079434][T14164] slab_pre_alloc_hook+0x37/0xd0 [ 1761.084209][T14164] ? vm_area_dup+0x26/0x230 [ 1761.088546][T14164] kmem_cache_alloc+0x44/0x200 [ 1761.093150][T14164] vm_area_dup+0x26/0x230 [ 1761.097314][T14164] copy_mm+0x9a1/0x13e0 [ 1761.101309][T14164] ? copy_signal+0x610/0x610 [ 1761.105734][T14164] ? __init_rwsem+0xd6/0x1c0 [ 1761.110160][T14164] ? copy_signal+0x4e3/0x610 [ 1761.114588][T14164] copy_process+0x1149/0x3290 [ 1761.119103][T14164] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1761.124744][T14164] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1761.129690][T14164] ? memset_erms+0xb/0x10 [ 1761.133857][T14164] kernel_clone+0x21e/0x9e0 [ 1761.138196][T14164] ? create_io_thread+0x1e0/0x1e0 [ 1761.143054][T14164] ? clockevents_program_event+0x22f/0x300 [ 1761.148697][T14164] __x64_sys_clone+0x23f/0x290 [ 1761.153297][T14164] ? __do_sys_vfork+0x130/0x130 [ 1761.157989][T14164] ? debug_smp_processor_id+0x17/0x20 [ 1761.163191][T14164] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1761.169093][T14164] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1761.174559][T14164] do_syscall_64+0x3d/0xb0 [ 1761.178815][T14164] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1761.184456][T14164] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1761.190186][T14164] RIP: 0033:0x7f266d5a0da9 [ 1761.194437][T14164] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1761.213876][T14164] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1761.222123][T14164] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1761.229933][T14164] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1761.237750][T14164] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x300}, 0x36) 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x36) 05:38:47 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 57) 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x500}, 0x36) 05:38:47 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x30440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1761.245558][T14164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1761.253370][T14164] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1761.261184][T14164] 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c}, 0x36) 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x600}, 0x36) 05:38:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x30440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3e}, 0x36) 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x700}, 0x36) 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x36) 05:38:47 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000300)='afs_folio_dirty\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x136, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000340)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000300004afba96b31a7581c6253fdc6e48ec1278ee71279e2d5000f00000000000001000000000b0009a5ca050d"], &(0x7f0000000700)=""/180, 0x45, 0xb4, 0x1, 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0xffff, 0x81, &(0x7f0000000200)=""/129, 0x41000, 0x1b, '\x00', r4, 0x1b, r5, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xa, 0x0, 0xd0}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000840)=[r2], &(0x7f0000000880)=[{0x0, 0x2, 0xa, 0x4}, {0x3, 0x2, 0x1, 0x9}, {0x3, 0x3, 0x1, 0x1}, {0x3, 0x5, 0x5}], 0x10, 0x9}, 0x90) [ 1761.374814][T14187] FAULT_INJECTION: forcing a failure. [ 1761.374814][T14187] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1761.401137][T14187] CPU: 0 PID: 14187 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1761.412682][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1761.422578][T14187] Call Trace: [ 1761.425701][T14187] [ 1761.428476][T14187] dump_stack_lvl+0x151/0x1b7 [ 1761.432992][T14187] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1761.438463][T14187] ? kvm_sched_clock_read+0x18/0x40 [ 1761.443489][T14187] ? sched_clock+0x9/0x10 [ 1761.447657][T14187] ? sched_clock_cpu+0x18/0x3b0 [ 1761.452346][T14187] ? _raw_spin_lock+0xa4/0x1b0 [ 1761.456945][T14187] dump_stack+0x15/0x17 [ 1761.460937][T14187] should_fail+0x3c6/0x510 [ 1761.465189][T14187] should_fail_alloc_page+0x5a/0x80 [ 1761.470222][T14187] prepare_alloc_pages+0x15c/0x700 [ 1761.475172][T14187] ? __alloc_pages_bulk+0xe40/0xe40 [ 1761.480206][T14187] ? native_set_ldt+0x360/0x360 [ 1761.484890][T14187] __alloc_pages+0x18c/0x8f0 [ 1761.489319][T14187] ? _raw_spin_unlock+0x4d/0x70 [ 1761.494006][T14187] ? prep_new_page+0x110/0x110 [ 1761.498608][T14187] pte_alloc_one+0x73/0x1b0 [ 1761.502954][T14187] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1761.507979][T14187] ? irqentry_exit+0x30/0x40 [ 1761.512410][T14187] __pte_alloc+0x86/0x350 [ 1761.516570][T14187] ? free_pgtables+0x280/0x280 [ 1761.521172][T14187] ? __kasan_check_write+0x14/0x20 [ 1761.526118][T14187] copy_page_range+0x28a8/0x2f90 [ 1761.530893][T14187] ? __kasan_slab_alloc+0xb1/0xe0 [ 1761.535757][T14187] ? pfn_valid+0x1e0/0x1e0 [ 1761.540007][T14187] ? vma_gap_callbacks_rotate+0x133/0x210 [ 1761.545559][T14187] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1761.551115][T14187] ? __rb_insert_augmented+0x5de/0x610 [ 1761.556418][T14187] copy_mm+0xc7e/0x13e0 [ 1761.560412][T14187] ? copy_signal+0x610/0x610 [ 1761.564831][T14187] ? __init_rwsem+0xd6/0x1c0 [ 1761.569478][T14187] ? copy_signal+0x4e3/0x610 [ 1761.573856][T14187] copy_process+0x1149/0x3290 [ 1761.578371][T14187] ? timerqueue_add+0x250/0x270 [ 1761.583058][T14187] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1761.588004][T14187] ? enqueue_hrtimer+0xca/0x240 [ 1761.592689][T14187] ? __hrtimer_run_queues+0x46b/0xad0 [ 1761.597900][T14187] kernel_clone+0x21e/0x9e0 [ 1761.602237][T14187] ? create_io_thread+0x1e0/0x1e0 [ 1761.607097][T14187] ? clockevents_program_event+0x22f/0x300 [ 1761.612741][T14187] __x64_sys_clone+0x23f/0x290 [ 1761.617341][T14187] ? __do_sys_vfork+0x130/0x130 [ 1761.622026][T14187] ? debug_smp_processor_id+0x17/0x20 [ 1761.627322][T14187] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1761.633229][T14187] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1761.638690][T14187] do_syscall_64+0x3d/0xb0 [ 1761.642944][T14187] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1761.648583][T14187] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1761.654313][T14187] RIP: 0033:0x7f266d5a0da9 [ 1761.658567][T14187] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1761.678009][T14187] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1761.686253][T14187] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1761.694065][T14187] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1761.701873][T14187] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1761.709687][T14187] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1761.717500][T14187] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 05:38:47 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x0, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x48}, 0x36) 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4c}, 0x36) 05:38:47 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000300)='afs_folio_dirty\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x136, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000340)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x136, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000340)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000300004afba96b31a7581c6253fdc6e48ec1278ee71279e2d5000f00000000000001000000000b0009a5ca050d"], &(0x7f0000000700)=""/180, 0x45, 0xb4, 0x1, 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0xffff, 0x81, &(0x7f0000000200)=""/129, 0x41000, 0x1b, '\x00', r4, 0x1b, r5, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xa, 0x0, 0xd0}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000840)=[r2], &(0x7f0000000880)=[{0x0, 0x2, 0xa, 0x4}, {0x3, 0x2, 0x1, 0x9}, {0x3, 0x3, 0x1, 0x1}, {0x3, 0x5, 0x5}], 0x10, 0x9}, 0x90) [ 1761.725312][T14187] 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x60}, 0x36) 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa00}, 0x36) 05:38:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x36) 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xb00}, 0x36) 05:38:47 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000300)='afs_folio_dirty\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x136, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000340)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000300004afba96b31a7581c6253fdc6e48ec1278ee71279e2d5000f00000000000001000000000b0009a5ca050d"], &(0x7f0000000700)=""/180, 0x45, 0xb4, 0x1, 0x2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0xffff, 0x81, &(0x7f0000000200)=""/129, 0x41000, 0x1b, '\x00', r4, 0x1b, r5, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xa, 0x0, 0xd0}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000840)=[r2], &(0x7f0000000880)=[{0x0, 0x2, 0xa, 0x4}, {0x3, 0x2, 0x1, 0x9}, {0x3, 0x3, 0x1, 0x1}, {0x3, 0x5, 0x5}], 0x10, 0x9}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000300)='afs_folio_dirty\x00', r3}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x136, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000340)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000300004afba96b31a7581c6253fdc6e48ec1278ee71279e2d5000f00000000000001000000000b0009a5ca050d"], &(0x7f0000000700)=""/180, 0x45, 0xb4, 0x1, 0x2}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x24, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ffa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0xffff, 0x81, &(0x7f0000000200)=""/129, 0x41000, 0x1b, '\x00', r4, 0x1b, r5, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xa, 0x0, 0xd0}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000840)=[r2], &(0x7f0000000880)=[{0x0, 0x2, 0xa, 0x4}, {0x3, 0x2, 0x1, 0x9}, {0x3, 0x3, 0x1, 0x1}, {0x3, 0x5, 0x5}], 0x10, 0x9}, 0x90) (async) 05:38:47 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 58) 05:38:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xc00}, 0x36) 05:38:48 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x36) [ 1761.847836][T14227] FAULT_INJECTION: forcing a failure. [ 1761.847836][T14227] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.875000][T14227] CPU: 0 PID: 14227 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1761.886553][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1761.896448][T14227] Call Trace: [ 1761.899571][T14227] [ 1761.902347][T14227] dump_stack_lvl+0x151/0x1b7 [ 1761.906862][T14227] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1761.912330][T14227] dump_stack+0x15/0x17 [ 1761.916319][T14227] should_fail+0x3c6/0x510 [ 1761.920570][T14227] __should_failslab+0xa4/0xe0 [ 1761.925168][T14227] ? vm_area_dup+0x26/0x230 [ 1761.929512][T14227] should_failslab+0x9/0x20 [ 1761.933850][T14227] slab_pre_alloc_hook+0x37/0xd0 [ 1761.938623][T14227] ? vm_area_dup+0x26/0x230 [ 1761.942962][T14227] kmem_cache_alloc+0x44/0x200 [ 1761.947565][T14227] vm_area_dup+0x26/0x230 [ 1761.951731][T14227] copy_mm+0x9a1/0x13e0 [ 1761.955721][T14227] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1761.961364][T14227] ? copy_signal+0x610/0x610 [ 1761.965793][T14227] ? __init_rwsem+0xd6/0x1c0 [ 1761.970215][T14227] ? copy_signal+0x4e3/0x610 [ 1761.974642][T14227] copy_process+0x1149/0x3290 [ 1761.979156][T14227] ? timerqueue_add+0x250/0x270 [ 1761.983843][T14227] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1761.988791][T14227] ? enqueue_hrtimer+0xca/0x240 [ 1761.993476][T14227] ? __hrtimer_run_queues+0x46b/0xad0 [ 1761.998685][T14227] kernel_clone+0x21e/0x9e0 [ 1762.003023][T14227] ? create_io_thread+0x1e0/0x1e0 [ 1762.007910][T14227] ? clockevents_program_event+0x22f/0x300 [ 1762.013528][T14227] __x64_sys_clone+0x23f/0x290 [ 1762.018126][T14227] ? __do_sys_vfork+0x130/0x130 [ 1762.022813][T14227] ? debug_smp_processor_id+0x17/0x20 [ 1762.028019][T14227] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1762.033922][T14227] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1762.039389][T14227] do_syscall_64+0x3d/0xb0 [ 1762.043644][T14227] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1762.049284][T14227] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1762.055012][T14227] RIP: 0033:0x7f266d5a0da9 [ 1762.059268][T14227] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1762.078709][T14227] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1762.086950][T14227] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:48 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xaf80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:48 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xd00}, 0x36) 05:38:48 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x36) 05:38:48 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x0, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:48 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 59) 05:38:48 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xe00}, 0x36) [ 1762.094764][T14227] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1762.102574][T14227] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1762.110394][T14227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1762.118197][T14227] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1762.126012][T14227] [ 1762.175146][T14258] FAULT_INJECTION: forcing a failure. [ 1762.175146][T14258] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.187741][T14258] CPU: 0 PID: 14258 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1762.199274][T14258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1762.209166][T14258] Call Trace: [ 1762.212290][T14258] [ 1762.215069][T14258] dump_stack_lvl+0x151/0x1b7 [ 1762.219582][T14258] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1762.225049][T14258] dump_stack+0x15/0x17 [ 1762.229476][T14258] should_fail+0x3c6/0x510 [ 1762.233729][T14258] __should_failslab+0xa4/0xe0 [ 1762.238337][T14258] ? vm_area_dup+0x26/0x230 [ 1762.242668][T14258] should_failslab+0x9/0x20 [ 1762.247094][T14258] slab_pre_alloc_hook+0x37/0xd0 [ 1762.251868][T14258] ? vm_area_dup+0x26/0x230 [ 1762.256207][T14258] kmem_cache_alloc+0x44/0x200 [ 1762.260809][T14258] vm_area_dup+0x26/0x230 [ 1762.264979][T14258] copy_mm+0x9a1/0x13e0 [ 1762.268972][T14258] ? copy_signal+0x610/0x610 [ 1762.273391][T14258] ? __init_rwsem+0xd6/0x1c0 [ 1762.277829][T14258] ? copy_signal+0x4e3/0x610 [ 1762.282244][T14258] copy_process+0x1149/0x3290 [ 1762.286761][T14258] ? timerqueue_add+0x250/0x270 [ 1762.291445][T14258] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1762.296392][T14258] ? enqueue_hrtimer+0xca/0x240 [ 1762.301078][T14258] ? __hrtimer_run_queues+0x46b/0xad0 [ 1762.306289][T14258] kernel_clone+0x21e/0x9e0 [ 1762.310628][T14258] ? create_io_thread+0x1e0/0x1e0 [ 1762.315487][T14258] ? clockevents_program_event+0x22f/0x300 [ 1762.321129][T14258] __x64_sys_clone+0x23f/0x290 [ 1762.325739][T14258] ? __do_sys_vfork+0x130/0x130 [ 1762.330417][T14258] ? debug_smp_processor_id+0x17/0x20 [ 1762.335624][T14258] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1762.341527][T14258] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1762.346995][T14258] do_syscall_64+0x3d/0xb0 [ 1762.351246][T14258] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1762.356889][T14258] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1762.362616][T14258] RIP: 0033:0x7f266d5a0da9 [ 1762.366879][T14258] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1762.386311][T14258] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1762.394557][T14258] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1762.402367][T14258] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1762.410270][T14258] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1762.418079][T14258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:48 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xaf80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xaf80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:48 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x64}, 0x36) 05:38:48 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x68}, 0x36) 05:38:48 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xaf80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xaf80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:48 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 60) [ 1762.425889][T14258] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1762.433707][T14258] 05:38:48 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x69}, 0x36) 05:38:48 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xf00}, 0x36) 05:38:48 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x8080, 0x0, 0x0, 0x0, &(0x7f0000000e00), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14900, 0x0, 0x0, 0x0, 0x7f}, r3, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/pid\x00') syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x1, 0x20, 0x4, 0x0, 0x2, 0x1, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x1, @perf_config_ext={0x80000000, 0x8}, 0x400, 0x3, 0x84, 0x8, 0x10000, 0x7fff, 0x2d39, 0x0, 0x4, 0x0, 0xff}, r1, 0x4, r2, 0x1) [ 1762.512898][T14280] FAULT_INJECTION: forcing a failure. [ 1762.512898][T14280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1762.548636][T14280] CPU: 1 PID: 14280 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1762.560179][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1762.570083][T14280] Call Trace: [ 1762.573196][T14280] [ 1762.575976][T14280] dump_stack_lvl+0x151/0x1b7 [ 1762.580498][T14280] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1762.585955][T14280] ? preempt_schedule_irq+0xe7/0x140 [ 1762.591083][T14280] ? __cond_resched+0x20/0x20 [ 1762.595597][T14280] dump_stack+0x15/0x17 [ 1762.599592][T14280] should_fail+0x3c6/0x510 [ 1762.603839][T14280] should_fail_alloc_page+0x5a/0x80 [ 1762.608875][T14280] prepare_alloc_pages+0x15c/0x700 [ 1762.613816][T14280] ? __alloc_pages_bulk+0xe40/0xe40 [ 1762.618903][T14280] __alloc_pages+0x18c/0x8f0 [ 1762.623276][T14280] ? prep_new_page+0x110/0x110 [ 1762.627879][T14280] ? 0xffffffffa002c000 [ 1762.631868][T14280] ? is_bpf_text_address+0x172/0x190 [ 1762.636992][T14280] pte_alloc_one+0x73/0x1b0 [ 1762.641332][T14280] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1762.646374][T14280] __pte_alloc+0x86/0x350 [ 1762.650529][T14280] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1762.656171][T14280] ? free_pgtables+0x280/0x280 [ 1762.660771][T14280] ? copy_page_range+0x27d0/0x2f90 [ 1762.665721][T14280] copy_page_range+0x28a8/0x2f90 [ 1762.670493][T14280] ? __kasan_slab_alloc+0xb1/0xe0 [ 1762.675358][T14280] ? pfn_valid+0x1e0/0x1e0 [ 1762.679604][T14280] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 1762.685857][T14280] copy_mm+0xc7e/0x13e0 [ 1762.689849][T14280] ? copy_signal+0x610/0x610 [ 1762.694272][T14280] ? __init_rwsem+0xd6/0x1c0 [ 1762.698703][T14280] ? copy_signal+0x4e3/0x610 [ 1762.703124][T14280] copy_process+0x1149/0x3290 [ 1762.707654][T14280] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1762.713632][T14280] ? irqentry_exit+0x30/0x40 [ 1762.718059][T14280] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1762.723007][T14280] ? kernel_clone+0xb7/0x9e0 [ 1762.727429][T14280] kernel_clone+0x21e/0x9e0 [ 1762.731769][T14280] ? file_end_write+0x1c0/0x1c0 [ 1762.736454][T14280] ? create_io_thread+0x1e0/0x1e0 [ 1762.741317][T14280] ? mutex_unlock+0xb2/0x260 [ 1762.745742][T14280] ? __mutex_lock_slowpath+0x10/0x10 [ 1762.750864][T14280] __x64_sys_clone+0x23f/0x290 [ 1762.755465][T14280] ? __do_sys_vfork+0x130/0x130 [ 1762.760149][T14280] ? ksys_write+0x260/0x2c0 [ 1762.764489][T14280] ? debug_smp_processor_id+0x17/0x20 [ 1762.769698][T14280] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1762.775598][T14280] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1762.781070][T14280] do_syscall_64+0x3d/0xb0 [ 1762.785322][T14280] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1762.790962][T14280] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1762.796689][T14280] RIP: 0033:0x7f266d5a0da9 [ 1762.800944][T14280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1762.820384][T14280] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1762.828629][T14280] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1762.836442][T14280] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1762.844250][T14280] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1762.852062][T14280] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:49 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6a}, 0x36) 05:38:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x8080, 0x0, 0x0, 0x0, &(0x7f0000000e00), 0x0) (async) r3 = syz_clone(0x8080, 0x0, 0x0, 0x0, &(0x7f0000000e00), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14900, 0x0, 0x0, 0x0, 0x7f}, r3, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/pid\x00') syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x1, 0x20, 0x4, 0x0, 0x2, 0x1, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x1, @perf_config_ext={0x80000000, 0x8}, 0x400, 0x3, 0x84, 0x8, 0x10000, 0x7fff, 0x2d39, 0x0, 0x4, 0x0, 0xff}, r1, 0x4, r2, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x1, 0x20, 0x4, 0x0, 0x2, 0x1, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x1, @perf_config_ext={0x80000000, 0x8}, 0x400, 0x3, 0x84, 0x8, 0x10000, 0x7fff, 0x2d39, 0x0, 0x4, 0x0, 0xff}, r1, 0x4, r2, 0x1) 05:38:49 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 61) 05:38:49 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6b}, 0x36) [ 1762.859876][T14280] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1762.867691][T14280] 05:38:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1100}, 0x36) 05:38:49 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6c}, 0x36) [ 1762.928362][T14307] FAULT_INJECTION: forcing a failure. [ 1762.928362][T14307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1762.973247][T14307] CPU: 1 PID: 14307 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1762.984796][T14307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1762.994690][T14307] Call Trace: [ 1762.997813][T14307] [ 1763.000592][T14307] dump_stack_lvl+0x151/0x1b7 [ 1763.005102][T14307] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1763.010570][T14307] dump_stack+0x15/0x17 [ 1763.014562][T14307] should_fail+0x3c6/0x510 [ 1763.018816][T14307] should_fail_alloc_page+0x5a/0x80 [ 1763.023850][T14307] prepare_alloc_pages+0x15c/0x700 [ 1763.028804][T14307] ? __alloc_pages_bulk+0xe40/0xe40 [ 1763.033837][T14307] __alloc_pages+0x18c/0x8f0 [ 1763.038257][T14307] ? prep_new_page+0x110/0x110 [ 1763.042865][T14307] ? 0xffffffffa002c000 [ 1763.046852][T14307] ? is_bpf_text_address+0x172/0x190 [ 1763.051970][T14307] pte_alloc_one+0x73/0x1b0 [ 1763.056315][T14307] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1763.061348][T14307] __pte_alloc+0x86/0x350 [ 1763.065512][T14307] ? irqentry_exit+0x30/0x40 [ 1763.069947][T14307] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1763.075588][T14307] ? free_pgtables+0x280/0x280 [ 1763.080177][T14307] ? __kasan_check_write+0x14/0x20 [ 1763.085127][T14307] copy_page_range+0x28a8/0x2f90 [ 1763.089907][T14307] ? __kasan_slab_alloc+0xb1/0xe0 [ 1763.094764][T14307] ? pfn_valid+0x1e0/0x1e0 [ 1763.099012][T14307] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 1763.104579][T14307] ? __rb_insert_augmented+0x5de/0x610 [ 1763.109864][T14307] copy_mm+0xc7e/0x13e0 [ 1763.113857][T14307] ? copy_signal+0x610/0x610 [ 1763.118284][T14307] ? __init_rwsem+0xd6/0x1c0 [ 1763.122711][T14307] ? copy_signal+0x4e3/0x610 [ 1763.127133][T14307] copy_process+0x1149/0x3290 [ 1763.131652][T14307] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1763.136596][T14307] ? kasan_check_range+0x2b/0x2a0 [ 1763.141456][T14307] kernel_clone+0x21e/0x9e0 [ 1763.145805][T14307] ? create_io_thread+0x1e0/0x1e0 [ 1763.150657][T14307] ? clockevents_program_event+0x22f/0x300 [ 1763.156299][T14307] __x64_sys_clone+0x23f/0x290 [ 1763.160896][T14307] ? __do_sys_vfork+0x130/0x130 [ 1763.165672][T14307] ? debug_smp_processor_id+0x17/0x20 [ 1763.170878][T14307] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1763.176782][T14307] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1763.182249][T14307] do_syscall_64+0x3d/0xb0 [ 1763.186499][T14307] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1763.192142][T14307] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1763.197870][T14307] RIP: 0033:0x7f266d5a0da9 [ 1763.202124][T14307] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:38:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1200}, 0x36) 05:38:49 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 62) [ 1763.221565][T14307] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1763.229823][T14307] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1763.237622][T14307] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1763.245434][T14307] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1763.253249][T14307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1763.261054][T14307] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1763.268969][T14307] 05:38:49 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x70}, 0x36) 05:38:49 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x8080, 0x0, 0x0, 0x0, &(0x7f0000000e00), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14900, 0x0, 0x0, 0x0, 0x7f}, r3, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/pid\x00') syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x1, 0x20, 0x4, 0x0, 0x2, 0x1, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x1, @perf_config_ext={0x80000000, 0x8}, 0x400, 0x3, 0x84, 0x8, 0x10000, 0x7fff, 0x2d39, 0x0, 0x4, 0x0, 0xff}, r1, 0x4, r2, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x8080, 0x0, 0x0, 0x0, &(0x7f0000000e00), 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14900, 0x0, 0x0, 0x0, 0x7f}, r3, 0x0, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/pid\x00') (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='ns/pid_for_children\x00') (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x1, 0x20, 0x4, 0x0, 0x2, 0x1, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x1, @perf_config_ext={0x80000000, 0x8}, 0x400, 0x3, 0x84, 0x8, 0x10000, 0x7fff, 0x2d39, 0x0, 0x4, 0x0, 0xff}, r1, 0x4, r2, 0x1) (async) 05:38:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1300}, 0x36) 05:38:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x17dc}, 0x36) 05:38:49 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x71}, 0x36) [ 1763.344237][T14328] FAULT_INJECTION: forcing a failure. [ 1763.344237][T14328] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.380032][T14328] CPU: 1 PID: 14328 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 05:38:49 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x72}, 0x36) 05:38:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1763.391588][T14328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1763.401480][T14328] Call Trace: [ 1763.404603][T14328] [ 1763.407383][T14328] dump_stack_lvl+0x151/0x1b7 [ 1763.411894][T14328] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1763.417361][T14328] dump_stack+0x15/0x17 [ 1763.421354][T14328] should_fail+0x3c6/0x510 [ 1763.425605][T14328] __should_failslab+0xa4/0xe0 [ 1763.430208][T14328] ? vm_area_dup+0x26/0x230 [ 1763.434546][T14328] should_failslab+0x9/0x20 [ 1763.438885][T14328] slab_pre_alloc_hook+0x37/0xd0 [ 1763.443659][T14328] ? vm_area_dup+0x26/0x230 [ 1763.448002][T14328] kmem_cache_alloc+0x44/0x200 [ 1763.452601][T14328] vm_area_dup+0x26/0x230 [ 1763.456763][T14328] copy_mm+0x9a1/0x13e0 [ 1763.460758][T14328] ? copy_signal+0x610/0x610 [ 1763.465185][T14328] ? __init_rwsem+0xd6/0x1c0 [ 1763.469613][T14328] ? copy_signal+0x4e3/0x610 [ 1763.474038][T14328] copy_process+0x1149/0x3290 [ 1763.478551][T14328] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1763.484195][T14328] ? vfs_write+0x973/0x1110 [ 1763.488531][T14328] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1763.493481][T14328] ? vfs_write+0x9ec/0x1110 [ 1763.497817][T14328] ? __hrtimer_run_queues+0x46b/0xad0 [ 1763.503027][T14328] kernel_clone+0x21e/0x9e0 [ 1763.507366][T14328] ? file_end_write+0x1c0/0x1c0 [ 1763.512050][T14328] ? create_io_thread+0x1e0/0x1e0 [ 1763.516916][T14328] ? mutex_unlock+0xb2/0x260 [ 1763.521341][T14328] ? __mutex_lock_slowpath+0x10/0x10 [ 1763.526457][T14328] ? __fdget_pos+0x274/0x3a0 [ 1763.530887][T14328] __x64_sys_clone+0x23f/0x290 [ 1763.535489][T14328] ? __do_sys_vfork+0x130/0x130 [ 1763.540182][T14328] do_syscall_64+0x3d/0xb0 [ 1763.544425][T14328] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1763.550065][T14328] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1763.555798][T14328] RIP: 0033:0x7f266d5a0da9 [ 1763.560050][T14328] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1763.579489][T14328] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1763.587735][T14328] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1800}, 0x36) 05:38:49 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 63) 05:38:49 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x73}, 0x36) 05:38:49 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x40, 0x3, 0x0, 0x0, 0x0, 0x4000, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x3, 0x80000000}, 0x9055fff8892b876f, 0x9, 0x4, 0x7, 0x6, 0xffff5e7d, 0x5, 0x0, 0x81, 0x0, 0xffff}, r1, 0x6, r0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='&\x00') r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x26, 0x3f, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018270000", @ANYRES32, @ANYBLOB="0000000004000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="001400000000000000001811160a00000000000000000d00", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018200000", @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000010000005d61f4fff0ffffff18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xa860, 0x17, &(0x7f0000000500)=""/23, 0x40f00, 0x41, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5], &(0x7f00000005c0)=[{0x5, 0x5, 0x8, 0xa}, {0x1, 0x1, 0x4, 0x1}, {0x1, 0x1, 0x0, 0x8}, {0x4, 0x4, 0x4, 0x6}, {0x0, 0x3, 0x6, 0x3}], 0x10, 0x8000}, 0x90) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x2, 0xf3, 0xe0, 0x0, 0xffffffff, 0x8008, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xea4, 0x100000000}, 0x1088, 0x3, 0x8, 0x2, 0x10000, 0x9, 0x4, 0x0, 0x2000000, 0x0, 0x1ff}, 0x0, 0x10, r5, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000280)='cpu\t\t0\x03\t\t') perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x40, 0x2, 0x3, 0x0, 0x0, 0x1030, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x2008, 0x1ff, 0x400, 0x6, 0x20, 0x8, 0xfffb, 0x0, 0xf1, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r6, 0x0, r6}, 0x10) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x36) [ 1763.595548][T14328] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1763.603357][T14328] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1763.611169][T14328] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1763.618981][T14328] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1763.627057][T14328] 05:38:49 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x74}, 0x36) 05:38:49 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x2000}, 0x36) [ 1763.688864][T14358] FAULT_INJECTION: forcing a failure. [ 1763.688864][T14358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1763.725560][T14358] CPU: 1 PID: 14358 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1763.737112][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1763.747007][T14358] Call Trace: [ 1763.750127][T14358] [ 1763.752905][T14358] dump_stack_lvl+0x151/0x1b7 [ 1763.757420][T14358] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1763.762890][T14358] ? gfp_zone+0xe6/0x160 [ 1763.766968][T14358] dump_stack+0x15/0x17 [ 1763.770956][T14358] should_fail+0x3c6/0x510 [ 1763.775209][T14358] should_fail_alloc_page+0x5a/0x80 [ 1763.780241][T14358] prepare_alloc_pages+0x15c/0x700 [ 1763.785190][T14358] ? __alloc_pages_bulk+0xe40/0xe40 [ 1763.790224][T14358] __alloc_pages+0x18c/0x8f0 [ 1763.794652][T14358] ? prep_new_page+0x110/0x110 [ 1763.799258][T14358] ? 0xffffffffa002c000 [ 1763.803249][T14358] ? is_bpf_text_address+0x172/0x190 [ 1763.808364][T14358] pte_alloc_one+0x73/0x1b0 [ 1763.812705][T14358] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1763.817740][T14358] __pte_alloc+0x86/0x350 [ 1763.821903][T14358] ? irqentry_exit+0x30/0x40 [ 1763.826330][T14358] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1763.831972][T14358] ? free_pgtables+0x280/0x280 [ 1763.836576][T14358] ? __kasan_check_write+0x14/0x20 [ 1763.841522][T14358] copy_page_range+0x28a8/0x2f90 [ 1763.846304][T14358] ? __kasan_slab_alloc+0xb1/0xe0 [ 1763.851157][T14358] ? pfn_valid+0x1e0/0x1e0 [ 1763.855405][T14358] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 1763.860702][T14358] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1763.866256][T14358] ? __rb_insert_augmented+0x5de/0x610 [ 1763.871561][T14358] copy_mm+0xc7e/0x13e0 [ 1763.875545][T14358] ? copy_signal+0x610/0x610 [ 1763.879969][T14358] ? __init_rwsem+0xd6/0x1c0 [ 1763.884392][T14358] ? copy_signal+0x4e3/0x610 [ 1763.888820][T14358] copy_process+0x1149/0x3290 [ 1763.893336][T14358] ? timerqueue_add+0x250/0x270 [ 1763.898020][T14358] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1763.902967][T14358] ? enqueue_hrtimer+0xca/0x240 [ 1763.907653][T14358] ? __hrtimer_run_queues+0x46b/0xad0 [ 1763.912861][T14358] kernel_clone+0x21e/0x9e0 [ 1763.917204][T14358] ? create_io_thread+0x1e0/0x1e0 [ 1763.922064][T14358] ? clockevents_program_event+0x22f/0x300 [ 1763.927709][T14358] __x64_sys_clone+0x23f/0x290 [ 1763.932304][T14358] ? __do_sys_vfork+0x130/0x130 [ 1763.936991][T14358] ? debug_smp_processor_id+0x17/0x20 [ 1763.942198][T14358] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1763.948102][T14358] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1763.953570][T14358] do_syscall_64+0x3d/0xb0 [ 1763.957820][T14358] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1763.963462][T14358] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1763.969193][T14358] RIP: 0033:0x7f266d5a0da9 [ 1763.973452][T14358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1763.992890][T14358] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1764.001130][T14358] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1764.008941][T14358] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1764.016755][T14358] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1764.024564][T14358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1764.032375][T14358] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 05:38:50 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x79}, 0x36) 05:38:50 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x40, 0x3, 0x0, 0x0, 0x0, 0x4000, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x3, 0x80000000}, 0x9055fff8892b876f, 0x9, 0x4, 0x7, 0x6, 0xffff5e7d, 0x5, 0x0, 0x81, 0x0, 0xffff}, r1, 0x6, r0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='&\x00') (async) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x26, 0x3f, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018270000", @ANYRES32, @ANYBLOB="0000000004000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="001400000000000000001811160a00000000000000000d00", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018200000", @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000010000005d61f4fff0ffffff18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xa860, 0x17, &(0x7f0000000500)=""/23, 0x40f00, 0x41, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5], &(0x7f00000005c0)=[{0x5, 0x5, 0x8, 0xa}, {0x1, 0x1, 0x4, 0x1}, {0x1, 0x1, 0x0, 0x8}, {0x4, 0x4, 0x4, 0x6}, {0x0, 0x3, 0x6, 0x3}], 0x10, 0x8000}, 0x90) (async) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x2, 0xf3, 0xe0, 0x0, 0xffffffff, 0x8008, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xea4, 0x100000000}, 0x1088, 0x3, 0x8, 0x2, 0x10000, 0x9, 0x4, 0x0, 0x2000000, 0x0, 0x1ff}, 0x0, 0x10, r5, 0xa) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000280)='cpu\t\t0\x03\t\t') perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x40, 0x2, 0x3, 0x0, 0x0, 0x1030, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x2008, 0x1ff, 0x400, 0x6, 0x20, 0x8, 0xfffb, 0x0, 0xf1, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r6, 0x0, r6}, 0x10) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:50 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:50 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x2100}, 0x36) 05:38:50 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7a}, 0x36) [ 1764.040194][T14358] 05:38:50 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7b}, 0x36) 05:38:50 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 64) 05:38:50 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x2500}, 0x36) [ 1764.108268][T14382] FAULT_INJECTION: forcing a failure. [ 1764.108268][T14382] name failslab, interval 1, probability 0, space 0, times 0 [ 1764.130203][T14382] CPU: 0 PID: 14382 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1764.141757][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1764.151653][T14382] Call Trace: [ 1764.154773][T14382] [ 1764.157555][T14382] dump_stack_lvl+0x151/0x1b7 [ 1764.162067][T14382] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1764.167624][T14382] dump_stack+0x15/0x17 [ 1764.171610][T14382] should_fail+0x3c6/0x510 [ 1764.175863][T14382] __should_failslab+0xa4/0xe0 [ 1764.180463][T14382] ? vm_area_dup+0x26/0x230 [ 1764.184805][T14382] should_failslab+0x9/0x20 [ 1764.189145][T14382] slab_pre_alloc_hook+0x37/0xd0 [ 1764.193918][T14382] ? vm_area_dup+0x26/0x230 [ 1764.198259][T14382] kmem_cache_alloc+0x44/0x200 [ 1764.202858][T14382] vm_area_dup+0x26/0x230 [ 1764.207030][T14382] copy_mm+0x9a1/0x13e0 [ 1764.211018][T14382] ? copy_signal+0x610/0x610 [ 1764.215441][T14382] ? __init_rwsem+0xd6/0x1c0 [ 1764.219867][T14382] ? copy_signal+0x4e3/0x610 [ 1764.224297][T14382] copy_process+0x1149/0x3290 [ 1764.228816][T14382] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1764.234450][T14382] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1764.239399][T14382] kernel_clone+0x21e/0x9e0 [ 1764.243737][T14382] ? create_io_thread+0x1e0/0x1e0 [ 1764.248599][T14382] ? clockevents_program_event+0x22f/0x300 [ 1764.254240][T14382] __x64_sys_clone+0x23f/0x290 [ 1764.258838][T14382] ? __do_sys_vfork+0x130/0x130 [ 1764.263527][T14382] ? debug_smp_processor_id+0x17/0x20 [ 1764.268740][T14382] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1764.274635][T14382] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1764.280103][T14382] do_syscall_64+0x3d/0xb0 [ 1764.284353][T14382] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1764.289997][T14382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1764.295724][T14382] RIP: 0033:0x7f266d5a0da9 [ 1764.299979][T14382] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1764.319418][T14382] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1764.327666][T14382] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1764.335475][T14382] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1764.343288][T14382] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1764.351097][T14382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:50 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x2900}, 0x36) 05:38:50 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x83}, 0x36) 05:38:50 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x40, 0x3, 0x0, 0x0, 0x0, 0x4000, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0x3, 0x80000000}, 0x9055fff8892b876f, 0x9, 0x4, 0x7, 0x6, 0xffff5e7d, 0x5, 0x0, 0x81, 0x0, 0xffff}, r1, 0x6, r0, 0x0) (async) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='&\x00') (async) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x26, 0x3f, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018270000", @ANYRES32, @ANYBLOB="0000000004000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="001400000000000000001811160a00000000000000000d00", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018200000", @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000010000005d61f4fff0ffffff18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xa860, 0x17, &(0x7f0000000500)=""/23, 0x40f00, 0x41, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5], &(0x7f00000005c0)=[{0x5, 0x5, 0x8, 0xa}, {0x1, 0x1, 0x4, 0x1}, {0x1, 0x1, 0x0, 0x8}, {0x4, 0x4, 0x4, 0x6}, {0x0, 0x3, 0x6, 0x3}], 0x10, 0x8000}, 0x90) (async) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x2, 0xf3, 0xe0, 0x0, 0xffffffff, 0x8008, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xea4, 0x100000000}, 0x1088, 0x3, 0x8, 0x2, 0x10000, 0x9, 0x4, 0x0, 0x2000000, 0x0, 0x1ff}, 0x0, 0x10, r5, 0xa) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000280)='cpu\t\t0\x03\t\t') (async) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x40, 0x2, 0x3, 0x0, 0x0, 0x1030, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x2008, 0x1ff, 0x400, 0x6, 0x20, 0x8, 0xfffb, 0x0, 0xf1, 0x0, 0x200}, 0x0, 0xb, 0xffffffffffffffff, 0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r6, 0x0, r6}, 0x10) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:50 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 65) 05:38:50 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa0}, 0x36) [ 1764.358912][T14382] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1764.366726][T14382] [ 1764.422539][T14400] FAULT_INJECTION: forcing a failure. [ 1764.422539][T14400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1764.436131][T14400] CPU: 1 PID: 14400 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1764.447665][T14400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1764.457558][T14400] Call Trace: [ 1764.460685][T14400] [ 1764.463461][T14400] dump_stack_lvl+0x151/0x1b7 [ 1764.467974][T14400] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1764.473444][T14400] ? kvm_sched_clock_read+0x18/0x40 [ 1764.478479][T14400] dump_stack+0x15/0x17 [ 1764.482468][T14400] should_fail+0x3c6/0x510 [ 1764.486723][T14400] should_fail_alloc_page+0x5a/0x80 [ 1764.491757][T14400] prepare_alloc_pages+0x15c/0x700 [ 1764.496708][T14400] ? __alloc_pages_bulk+0xe40/0xe40 [ 1764.501764][T14400] __alloc_pages+0x18c/0x8f0 [ 1764.506163][T14400] ? prep_new_page+0x110/0x110 [ 1764.510769][T14400] ? 0xffffffffa0028bc8 [ 1764.514755][T14400] ? is_bpf_text_address+0x172/0x190 [ 1764.519879][T14400] pte_alloc_one+0x73/0x1b0 [ 1764.524217][T14400] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1764.529250][T14400] ? irqentry_exit+0x30/0x40 [ 1764.533686][T14400] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1764.539666][T14400] __pte_alloc+0x86/0x350 [ 1764.543832][T14400] ? add_mm_rss_vec+0xb0/0x240 [ 1764.548451][T14400] ? free_pgtables+0x280/0x280 [ 1764.553031][T14400] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 1764.558413][T14400] ? __kasan_check_write+0x14/0x20 [ 1764.563373][T14400] copy_page_range+0x28a8/0x2f90 [ 1764.568144][T14400] ? __kasan_slab_alloc+0xb1/0xe0 [ 1764.572999][T14400] ? pfn_valid+0x1e0/0x1e0 [ 1764.577248][T14400] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 1764.583503][T14400] copy_mm+0xc7e/0x13e0 [ 1764.587530][T14400] ? copy_signal+0x610/0x610 [ 1764.591922][T14400] ? __init_rwsem+0xd6/0x1c0 [ 1764.596345][T14400] ? copy_signal+0x4e3/0x610 [ 1764.600778][T14400] copy_process+0x1149/0x3290 [ 1764.605291][T14400] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1764.610236][T14400] ? kasan_check_range+0x1bd/0x2a0 [ 1764.615180][T14400] kernel_clone+0x21e/0x9e0 [ 1764.619519][T14400] ? create_io_thread+0x1e0/0x1e0 [ 1764.624378][T14400] ? clockevents_program_event+0x22f/0x300 [ 1764.630020][T14400] __x64_sys_clone+0x23f/0x290 [ 1764.634620][T14400] ? __do_sys_vfork+0x130/0x130 [ 1764.639306][T14400] ? debug_smp_processor_id+0x17/0x20 [ 1764.644516][T14400] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1764.650414][T14400] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1764.655882][T14400] do_syscall_64+0x3d/0xb0 [ 1764.660135][T14400] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1764.665778][T14400] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1764.671505][T14400] RIP: 0033:0x7f266d5a0da9 [ 1764.675757][T14400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1764.695199][T14400] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1764.703444][T14400] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1764.711275][T14400] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:50 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3000}, 0x36) 05:38:50 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x81, 0x5, 0xfe, 0x3, 0x0, 0x48d, 0x1010, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x200, 0x0, 0x8, 0x0, 0x1, 0x7ff, 0xfffb, 0x0, 0x7, 0x0, 0x7fffffffffffffff}, r3, 0x3, r2, 0x6) 05:38:50 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xdd}, 0x36) 05:38:50 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3c00}, 0x36) 05:38:50 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 66) [ 1764.719069][T14400] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1764.726966][T14400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1764.734776][T14400] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1764.742592][T14400] 05:38:50 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3e00}, 0x36) 05:38:50 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x300}, 0x36) 05:38:50 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3f00}, 0x36) 05:38:50 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x500}, 0x36) [ 1764.808963][T14409] FAULT_INJECTION: forcing a failure. [ 1764.808963][T14409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1764.864766][T14409] CPU: 0 PID: 14409 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1764.876322][T14409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1764.886219][T14409] Call Trace: [ 1764.889339][T14409] [ 1764.892118][T14409] dump_stack_lvl+0x151/0x1b7 [ 1764.896629][T14409] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1764.902095][T14409] ? irqentry_exit+0x30/0x40 [ 1764.906527][T14409] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1764.912512][T14409] dump_stack+0x15/0x17 [ 1764.916512][T14409] should_fail+0x3c6/0x510 [ 1764.920761][T14409] should_fail_alloc_page+0x5a/0x80 [ 1764.925795][T14409] prepare_alloc_pages+0x15c/0x700 [ 1764.930741][T14409] ? __alloc_pages_bulk+0xe40/0xe40 [ 1764.935778][T14409] __alloc_pages+0x18c/0x8f0 [ 1764.940201][T14409] ? _raw_spin_unlock+0x4d/0x70 [ 1764.944890][T14409] ? prep_new_page+0x110/0x110 [ 1764.949490][T14409] pte_alloc_one+0x73/0x1b0 [ 1764.953827][T14409] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1764.958863][T14409] __pte_alloc+0x86/0x350 [ 1764.963026][T14409] ? irqentry_exit+0x30/0x40 [ 1764.967457][T14409] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1764.973094][T14409] ? free_pgtables+0x280/0x280 [ 1764.977694][T14409] ? __kasan_check_write+0x14/0x20 [ 1764.982642][T14409] copy_page_range+0x28a8/0x2f90 [ 1764.987417][T14409] ? __kasan_slab_alloc+0xb1/0xe0 [ 1764.992281][T14409] ? pfn_valid+0x1e0/0x1e0 [ 1764.996531][T14409] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1765.002095][T14409] ? __rb_insert_augmented+0x5de/0x610 [ 1765.007380][T14409] copy_mm+0xc7e/0x13e0 [ 1765.011373][T14409] ? copy_signal+0x610/0x610 [ 1765.015797][T14409] ? __init_rwsem+0xd6/0x1c0 [ 1765.020225][T14409] ? copy_signal+0x4e3/0x610 [ 1765.024650][T14409] copy_process+0x1149/0x3290 [ 1765.029166][T14409] ? proc_fail_nth_write+0x20b/0x290 [ 1765.034285][T14409] ? fsnotify_perm+0x6a/0x5d0 [ 1765.038797][T14409] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1765.043745][T14409] ? vfs_write+0x9ec/0x1110 [ 1765.048087][T14409] kernel_clone+0x21e/0x9e0 [ 1765.052425][T14409] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1765.058065][T14409] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1765.064063][T14409] ? create_io_thread+0x1e0/0x1e0 [ 1765.068917][T14409] ? __x64_sys_clone+0x237/0x290 [ 1765.073689][T14409] ? __memmove+0x1a0/0x1a0 [ 1765.077942][T14409] __x64_sys_clone+0x23f/0x290 [ 1765.082541][T14409] ? __do_sys_vfork+0x130/0x130 [ 1765.087229][T14409] ? ksys_write+0x260/0x2c0 [ 1765.091575][T14409] ? debug_smp_processor_id+0x17/0x20 [ 1765.096777][T14409] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1765.102677][T14409] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1765.108154][T14409] do_syscall_64+0x3d/0xb0 [ 1765.112400][T14409] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1765.118134][T14409] RIP: 0033:0x7f266d5a0da9 [ 1765.122390][T14409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1765.141821][T14409] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1765.150068][T14409] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1765.157878][T14409] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:51 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x81, 0x5, 0xfe, 0x3, 0x0, 0x48d, 0x1010, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x200, 0x0, 0x8, 0x0, 0x1, 0x7ff, 0xfffb, 0x0, 0x7, 0x0, 0x7fffffffffffffff}, r3, 0x3, r2, 0x6) 05:38:51 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x0, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:51 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 67) 05:38:51 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x600}, 0x36) 05:38:51 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x4000}, 0x36) [ 1765.165688][T14409] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1765.173500][T14409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1765.181310][T14409] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1765.189130][T14409] [ 1765.251292][T14426] FAULT_INJECTION: forcing a failure. [ 1765.251292][T14426] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1765.264695][T14426] CPU: 1 PID: 14426 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1765.276225][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1765.286118][T14426] Call Trace: [ 1765.289241][T14426] [ 1765.292019][T14426] dump_stack_lvl+0x151/0x1b7 [ 1765.296533][T14426] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1765.302000][T14426] dump_stack+0x15/0x17 [ 1765.306079][T14426] should_fail+0x3c6/0x510 [ 1765.310333][T14426] should_fail_alloc_page+0x5a/0x80 [ 1765.315366][T14426] prepare_alloc_pages+0x15c/0x700 [ 1765.320316][T14426] ? __alloc_pages_bulk+0xe40/0xe40 [ 1765.325347][T14426] __alloc_pages+0x18c/0x8f0 [ 1765.329774][T14426] ? prep_new_page+0x110/0x110 [ 1765.334375][T14426] ? 0xffffffffa002c000 [ 1765.338368][T14426] ? is_bpf_text_address+0x172/0x190 [ 1765.343494][T14426] pte_alloc_one+0x73/0x1b0 [ 1765.347827][T14426] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1765.352862][T14426] __pte_alloc+0x86/0x350 [ 1765.357032][T14426] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1765.362673][T14426] ? free_pgtables+0x280/0x280 [ 1765.367275][T14426] ? __kasan_check_write+0x14/0x20 [ 1765.372219][T14426] copy_page_range+0x28a8/0x2f90 [ 1765.376996][T14426] ? __kasan_slab_alloc+0xb1/0xe0 [ 1765.381857][T14426] ? pfn_valid+0x1e0/0x1e0 [ 1765.386104][T14426] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1765.391659][T14426] ? __rb_insert_augmented+0x5de/0x610 [ 1765.396956][T14426] copy_mm+0xc7e/0x13e0 [ 1765.400948][T14426] ? copy_signal+0x610/0x610 [ 1765.405372][T14426] ? __init_rwsem+0xd6/0x1c0 [ 1765.409800][T14426] ? copy_signal+0x4e3/0x610 [ 1765.414225][T14426] copy_process+0x1149/0x3290 [ 1765.418749][T14426] ? timerqueue_add+0x250/0x270 [ 1765.423425][T14426] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1765.428373][T14426] ? enqueue_hrtimer+0xca/0x240 [ 1765.433060][T14426] ? __hrtimer_run_queues+0x46b/0xad0 [ 1765.438267][T14426] kernel_clone+0x21e/0x9e0 [ 1765.442607][T14426] ? create_io_thread+0x1e0/0x1e0 [ 1765.447467][T14426] ? clockevents_program_event+0x22f/0x300 [ 1765.453110][T14426] __x64_sys_clone+0x23f/0x290 [ 1765.457709][T14426] ? __do_sys_vfork+0x130/0x130 [ 1765.462397][T14426] ? debug_smp_processor_id+0x17/0x20 [ 1765.467601][T14426] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1765.473506][T14426] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1765.478978][T14426] do_syscall_64+0x3d/0xb0 [ 1765.483239][T14426] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1765.488867][T14426] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1765.494594][T14426] RIP: 0033:0x7f266d5a0da9 [ 1765.498852][T14426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1765.518290][T14426] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1765.526535][T14426] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1765.534347][T14426] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1765.542157][T14426] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 05:38:51 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 68) 05:38:51 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x700}, 0x36) 05:38:51 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x4800}, 0x36) [ 1765.549969][T14426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1765.557844][T14426] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1765.565594][T14426] 05:38:51 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x900}, 0x36) 05:38:51 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x4c00}, 0x36) [ 1765.612943][T14437] FAULT_INJECTION: forcing a failure. [ 1765.612943][T14437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1765.656041][T14437] CPU: 0 PID: 14437 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1765.667595][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1765.677490][T14437] Call Trace: [ 1765.680614][T14437] [ 1765.683391][T14437] dump_stack_lvl+0x151/0x1b7 [ 1765.687900][T14437] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1765.693382][T14437] ? kvm_sched_clock_read+0x18/0x40 [ 1765.698402][T14437] ? sched_clock+0x9/0x10 [ 1765.702569][T14437] ? sched_clock_cpu+0x18/0x3b0 [ 1765.707253][T14437] ? _raw_spin_lock+0xa4/0x1b0 [ 1765.711855][T14437] dump_stack+0x15/0x17 [ 1765.715855][T14437] should_fail+0x3c6/0x510 [ 1765.720108][T14437] should_fail_alloc_page+0x5a/0x80 [ 1765.725134][T14437] prepare_alloc_pages+0x15c/0x700 [ 1765.730085][T14437] ? __alloc_pages_bulk+0xe40/0xe40 [ 1765.735115][T14437] ? kasan_check_range+0x82/0x2a0 [ 1765.739980][T14437] __alloc_pages+0x18c/0x8f0 [ 1765.744404][T14437] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1765.750045][T14437] ? prep_new_page+0x110/0x110 [ 1765.754644][T14437] ? stack_trace_save+0x1c0/0x1c0 [ 1765.759508][T14437] ? 0xffffffffa00282c4 [ 1765.763498][T14437] ? is_bpf_text_address+0x172/0x190 [ 1765.768618][T14437] pte_alloc_one+0x73/0x1b0 [ 1765.772956][T14437] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1765.777998][T14437] __pte_alloc+0x86/0x350 [ 1765.782155][T14437] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1765.787799][T14437] ? free_pgtables+0x280/0x280 [ 1765.792400][T14437] ? __kasan_check_write+0x14/0x20 [ 1765.797347][T14437] copy_page_range+0x28a8/0x2f90 [ 1765.802120][T14437] ? __kasan_slab_alloc+0xb1/0xe0 [ 1765.806985][T14437] ? pfn_valid+0x1e0/0x1e0 [ 1765.811246][T14437] ? __vma_link_rb+0x4c5/0x550 [ 1765.815831][T14437] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 1765.821388][T14437] ? __rb_insert_augmented+0x5de/0x610 [ 1765.826685][T14437] copy_mm+0xc7e/0x13e0 [ 1765.830677][T14437] ? copy_signal+0x610/0x610 [ 1765.835106][T14437] ? __init_rwsem+0xd6/0x1c0 [ 1765.839528][T14437] ? copy_signal+0x4e3/0x610 [ 1765.843954][T14437] copy_process+0x1149/0x3290 [ 1765.848468][T14437] ? proc_fail_nth_write+0x20b/0x290 [ 1765.853587][T14437] ? fsnotify_perm+0x6a/0x5d0 [ 1765.858103][T14437] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1765.863049][T14437] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1765.869037][T14437] kernel_clone+0x21e/0x9e0 [ 1765.873375][T14437] ? kasan_check_range+0x8/0x2a0 [ 1765.878153][T14437] ? create_io_thread+0x1e0/0x1e0 [ 1765.883010][T14437] ? mutex_unlock+0xb2/0x260 [ 1765.887439][T14437] ? __mutex_lock_slowpath+0x10/0x10 [ 1765.892560][T14437] __x64_sys_clone+0x23f/0x290 [ 1765.897159][T14437] ? __do_sys_vfork+0x130/0x130 [ 1765.901845][T14437] ? ksys_write+0x260/0x2c0 [ 1765.906189][T14437] ? debug_smp_processor_id+0x17/0x20 [ 1765.911404][T14437] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1765.917294][T14437] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1765.922762][T14437] do_syscall_64+0x3d/0xb0 [ 1765.927014][T14437] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1765.932659][T14437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1765.938387][T14437] RIP: 0033:0x7f266d5a0da9 [ 1765.942641][T14437] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1765.962081][T14437] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1765.970327][T14437] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1765.978135][T14437] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1765.985947][T14437] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1765.993759][T14437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:52 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x81, 0x5, 0xfe, 0x3, 0x0, 0x48d, 0x1010, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x200, 0x0, 0x8, 0x0, 0x1, 0x7ff, 0xfffb, 0x0, 0x7, 0x0, 0x7fffffffffffffff}, r3, 0x3, r2, 0x6) 05:38:52 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa00}, 0x36) 05:38:52 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6000}, 0x36) [ 1766.001572][T14437] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1766.009391][T14437] 05:38:52 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 69) 05:38:52 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xb00}, 0x36) 05:38:52 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6100}, 0x36) 05:38:52 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x0, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1766.111526][T14461] FAULT_INJECTION: forcing a failure. [ 1766.111526][T14461] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.132417][T14461] CPU: 1 PID: 14461 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1766.143966][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1766.153859][T14461] Call Trace: [ 1766.156985][T14461] [ 1766.159760][T14461] dump_stack_lvl+0x151/0x1b7 [ 1766.164284][T14461] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1766.169751][T14461] dump_stack+0x15/0x17 [ 1766.173733][T14461] should_fail+0x3c6/0x510 [ 1766.177989][T14461] __should_failslab+0xa4/0xe0 [ 1766.182591][T14461] ? anon_vma_fork+0x1df/0x4e0 [ 1766.187231][T14461] should_failslab+0x9/0x20 [ 1766.191540][T14461] slab_pre_alloc_hook+0x37/0xd0 [ 1766.196304][T14461] ? anon_vma_fork+0x1df/0x4e0 [ 1766.200901][T14461] kmem_cache_alloc+0x44/0x200 [ 1766.205504][T14461] anon_vma_fork+0x1df/0x4e0 [ 1766.209931][T14461] copy_mm+0xa3a/0x13e0 [ 1766.213920][T14461] ? irqentry_exit+0x30/0x40 [ 1766.218348][T14461] ? copy_signal+0x610/0x610 [ 1766.222773][T14461] ? __init_rwsem+0xd6/0x1c0 [ 1766.227201][T14461] ? copy_signal+0x4e3/0x610 [ 1766.231624][T14461] copy_process+0x1149/0x3290 [ 1766.236143][T14461] ? timerqueue_add+0x250/0x270 [ 1766.240827][T14461] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1766.245773][T14461] ? enqueue_hrtimer+0xca/0x240 [ 1766.250458][T14461] ? __hrtimer_run_queues+0x46b/0xad0 [ 1766.255669][T14461] kernel_clone+0x21e/0x9e0 [ 1766.260007][T14461] ? create_io_thread+0x1e0/0x1e0 [ 1766.264866][T14461] ? clockevents_program_event+0x22f/0x300 [ 1766.270510][T14461] __x64_sys_clone+0x23f/0x290 [ 1766.275108][T14461] ? __do_sys_vfork+0x130/0x130 [ 1766.279796][T14461] ? debug_smp_processor_id+0x17/0x20 [ 1766.285003][T14461] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1766.290905][T14461] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1766.296375][T14461] do_syscall_64+0x3d/0xb0 [ 1766.300627][T14461] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1766.306275][T14461] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1766.311995][T14461] RIP: 0033:0x7f266d5a0da9 [ 1766.316249][T14461] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1766.335689][T14461] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1766.343933][T14461] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1766.351746][T14461] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:52 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6200}, 0x36) 05:38:52 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc00}, 0x36) 05:38:52 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x77, 0x7f, 0x3, 0x1, 0x0, 0x51, 0x30000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x2102, 0x7, 0x20, 0x6, 0x8, 0x101, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, r1, 0xe, r0, 0x8) r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1f, 0x7f, 0x80, 0xfb, 0x0, 0x4, 0x8000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x14000, 0xfffffffffffffffb, 0x7f, 0x5, 0x8, 0xffffffe0, 0x1, 0x0, 0x4, 0x0, 0x80000001}, r1, 0xc, r2, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1766.359559][T14461] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1766.367373][T14461] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1766.375181][T14461] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1766.382993][T14461] 05:38:52 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6300}, 0x36) 05:38:52 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xd00}, 0x36) 05:38:52 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 70) 05:38:52 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xe00}, 0x36) 05:38:52 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x77, 0x7f, 0x3, 0x1, 0x0, 0x51, 0x30000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x2102, 0x7, 0x20, 0x6, 0x8, 0x101, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, r1, 0xe, r0, 0x8) (async) r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1f, 0x7f, 0x80, 0xfb, 0x0, 0x4, 0x8000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x14000, 0xfffffffffffffffb, 0x7f, 0x5, 0x8, 0xffffffe0, 0x1, 0x0, 0x4, 0x0, 0x80000001}, r1, 0xc, r2, 0x9) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:52 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6400}, 0x36) 05:38:52 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xf00}, 0x36) [ 1766.507632][T14485] FAULT_INJECTION: forcing a failure. [ 1766.507632][T14485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1766.520845][T14485] CPU: 0 PID: 14485 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1766.532375][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1766.542289][T14485] Call Trace: [ 1766.545398][T14485] [ 1766.548175][T14485] dump_stack_lvl+0x151/0x1b7 [ 1766.552684][T14485] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1766.558150][T14485] ? kvm_sched_clock_read+0x18/0x40 [ 1766.563185][T14485] ? sched_clock+0x9/0x10 [ 1766.567353][T14485] ? sched_clock_cpu+0x18/0x3b0 [ 1766.572048][T14485] ? _raw_spin_lock+0xa4/0x1b0 [ 1766.576638][T14485] dump_stack+0x15/0x17 [ 1766.580630][T14485] should_fail+0x3c6/0x510 [ 1766.584989][T14485] should_fail_alloc_page+0x5a/0x80 [ 1766.590009][T14485] prepare_alloc_pages+0x15c/0x700 [ 1766.594951][T14485] ? __alloc_pages_bulk+0xe40/0xe40 [ 1766.599986][T14485] __alloc_pages+0x18c/0x8f0 [ 1766.604411][T14485] ? prep_new_page+0x110/0x110 [ 1766.609017][T14485] ? 0xffffffffa002c000 [ 1766.613007][T14485] ? is_bpf_text_address+0x172/0x190 [ 1766.618125][T14485] pte_alloc_one+0x73/0x1b0 [ 1766.622465][T14485] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1766.627499][T14485] __pte_alloc+0x86/0x350 [ 1766.631662][T14485] ? irqentry_exit+0x30/0x40 [ 1766.636091][T14485] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1766.641733][T14485] ? free_pgtables+0x280/0x280 [ 1766.646336][T14485] ? __kasan_check_write+0x14/0x20 [ 1766.651288][T14485] copy_page_range+0x28a8/0x2f90 [ 1766.656053][T14485] ? __kasan_slab_alloc+0xb1/0xe0 [ 1766.660917][T14485] ? pfn_valid+0x1e0/0x1e0 [ 1766.665168][T14485] ? irqentry_exit+0x30/0x40 [ 1766.669592][T14485] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1766.675233][T14485] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1766.681223][T14485] ? vma_gap_callbacks_rotate+0xcb/0x210 [ 1766.686702][T14485] copy_mm+0xc7e/0x13e0 [ 1766.690685][T14485] ? copy_signal+0x610/0x610 [ 1766.695110][T14485] ? __init_rwsem+0xd6/0x1c0 [ 1766.699538][T14485] ? copy_signal+0x4e3/0x610 [ 1766.703967][T14485] copy_process+0x1149/0x3290 [ 1766.708481][T14485] ? irqentry_exit+0x30/0x40 [ 1766.712902][T14485] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1766.717857][T14485] ? vfs_write+0x9ec/0x1110 [ 1766.722196][T14485] ? __hrtimer_run_queues+0x46b/0xad0 [ 1766.727400][T14485] kernel_clone+0x21e/0x9e0 [ 1766.731737][T14485] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1766.737379][T14485] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1766.743378][T14485] ? create_io_thread+0x1e0/0x1e0 [ 1766.748236][T14485] ? memset+0x35/0x40 [ 1766.752048][T14485] __x64_sys_clone+0x23f/0x290 [ 1766.756647][T14485] ? __do_sys_vfork+0x130/0x130 [ 1766.761334][T14485] ? ksys_write+0x260/0x2c0 [ 1766.765675][T14485] ? debug_smp_processor_id+0x17/0x20 [ 1766.770883][T14485] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1766.776783][T14485] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1766.782262][T14485] do_syscall_64+0x3d/0xb0 [ 1766.786503][T14485] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1766.792144][T14485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1766.797881][T14485] RIP: 0033:0x7f266d5a0da9 [ 1766.802131][T14485] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1766.821580][T14485] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1766.829815][T14485] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1766.837625][T14485] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1766.845438][T14485] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6800}, 0x36) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1100}, 0x36) 05:38:53 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x77, 0x7f, 0x3, 0x1, 0x0, 0x51, 0x30000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x2102, 0x7, 0x20, 0x6, 0x8, 0x101, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, r1, 0xe, r0, 0x8) r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1f, 0x7f, 0x80, 0xfb, 0x0, 0x4, 0x8000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x14000, 0xfffffffffffffffb, 0x7f, 0x5, 0x8, 0xffffffe0, 0x1, 0x0, 0x4, 0x0, 0x80000001}, r1, 0xc, r2, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x77, 0x7f, 0x3, 0x1, 0x0, 0x51, 0x30000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x2102, 0x7, 0x20, 0x6, 0x8, 0x101, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, r1, 0xe, r0, 0x8) (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1f, 0x7f, 0x80, 0xfb, 0x0, 0x4, 0x8000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x14000, 0xfffffffffffffffb, 0x7f, 0x5, 0x8, 0xffffffe0, 0x1, 0x0, 0x4, 0x0, 0x80000001}, r1, 0xc, r2, 0x9) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:53 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x0, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6900}, 0x36) [ 1766.853257][T14485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1766.861060][T14485] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1766.868881][T14485] 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6a00}, 0x36) 05:38:53 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 71) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1200}, 0x36) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6b00}, 0x36) 05:38:53 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x20, 0x3, 0x1f, 0x0, 0xb75d, 0x40, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xa501, 0x3, 0xb1f4, 0x7, 0x3, 0x40, 0x7fff, 0x0, 0x5, 0x0, 0x8}, r1, 0x2, r2, 0xcd5b80e32fa6dc5d) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0x8000000000000001) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x81, 0x1, 0xbc, 0x0, 0x0, 0xa0044, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x400, 0x6}, 0x21, 0x0, 0x8000, 0x2, 0xb8, 0x1, 0x5, 0x0, 0x101, 0x0, 0x8000000000000}, r1, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x1, 0x80, 0x0, 0x5, 0x70000, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x12, 0x10001}, 0x10c060, 0x3, 0x1ff, 0x4, 0x3, 0x2c25fe42, 0x1, 0x0, 0x6, 0x0, 0x7fffffffffffffff}, r1, 0x5, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1300}, 0x36) [ 1766.965640][T14507] FAULT_INJECTION: forcing a failure. [ 1766.965640][T14507] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.988192][T14507] CPU: 1 PID: 14507 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1766.999740][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1767.009636][T14507] Call Trace: [ 1767.012758][T14507] [ 1767.015544][T14507] dump_stack_lvl+0x151/0x1b7 [ 1767.020060][T14507] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1767.025519][T14507] ? irqentry_exit+0x30/0x40 [ 1767.029946][T14507] dump_stack+0x15/0x17 [ 1767.033934][T14507] should_fail+0x3c6/0x510 [ 1767.038190][T14507] __should_failslab+0xa4/0xe0 [ 1767.042791][T14507] ? vm_area_dup+0x26/0x230 [ 1767.047129][T14507] should_failslab+0x9/0x20 [ 1767.051472][T14507] slab_pre_alloc_hook+0x37/0xd0 [ 1767.056243][T14507] ? vm_area_dup+0x26/0x230 [ 1767.060582][T14507] kmem_cache_alloc+0x44/0x200 [ 1767.065183][T14507] vm_area_dup+0x26/0x230 [ 1767.069351][T14507] copy_mm+0x9a1/0x13e0 [ 1767.073341][T14507] ? irqentry_exit+0x30/0x40 [ 1767.077772][T14507] ? copy_signal+0x610/0x610 [ 1767.082192][T14507] ? __init_rwsem+0xd6/0x1c0 [ 1767.086623][T14507] ? copy_signal+0x4e3/0x610 [ 1767.091047][T14507] copy_process+0x1149/0x3290 [ 1767.095571][T14507] ? proc_fail_nth_write+0x20b/0x290 [ 1767.100682][T14507] ? irqentry_exit+0x30/0x40 [ 1767.105112][T14507] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1767.110056][T14507] kernel_clone+0x21e/0x9e0 [ 1767.114397][T14507] ? create_io_thread+0x1e0/0x1e0 [ 1767.119256][T14507] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1767.125248][T14507] __x64_sys_clone+0x23f/0x290 [ 1767.129852][T14507] ? __do_sys_vfork+0x130/0x130 [ 1767.134541][T14507] ? ksys_write+0x260/0x2c0 [ 1767.138872][T14507] ? debug_smp_processor_id+0x17/0x20 [ 1767.144075][T14507] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1767.149987][T14507] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1767.155448][T14507] do_syscall_64+0x3d/0xb0 [ 1767.159702][T14507] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1767.165344][T14507] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1767.171067][T14507] RIP: 0033:0x7f266d5a0da9 [ 1767.175331][T14507] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1767.194763][T14507] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1767.203008][T14507] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6c00}, 0x36) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1800}, 0x36) 05:38:53 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x20, 0x3, 0x1f, 0x0, 0xb75d, 0x40, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xa501, 0x3, 0xb1f4, 0x7, 0x3, 0x40, 0x7fff, 0x0, 0x5, 0x0, 0x8}, r1, 0x2, r2, 0xcd5b80e32fa6dc5d) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0x8000000000000001) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x81, 0x1, 0xbc, 0x0, 0x0, 0xa0044, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x400, 0x6}, 0x21, 0x0, 0x8000, 0x2, 0xb8, 0x1, 0x5, 0x0, 0x101, 0x0, 0x8000000000000}, r1, 0xb, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x1, 0x80, 0x0, 0x5, 0x70000, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x12, 0x10001}, 0x10c060, 0x3, 0x1ff, 0x4, 0x3, 0x2c25fe42, 0x1, 0x0, 0x6, 0x0, 0x7fffffffffffffff}, r1, 0x5, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1767.210824][T14507] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1767.218633][T14507] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1767.226444][T14507] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1767.234256][T14507] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1767.242074][T14507] 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7000}, 0x36) 05:38:53 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 72) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1f00}, 0x36) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7100}, 0x36) 05:38:53 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x20, 0x3, 0x1f, 0x0, 0xb75d, 0x40, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xa501, 0x3, 0xb1f4, 0x7, 0x3, 0x40, 0x7fff, 0x0, 0x5, 0x0, 0x8}, r1, 0x2, r2, 0xcd5b80e32fa6dc5d) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0x8000000000000001) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x81, 0x1, 0xbc, 0x0, 0x0, 0xa0044, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x400, 0x6}, 0x21, 0x0, 0x8000, 0x2, 0xb8, 0x1, 0x5, 0x0, 0x101, 0x0, 0x8000000000000}, r1, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$ITER_CREATE(0x21, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x1, 0x80, 0x0, 0x5, 0x70000, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x12, 0x10001}, 0x10c060, 0x3, 0x1ff, 0x4, 0x3, 0x2c25fe42, 0x1, 0x0, 0x6, 0x0, 0x7fffffffffffffff}, r1, 0x5, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7200}, 0x36) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2000}, 0x36) [ 1767.357369][T14543] FAULT_INJECTION: forcing a failure. [ 1767.357369][T14543] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.415449][T14543] CPU: 0 PID: 14543 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1767.427004][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1767.436900][T14543] Call Trace: [ 1767.440025][T14543] [ 1767.442797][T14543] dump_stack_lvl+0x151/0x1b7 [ 1767.447315][T14543] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1767.452780][T14543] dump_stack+0x15/0x17 [ 1767.456772][T14543] should_fail+0x3c6/0x510 [ 1767.461027][T14543] __should_failslab+0xa4/0xe0 [ 1767.465626][T14543] ? vm_area_dup+0x26/0x230 [ 1767.469965][T14543] should_failslab+0x9/0x20 [ 1767.474303][T14543] slab_pre_alloc_hook+0x37/0xd0 [ 1767.479080][T14543] ? vm_area_dup+0x26/0x230 [ 1767.483417][T14543] kmem_cache_alloc+0x44/0x200 [ 1767.488025][T14543] vm_area_dup+0x26/0x230 [ 1767.492184][T14543] copy_mm+0x9a1/0x13e0 [ 1767.496178][T14543] ? copy_signal+0x610/0x610 [ 1767.500602][T14543] ? copy_process+0x110c/0x3290 [ 1767.505294][T14543] copy_process+0x1149/0x3290 [ 1767.509806][T14543] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1767.515446][T14543] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1767.520395][T14543] ? memset_erms+0xb/0x10 [ 1767.524560][T14543] kernel_clone+0x21e/0x9e0 [ 1767.528901][T14543] ? create_io_thread+0x1e0/0x1e0 [ 1767.533781][T14543] ? clockevents_program_event+0x22f/0x300 [ 1767.539403][T14543] __x64_sys_clone+0x23f/0x290 [ 1767.544010][T14543] ? __do_sys_vfork+0x130/0x130 [ 1767.548687][T14543] ? debug_smp_processor_id+0x17/0x20 [ 1767.553892][T14543] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1767.559796][T14543] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1767.565270][T14543] do_syscall_64+0x3d/0xb0 [ 1767.569521][T14543] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1767.575157][T14543] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1767.580884][T14543] RIP: 0033:0x7f266d5a0da9 [ 1767.585141][T14543] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1767.604584][T14543] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7300}, 0x36) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2100}, 0x36) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7400}, 0x36) 05:38:53 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)=',*\x00') r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x7, 0x3}, 0x20440, 0xce3, 0xffffffff, 0x6, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x2}, r1, 0x0, r0, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x79, 0x7f, 0x40, 0x0, 0x9, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x808, 0x3, 0x4, 0x2, 0x1, 0x3ff, 0x800, 0x0, 0x7, 0x0, 0x5}, r1, 0xb, r2, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1767.612826][T14543] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1767.620640][T14543] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1767.628449][T14543] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1767.636258][T14543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1767.644074][T14543] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1767.651893][T14543] 05:38:53 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x0, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7900}, 0x36) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2500}, 0x36) 05:38:53 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 73) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7a00}, 0x36) 05:38:53 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)=',*\x00') r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x7, 0x3}, 0x20440, 0xce3, 0xffffffff, 0x6, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x2}, r1, 0x0, r0, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x79, 0x7f, 0x40, 0x0, 0x9, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x808, 0x3, 0x4, 0x2, 0x1, 0x3ff, 0x800, 0x0, 0x7, 0x0, 0x5}, r1, 0xb, r2, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2900}, 0x36) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7b00}, 0x36) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3000}, 0x36) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x8300}, 0x36) 05:38:53 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)=',*\x00') (async) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x7, 0x3}, 0x20440, 0xce3, 0xffffffff, 0x6, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x2}, r1, 0x0, r0, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x79, 0x7f, 0x40, 0x0, 0x9, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x808, 0x3, 0x4, 0x2, 0x1, 0x3ff, 0x800, 0x0, 0x7, 0x0, 0x5}, r1, 0xb, r2, 0x8) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c00}, 0x36) 05:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa000}, 0x36) 05:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3e00}, 0x36) [ 1767.855111][T14596] FAULT_INJECTION: forcing a failure. [ 1767.855111][T14596] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.873664][T14596] CPU: 0 PID: 14596 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1767.885297][T14596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1767.895192][T14596] Call Trace: [ 1767.898313][T14596] [ 1767.901091][T14596] dump_stack_lvl+0x151/0x1b7 [ 1767.905604][T14596] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1767.911072][T14596] ? ___ratelimit+0xd/0x5a0 [ 1767.915413][T14596] dump_stack+0x15/0x17 [ 1767.919401][T14596] should_fail+0x3c6/0x510 [ 1767.923659][T14596] __should_failslab+0xa4/0xe0 [ 1767.928283][T14596] ? anon_vma_clone+0x9a/0x500 [ 1767.932856][T14596] should_failslab+0x9/0x20 [ 1767.937194][T14596] slab_pre_alloc_hook+0x37/0xd0 [ 1767.941970][T14596] ? anon_vma_clone+0x9a/0x500 [ 1767.946573][T14596] kmem_cache_alloc+0x44/0x200 [ 1767.951169][T14596] anon_vma_clone+0x9a/0x500 [ 1767.955598][T14596] anon_vma_fork+0x91/0x4e0 [ 1767.959935][T14596] ? anon_vma_name+0x43/0x70 [ 1767.964362][T14596] ? vm_area_dup+0x17a/0x230 [ 1767.968793][T14596] copy_mm+0xa3a/0x13e0 [ 1767.972784][T14596] ? copy_signal+0x610/0x610 [ 1767.977206][T14596] ? __init_rwsem+0xd6/0x1c0 [ 1767.981633][T14596] ? copy_signal+0x4e3/0x610 [ 1767.986059][T14596] copy_process+0x1149/0x3290 [ 1767.990574][T14596] ? proc_fail_nth_write+0x20b/0x290 [ 1767.995695][T14596] ? fsnotify_perm+0x6a/0x5d0 [ 1768.000207][T14596] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1768.005155][T14596] ? vfs_write+0x9ec/0x1110 [ 1768.009493][T14596] ? irqentry_exit+0x30/0x40 [ 1768.013920][T14596] kernel_clone+0x21e/0x9e0 [ 1768.018262][T14596] ? create_io_thread+0x1e0/0x1e0 [ 1768.023121][T14596] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1768.029113][T14596] __x64_sys_clone+0x23f/0x290 [ 1768.033708][T14596] ? __do_sys_vfork+0x130/0x130 [ 1768.038397][T14596] ? ksys_write+0x260/0x2c0 [ 1768.042736][T14596] ? debug_smp_processor_id+0x17/0x20 [ 1768.047944][T14596] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1768.053846][T14596] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1768.059317][T14596] do_syscall_64+0x3d/0xb0 [ 1768.063565][T14596] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1768.069210][T14596] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1768.074937][T14596] RIP: 0033:0x7f266d5a0da9 [ 1768.079192][T14596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:38:54 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x0, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffe5b, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:54 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3f00}, 0x36) [ 1768.098631][T14596] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1768.106901][T14596] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1768.114686][T14596] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1768.122502][T14596] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1768.130310][T14596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1768.138122][T14596] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1768.145937][T14596] 05:38:54 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xdc17}, 0x36) 05:38:54 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4000}, 0x36) 05:38:54 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xdd00}, 0x36) 05:38:54 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 74) 05:38:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffe5b, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:54 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xff00}, 0x36) 05:38:54 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4800}, 0x36) [ 1768.294735][T14620] FAULT_INJECTION: forcing a failure. [ 1768.294735][T14620] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.334585][T14620] CPU: 1 PID: 14620 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1768.346131][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1768.356023][T14620] Call Trace: [ 1768.359148][T14620] [ 1768.361922][T14620] dump_stack_lvl+0x151/0x1b7 [ 1768.366439][T14620] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1768.371909][T14620] dump_stack+0x15/0x17 [ 1768.375896][T14620] should_fail+0x3c6/0x510 [ 1768.380149][T14620] __should_failslab+0xa4/0xe0 [ 1768.384748][T14620] ? vm_area_dup+0x26/0x230 [ 1768.389087][T14620] should_failslab+0x9/0x20 [ 1768.393432][T14620] slab_pre_alloc_hook+0x37/0xd0 [ 1768.398204][T14620] ? vm_area_dup+0x26/0x230 [ 1768.402540][T14620] kmem_cache_alloc+0x44/0x200 [ 1768.407145][T14620] vm_area_dup+0x26/0x230 [ 1768.411309][T14620] copy_mm+0x9a1/0x13e0 [ 1768.415303][T14620] ? copy_signal+0x610/0x610 [ 1768.419730][T14620] ? __init_rwsem+0xd6/0x1c0 [ 1768.424156][T14620] ? copy_signal+0x4e3/0x610 [ 1768.428584][T14620] copy_process+0x1149/0x3290 [ 1768.433093][T14620] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1768.438735][T14620] ? vfs_write+0x506/0x1110 [ 1768.443075][T14620] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1768.448021][T14620] ? vfs_write+0x9ec/0x1110 [ 1768.452360][T14620] ? __hrtimer_run_queues+0x46b/0xad0 [ 1768.457574][T14620] kernel_clone+0x21e/0x9e0 [ 1768.461907][T14620] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1768.467550][T14620] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1768.473547][T14620] ? create_io_thread+0x1e0/0x1e0 [ 1768.478400][T14620] ? memset_erms+0xb/0x10 [ 1768.482572][T14620] __x64_sys_clone+0x23f/0x290 [ 1768.487166][T14620] ? __do_sys_vfork+0x130/0x130 [ 1768.491850][T14620] ? ksys_write+0x260/0x2c0 [ 1768.496193][T14620] ? debug_smp_processor_id+0x17/0x20 [ 1768.501398][T14620] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1768.507303][T14620] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1768.512771][T14620] do_syscall_64+0x3d/0xb0 [ 1768.517024][T14620] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1768.522677][T14620] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1768.528392][T14620] RIP: 0033:0x7f266d5a0da9 [ 1768.532653][T14620] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1768.552098][T14620] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1768.560343][T14620] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1768.568149][T14620] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1768.575955][T14620] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1768.583767][T14620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffe5b, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffe5b, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:54 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x100000}, 0x36) 05:38:54 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4c00}, 0x36) 05:38:54 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x0, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:54 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 75) [ 1768.591578][T14620] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1768.599394][T14620] 05:38:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x3f, 0x2, 0x3, 0x0, 0x400, 0x48400, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x100211, 0xbc0, 0x6, 0x5, 0x0, 0x7, 0xfff, 0x0, 0x5, 0x0, 0x4079e6f8}, r1, 0x1, 0xffffffffffffffff, 0x3) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:54 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x15edf2}, 0x36) 05:38:54 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6000}, 0x36) 05:38:54 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6100}, 0x36) [ 1768.702200][T14653] FAULT_INJECTION: forcing a failure. [ 1768.702200][T14653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1768.719379][T14653] CPU: 1 PID: 14653 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1768.730934][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1768.740824][T14653] Call Trace: [ 1768.743946][T14653] [ 1768.746723][T14653] dump_stack_lvl+0x151/0x1b7 [ 1768.751244][T14653] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1768.756704][T14653] ? kvm_sched_clock_read+0x18/0x40 [ 1768.761739][T14653] ? sched_clock+0x9/0x10 [ 1768.765902][T14653] ? sched_clock_cpu+0x18/0x3b0 [ 1768.770603][T14653] ? _raw_spin_lock+0xa4/0x1b0 [ 1768.775193][T14653] dump_stack+0x15/0x17 [ 1768.779184][T14653] should_fail+0x3c6/0x510 [ 1768.783437][T14653] should_fail_alloc_page+0x5a/0x80 [ 1768.788469][T14653] prepare_alloc_pages+0x15c/0x700 [ 1768.793417][T14653] ? __alloc_pages_bulk+0xe40/0xe40 [ 1768.798455][T14653] __alloc_pages+0x18c/0x8f0 [ 1768.802882][T14653] ? prep_new_page+0x110/0x110 [ 1768.807480][T14653] pte_alloc_one+0x73/0x1b0 [ 1768.811829][T14653] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1768.816854][T14653] ? irqentry_exit+0x30/0x40 [ 1768.821279][T14653] __pte_alloc+0x86/0x350 [ 1768.825445][T14653] ? irqentry_exit+0x30/0x40 [ 1768.829870][T14653] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1768.835512][T14653] ? free_pgtables+0x280/0x280 [ 1768.840113][T14653] ? __kasan_check_write+0x14/0x20 [ 1768.845060][T14653] copy_page_range+0x28a8/0x2f90 [ 1768.849836][T14653] ? __kasan_slab_alloc+0xb1/0xe0 [ 1768.854704][T14653] ? pfn_valid+0x1e0/0x1e0 [ 1768.858946][T14653] ? irqentry_exit+0x30/0x40 [ 1768.863373][T14653] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1768.869018][T14653] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1768.875007][T14653] copy_mm+0xc7e/0x13e0 [ 1768.879007][T14653] ? copy_signal+0x610/0x610 [ 1768.883424][T14653] ? __init_rwsem+0xd6/0x1c0 [ 1768.887848][T14653] ? copy_signal+0x4e3/0x610 [ 1768.892276][T14653] copy_process+0x1149/0x3290 [ 1768.896787][T14653] ? proc_fail_nth_write+0x20b/0x290 [ 1768.901997][T14653] ? fsnotify_perm+0x6a/0x5d0 [ 1768.906512][T14653] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1768.911459][T14653] ? vfs_write+0x9ec/0x1110 [ 1768.915801][T14653] ? irqentry_exit+0x30/0x40 [ 1768.920223][T14653] kernel_clone+0x21e/0x9e0 [ 1768.924560][T14653] ? irqentry_exit+0x30/0x40 [ 1768.928989][T14653] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1768.934628][T14653] ? create_io_thread+0x1e0/0x1e0 [ 1768.939493][T14653] __x64_sys_clone+0x23f/0x290 [ 1768.944089][T14653] ? __do_sys_vfork+0x130/0x130 [ 1768.948779][T14653] ? ksys_write+0x260/0x2c0 [ 1768.953118][T14653] ? debug_smp_processor_id+0x17/0x20 [ 1768.958322][T14653] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1768.964227][T14653] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1768.969696][T14653] do_syscall_64+0x3d/0xb0 [ 1768.973946][T14653] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1768.979609][T14653] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1768.985666][T14653] RIP: 0033:0x7f266d5a0da9 [ 1768.989921][T14653] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1769.009365][T14653] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1769.017604][T14653] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1769.025413][T14653] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1769.033228][T14653] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1769.041127][T14653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x15f1d6}, 0x36) 05:38:55 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x3f, 0x2, 0x3, 0x0, 0x400, 0x48400, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x100211, 0xbc0, 0x6, 0x5, 0x0, 0x7, 0xfff, 0x0, 0x5, 0x0, 0x4079e6f8}, r1, 0x1, 0xffffffffffffffff, 0x3) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x3f, 0x2, 0x3, 0x0, 0x400, 0x48400, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x100211, 0xbc0, 0x6, 0x5, 0x0, 0x7, 0xfff, 0x0, 0x5, 0x0, 0x4079e6f8}, r1, 0x1, 0xffffffffffffffff, 0x3) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1ac4d1}, 0x36) 05:38:55 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6200}, 0x36) [ 1769.048934][T14653] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1769.056751][T14653] 05:38:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x200000}, 0x36) 05:38:55 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 76) 05:38:55 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x3f, 0x2, 0x3, 0x0, 0x400, 0x48400, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x100211, 0xbc0, 0x6, 0x5, 0x0, 0x7, 0xfff, 0x0, 0x5, 0x0, 0x4079e6f8}, r1, 0x1, 0xffffffffffffffff, 0x3) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:55 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6300}, 0x36) 05:38:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x400000}, 0x36) 05:38:55 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:55 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6400}, 0x36) 05:38:55 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:55 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6800}, 0x36) 05:38:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x800000}, 0x36) [ 1769.199030][T14683] FAULT_INJECTION: forcing a failure. [ 1769.199030][T14683] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.250248][T14683] CPU: 1 PID: 14683 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1769.261795][T14683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1769.271695][T14683] Call Trace: [ 1769.274811][T14683] [ 1769.277590][T14683] dump_stack_lvl+0x151/0x1b7 [ 1769.282100][T14683] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1769.287743][T14683] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1769.293218][T14683] ? __wake_up_klogd+0xd5/0x110 [ 1769.297903][T14683] dump_stack+0x15/0x17 [ 1769.301892][T14683] should_fail+0x3c6/0x510 [ 1769.306147][T14683] __should_failslab+0xa4/0xe0 [ 1769.310744][T14683] ? anon_vma_fork+0x1df/0x4e0 [ 1769.315344][T14683] should_failslab+0x9/0x20 [ 1769.319683][T14683] slab_pre_alloc_hook+0x37/0xd0 [ 1769.324459][T14683] ? anon_vma_fork+0x1df/0x4e0 [ 1769.329057][T14683] kmem_cache_alloc+0x44/0x200 [ 1769.333657][T14683] anon_vma_fork+0x1df/0x4e0 [ 1769.338092][T14683] copy_mm+0xa3a/0x13e0 [ 1769.342082][T14683] ? copy_signal+0x610/0x610 [ 1769.346501][T14683] ? __init_rwsem+0xd6/0x1c0 [ 1769.350929][T14683] ? copy_signal+0x4e3/0x610 [ 1769.355359][T14683] copy_process+0x1149/0x3290 [ 1769.359872][T14683] ? timerqueue_add+0x250/0x270 [ 1769.364556][T14683] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1769.369503][T14683] ? enqueue_hrtimer+0xca/0x240 [ 1769.374193][T14683] ? __hrtimer_run_queues+0x46b/0xad0 [ 1769.379399][T14683] kernel_clone+0x21e/0x9e0 [ 1769.383737][T14683] ? create_io_thread+0x1e0/0x1e0 [ 1769.388600][T14683] ? clockevents_program_event+0x22f/0x300 [ 1769.394240][T14683] __x64_sys_clone+0x23f/0x290 [ 1769.398839][T14683] ? __do_sys_vfork+0x130/0x130 [ 1769.403530][T14683] ? debug_smp_processor_id+0x17/0x20 [ 1769.408736][T14683] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1769.414635][T14683] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1769.420104][T14683] do_syscall_64+0x3d/0xb0 [ 1769.424355][T14683] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1769.430002][T14683] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1769.435727][T14683] RIP: 0033:0x7f266d5a0da9 [ 1769.439980][T14683] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1769.459427][T14683] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1769.467672][T14683] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1769.475479][T14683] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1769.483723][T14683] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1769.491534][T14683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x80ffff}, 0x36) 05:38:55 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6900}, 0x36) 05:38:55 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:55 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6a00}, 0x36) [ 1769.499348][T14683] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1769.507161][T14683] 05:38:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa00000}, 0x36) 05:38:55 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:55 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 77) 05:38:55 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:55 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xc002a0}, 0x36) [ 1769.615679][T14724] FAULT_INJECTION: forcing a failure. [ 1769.615679][T14724] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.637166][T14724] CPU: 1 PID: 14724 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1769.648710][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1769.658602][T14724] Call Trace: [ 1769.661728][T14724] [ 1769.664503][T14724] dump_stack_lvl+0x151/0x1b7 [ 1769.669017][T14724] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1769.674486][T14724] dump_stack+0x15/0x17 [ 1769.678477][T14724] should_fail+0x3c6/0x510 [ 1769.682729][T14724] __should_failslab+0xa4/0xe0 [ 1769.687331][T14724] ? vm_area_dup+0x26/0x230 [ 1769.691669][T14724] should_failslab+0x9/0x20 [ 1769.696007][T14724] slab_pre_alloc_hook+0x37/0xd0 [ 1769.700784][T14724] ? vm_area_dup+0x26/0x230 [ 1769.705122][T14724] kmem_cache_alloc+0x44/0x200 [ 1769.709723][T14724] vm_area_dup+0x26/0x230 [ 1769.713890][T14724] copy_mm+0x9a1/0x13e0 [ 1769.717883][T14724] ? copy_signal+0x610/0x610 [ 1769.722306][T14724] ? __init_rwsem+0xd6/0x1c0 [ 1769.726734][T14724] ? copy_signal+0x4e3/0x610 [ 1769.731159][T14724] copy_process+0x1149/0x3290 [ 1769.735674][T14724] ? timerqueue_add+0x250/0x270 [ 1769.740366][T14724] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1769.745317][T14724] ? enqueue_hrtimer+0xca/0x240 [ 1769.750111][T14724] ? __hrtimer_run_queues+0x46b/0xad0 [ 1769.755315][T14724] kernel_clone+0x21e/0x9e0 [ 1769.759664][T14724] ? create_io_thread+0x1e0/0x1e0 [ 1769.764514][T14724] ? clockevents_program_event+0x22f/0x300 [ 1769.770156][T14724] __x64_sys_clone+0x23f/0x290 [ 1769.774756][T14724] ? __do_sys_vfork+0x130/0x130 [ 1769.779445][T14724] ? debug_smp_processor_id+0x17/0x20 [ 1769.784649][T14724] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1769.790550][T14724] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1769.796018][T14724] do_syscall_64+0x3d/0xb0 [ 1769.800271][T14724] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1769.805912][T14724] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1769.811643][T14724] RIP: 0033:0x7f266d5a0da9 [ 1769.815894][T14724] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1769.835342][T14724] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1769.843584][T14724] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1769.851394][T14724] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:56 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0xfc, 0x2, 0x0, 0x0, 0x3ff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x94c4, 0x3, 0x7, 0xff, 0x9, 0x5, 0x0, 0x4, 0x0, 0x3}, r4, 0x0, r2, 0x8) 05:38:56 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 78) 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6b00}, 0x36) [ 1769.859204][T14724] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1769.867015][T14724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1769.874826][T14724] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1769.883074][T14724] 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1000000}, 0x36) 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6c00}, 0x36) 05:38:56 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x9) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r4 = syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0xfc, 0x2, 0x0, 0x0, 0x3ff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x94c4, 0x3, 0x7, 0xff, 0x9, 0x5, 0x0, 0x4, 0x0, 0x3}, r4, 0x0, r2, 0x8) 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1010000}, 0x36) 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7000}, 0x36) 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x2000000}, 0x36) 05:38:56 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0xfc, 0x2, 0x0, 0x0, 0x3ff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x94c4, 0x3, 0x7, 0xff, 0x9, 0x5, 0x0, 0x4, 0x0, 0x3}, r4, 0x0, r2, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0xfc, 0x2, 0x0, 0x0, 0x3ff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x94c4, 0x3, 0x7, 0xff, 0x9, 0x5, 0x0, 0x4, 0x0, 0x3}, r4, 0x0, r2, 0x8) (async) 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7100}, 0x36) 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3000000}, 0x36) 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7200}, 0x36) 05:38:56 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1770.050713][T14758] FAULT_INJECTION: forcing a failure. [ 1770.050713][T14758] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.081319][T14758] CPU: 1 PID: 14758 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1770.092864][T14758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1770.102755][T14758] Call Trace: [ 1770.105878][T14758] [ 1770.108658][T14758] dump_stack_lvl+0x151/0x1b7 [ 1770.113170][T14758] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1770.118642][T14758] dump_stack+0x15/0x17 [ 1770.122629][T14758] should_fail+0x3c6/0x510 [ 1770.126887][T14758] __should_failslab+0xa4/0xe0 [ 1770.131489][T14758] ? anon_vma_clone+0x9a/0x500 [ 1770.136084][T14758] should_failslab+0x9/0x20 [ 1770.140423][T14758] slab_pre_alloc_hook+0x37/0xd0 [ 1770.145198][T14758] ? anon_vma_clone+0x9a/0x500 [ 1770.149796][T14758] kmem_cache_alloc+0x44/0x200 [ 1770.154396][T14758] anon_vma_clone+0x9a/0x500 [ 1770.158825][T14758] anon_vma_fork+0x91/0x4e0 [ 1770.163161][T14758] ? anon_vma_name+0x43/0x70 [ 1770.167589][T14758] ? vm_area_dup+0x17a/0x230 [ 1770.172016][T14758] copy_mm+0xa3a/0x13e0 [ 1770.176010][T14758] ? copy_signal+0x610/0x610 [ 1770.180434][T14758] ? __init_rwsem+0xd6/0x1c0 [ 1770.185121][T14758] ? copy_signal+0x4e3/0x610 [ 1770.189548][T14758] copy_process+0x1149/0x3290 [ 1770.194062][T14758] ? timerqueue_add+0x250/0x270 [ 1770.198750][T14758] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1770.203699][T14758] ? enqueue_hrtimer+0xca/0x240 [ 1770.208379][T14758] ? __hrtimer_run_queues+0x46b/0xad0 [ 1770.213591][T14758] kernel_clone+0x21e/0x9e0 [ 1770.217928][T14758] ? create_io_thread+0x1e0/0x1e0 [ 1770.222792][T14758] ? clockevents_program_event+0x22f/0x300 [ 1770.228430][T14758] __x64_sys_clone+0x23f/0x290 [ 1770.233030][T14758] ? __do_sys_vfork+0x130/0x130 [ 1770.237718][T14758] ? debug_smp_processor_id+0x17/0x20 [ 1770.242928][T14758] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1770.248827][T14758] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1770.254295][T14758] do_syscall_64+0x3d/0xb0 [ 1770.258547][T14758] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1770.264191][T14758] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1770.269917][T14758] RIP: 0033:0x7f266d5a0da9 [ 1770.274173][T14758] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1770.293610][T14758] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7300}, 0x36) 05:38:56 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = getpid() sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="a4e3dd88697b0b11d5a1d03f82497e476785379ad0be230136e7e530e40660778207c67b024c58f4279c5bcd36b25c9f23a87950aa59ae7c04cc540d930dbc4444f222c29b5826657bbd4520dcbfee6a595c9383633c4f7530251cbdee0652acfab035685197fc6d294812aef4", 0x6d}], 0x1, &(0x7f0000002100)=ANY=[@ANYBLOB="b8b8262ca1170dfed31b284b8fad4df39d177fd8911b4077291b073fdfac4a553aef3c18568e09f6eae12c62e8c472ccb2f6ebc60fce74f64a503305dff0c226a553757ae12898e95818a38858", @ANYRES32=0x0], 0x60}, 0x8000) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r8, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000800e1ffffff850000007000000001c80500050030c428e70211ee7b3ca4f644cb3c000033208000516398f49d910002f0ffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000000a40)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x1e, r6, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x401, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r8, r7, 0xffffffffffffffff]}, 0x90) r9 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1f, 0x40, 0x0, 0x7b, 0x0, 0x100000001, 0x10130, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0xf6b8}, 0x200, 0x1000, 0xce, 0x3, 0x3, 0x10000, 0x3ff, 0x0, 0x7, 0x0, 0x8}, r1, 0xffffffffffffffff, r2, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xa7, 0x7, 0x0, 0x4, 0x0, 0x8, 0x2000, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0xe}, 0x1000c4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8}, r4, 0xe, r9, 0xa) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x9, 0x6, 0xf7, 0x0, 0x80, 0x10, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x8, 0x4fc8}, 0x9000, 0x8bad, 0x1, 0x2, 0x9, 0x81, 0xa7aa, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) [ 1770.301856][T14758] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1770.309669][T14758] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1770.317479][T14758] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1770.325292][T14758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1770.333106][T14758] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1770.340917][T14758] 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7400}, 0x36) 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x4000000}, 0x36) 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x5000000}, 0x36) 05:38:56 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 79) 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7900}, 0x36) 05:38:56 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = getpid() sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="a4e3dd88697b0b11d5a1d03f82497e476785379ad0be230136e7e530e40660778207c67b024c58f4279c5bcd36b25c9f23a87950aa59ae7c04cc540d930dbc4444f222c29b5826657bbd4520dcbfee6a595c9383633c4f7530251cbdee0652acfab035685197fc6d294812aef4", 0x6d}], 0x1, &(0x7f0000002100)=ANY=[@ANYBLOB="b8b8262ca1170dfed31b284b8fad4df39d177fd8911b4077291b073fdfac4a553aef3c18568e09f6eae12c62e8c472ccb2f6ebc60fce74f64a503305dff0c226a553757ae12898e95818a38858", @ANYRES32=0x0], 0x60}, 0x8000) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r8, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000800e1ffffff850000007000000001c80500050030c428e70211ee7b3ca4f644cb3c000033208000516398f49d910002f0ffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000000a40)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x1e, r6, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x401, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r8, r7, 0xffffffffffffffff]}, 0x90) r9 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1f, 0x40, 0x0, 0x7b, 0x0, 0x100000001, 0x10130, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0xf6b8}, 0x200, 0x1000, 0xce, 0x3, 0x3, 0x10000, 0x3ff, 0x0, 0x7, 0x0, 0x8}, r1, 0xffffffffffffffff, r2, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xa7, 0x7, 0x0, 0x4, 0x0, 0x8, 0x2000, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0xe}, 0x1000c4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8}, r4, 0xe, r9, 0xa) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x9, 0x6, 0xf7, 0x0, 0x80, 0x10, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x8, 0x4fc8}, 0x9000, 0x8bad, 0x1, 0x2, 0x9, 0x81, 0xa7aa, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) getpid() (async) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="a4e3dd88697b0b11d5a1d03f82497e476785379ad0be230136e7e530e40660778207c67b024c58f4279c5bcd36b25c9f23a87950aa59ae7c04cc540d930dbc4444f222c29b5826657bbd4520dcbfee6a595c9383633c4f7530251cbdee0652acfab035685197fc6d294812aef4", 0x6d}], 0x1, &(0x7f0000002100)=ANY=[@ANYBLOB="b8b8262ca1170dfed31b284b8fad4df39d177fd8911b4077291b073fdfac4a553aef3c18568e09f6eae12c62e8c472ccb2f6ebc60fce74f64a503305dff0c226a553757ae12898e95818a38858", @ANYRES32=0x0], 0x60}, 0x8000) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r8, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000800e1ffffff850000007000000001c80500050030c428e70211ee7b3ca4f644cb3c000033208000516398f49d910002f0ffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000000a40)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x1e, r6, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x401, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r8, r7, 0xffffffffffffffff]}, 0x90) (async) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1f, 0x40, 0x0, 0x7b, 0x0, 0x100000001, 0x10130, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0xf6b8}, 0x200, 0x1000, 0xce, 0x3, 0x3, 0x10000, 0x3ff, 0x0, 0x7, 0x0, 0x8}, r1, 0xffffffffffffffff, r2, 0x2) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xa7, 0x7, 0x0, 0x4, 0x0, 0x8, 0x2000, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0xe}, 0x1000c4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8}, r4, 0xe, r9, 0xa) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x9, 0x6, 0xf7, 0x0, 0x80, 0x10, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x8, 0x4fc8}, 0x9000, 0x8bad, 0x1, 0x2, 0x9, 0x81, 0xa7aa, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) (async) 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6000000}, 0x36) 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7a00}, 0x36) 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7000000}, 0x36) 05:38:56 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = getpid() sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="a4e3dd88697b0b11d5a1d03f82497e476785379ad0be230136e7e530e40660778207c67b024c58f4279c5bcd36b25c9f23a87950aa59ae7c04cc540d930dbc4444f222c29b5826657bbd4520dcbfee6a595c9383633c4f7530251cbdee0652acfab035685197fc6d294812aef4", 0x6d}], 0x1, &(0x7f0000002100)=ANY=[@ANYBLOB="b8b8262ca1170dfed31b284b8fad4df39d177fd8911b4077291b073fdfac4a553aef3c18568e09f6eae12c62e8c472ccb2f6ebc60fce74f64a503305dff0c226a553757ae12898e95818a38858", @ANYRES32=0x0], 0x60}, 0x8000) (async) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="a4e3dd88697b0b11d5a1d03f82497e476785379ad0be230136e7e530e40660778207c67b024c58f4279c5bcd36b25c9f23a87950aa59ae7c04cc540d930dbc4444f222c29b5826657bbd4520dcbfee6a595c9383633c4f7530251cbdee0652acfab035685197fc6d294812aef4", 0x6d}], 0x1, &(0x7f0000002100)=ANY=[@ANYBLOB="b8b8262ca1170dfed31b284b8fad4df39d177fd8911b4077291b073fdfac4a553aef3c18568e09f6eae12c62e8c472ccb2f6ebc60fce74f64a503305dff0c226a553757ae12898e95818a38858", @ANYRES32=0x0], 0x60}, 0x8000) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r8, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000800e1ffffff850000007000000001c80500050030c428e70211ee7b3ca4f644cb3c000033208000516398f49d910002f0ffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xf1, &(0x7f0000000a40)=""/241, 0x41000, 0x8, '\x00', 0x0, 0x1e, r6, 0x8, &(0x7f0000000540)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x0, 0x401, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r8, r7, 0xffffffffffffffff]}, 0x90) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1f, 0x40, 0x0, 0x7b, 0x0, 0x100000001, 0x10130, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0xf6b8}, 0x200, 0x1000, 0xce, 0x3, 0x3, 0x10000, 0x3ff, 0x0, 0x7, 0x0, 0x8}, r1, 0xffffffffffffffff, r2, 0x2) (async) r9 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1f, 0x40, 0x0, 0x7b, 0x0, 0x100000001, 0x10130, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0xf6b8}, 0x200, 0x1000, 0xce, 0x3, 0x3, 0x10000, 0x3ff, 0x0, 0x7, 0x0, 0x8}, r1, 0xffffffffffffffff, r2, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xa7, 0x7, 0x0, 0x4, 0x0, 0x8, 0x2000, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0xe}, 0x1000c4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8}, r4, 0xe, r9, 0xa) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x9, 0x6, 0xf7, 0x0, 0x80, 0x10, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x8, 0x4fc8}, 0x9000, 0x8bad, 0x1, 0x2, 0x9, 0x81, 0xa7aa, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x9, 0x6, 0xf7, 0x0, 0x80, 0x10, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x8, 0x4fc8}, 0x9000, 0x8bad, 0x1, 0x2, 0x9, 0x81, 0xa7aa, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7b00}, 0x36) [ 1770.464749][T14798] FAULT_INJECTION: forcing a failure. [ 1770.464749][T14798] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.516383][T14798] CPU: 1 PID: 14798 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1770.527926][T14798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1770.537818][T14798] Call Trace: [ 1770.540941][T14798] [ 1770.543718][T14798] dump_stack_lvl+0x151/0x1b7 [ 1770.548232][T14798] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1770.553701][T14798] dump_stack+0x15/0x17 [ 1770.557692][T14798] should_fail+0x3c6/0x510 [ 1770.561946][T14798] __should_failslab+0xa4/0xe0 [ 1770.566544][T14798] ? anon_vma_clone+0x9a/0x500 [ 1770.571146][T14798] should_failslab+0x9/0x20 [ 1770.575492][T14798] slab_pre_alloc_hook+0x37/0xd0 [ 1770.580275][T14798] ? anon_vma_clone+0x9a/0x500 [ 1770.584859][T14798] kmem_cache_alloc+0x44/0x200 [ 1770.589459][T14798] anon_vma_clone+0x9a/0x500 [ 1770.593893][T14798] anon_vma_fork+0x91/0x4e0 [ 1770.598225][T14798] ? anon_vma_name+0x4c/0x70 [ 1770.602654][T14798] ? vm_area_dup+0x17a/0x230 [ 1770.607080][T14798] copy_mm+0xa3a/0x13e0 [ 1770.611082][T14798] ? copy_signal+0x610/0x610 [ 1770.615499][T14798] ? __init_rwsem+0xd6/0x1c0 [ 1770.619926][T14798] ? copy_signal+0x4e3/0x610 [ 1770.624353][T14798] copy_process+0x1149/0x3290 [ 1770.628866][T14798] ? timerqueue_add+0x250/0x270 [ 1770.633549][T14798] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1770.638497][T14798] ? enqueue_hrtimer+0xca/0x240 [ 1770.643182][T14798] ? __hrtimer_run_queues+0x46b/0xad0 [ 1770.648393][T14798] kernel_clone+0x21e/0x9e0 [ 1770.652731][T14798] ? create_io_thread+0x1e0/0x1e0 [ 1770.657591][T14798] ? clockevents_program_event+0x22f/0x300 [ 1770.663233][T14798] __x64_sys_clone+0x23f/0x290 [ 1770.667834][T14798] ? __do_sys_vfork+0x130/0x130 [ 1770.672520][T14798] ? debug_smp_processor_id+0x17/0x20 [ 1770.677726][T14798] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1770.684163][T14798] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1770.689628][T14798] do_syscall_64+0x3d/0xb0 [ 1770.693880][T14798] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1770.699525][T14798] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1770.705254][T14798] RIP: 0033:0x7f266d5a0da9 [ 1770.709513][T14798] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1770.728948][T14798] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1770.737190][T14798] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1770.745003][T14798] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1770.752814][T14798] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8300}, 0x36) 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x8000000}, 0x36) 05:38:56 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/user\x00') perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x2, 0x7, 0x80, 0x0, 0x6, 0x90000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0xc00, 0x3a1, 0x3, 0x4, 0x7, 0x0, 0x9, 0x0, 0xaa3, 0x0, 0x6}, r1, 0x4, 0xffffffffffffffff, 0xa) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1770.760627][T14798] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1770.768443][T14798] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1770.776255][T14798] 05:38:56 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:56 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa000}, 0x36) 05:38:56 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x9000000}, 0x36) 05:38:56 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 80) 05:38:57 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xdd00}, 0x36) 05:38:57 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/user\x00') perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x2, 0x7, 0x80, 0x0, 0x6, 0x90000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0xc00, 0x3a1, 0x3, 0x4, 0x7, 0x0, 0x9, 0x0, 0xaa3, 0x0, 0x6}, r1, 0x4, 0xffffffffffffffff, 0xa) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:57 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa000000}, 0x36) 05:38:57 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xb000000}, 0x36) [ 1770.924457][T14847] FAULT_INJECTION: forcing a failure. [ 1770.924457][T14847] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.960534][T14847] CPU: 1 PID: 14847 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1770.972083][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1770.981978][T14847] Call Trace: [ 1770.985097][T14847] [ 1770.987875][T14847] dump_stack_lvl+0x151/0x1b7 [ 1770.992391][T14847] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1770.997854][T14847] dump_stack+0x15/0x17 [ 1771.001845][T14847] should_fail+0x3c6/0x510 [ 1771.006096][T14847] __should_failslab+0xa4/0xe0 [ 1771.010702][T14847] ? anon_vma_clone+0x9a/0x500 [ 1771.015296][T14847] should_failslab+0x9/0x20 [ 1771.019636][T14847] slab_pre_alloc_hook+0x37/0xd0 [ 1771.024413][T14847] ? anon_vma_clone+0x9a/0x500 [ 1771.029013][T14847] kmem_cache_alloc+0x44/0x200 [ 1771.033611][T14847] anon_vma_clone+0x9a/0x500 [ 1771.038040][T14847] anon_vma_fork+0x91/0x4e0 [ 1771.042374][T14847] ? anon_vma_name+0x4c/0x70 [ 1771.046805][T14847] ? vm_area_dup+0x17a/0x230 [ 1771.051233][T14847] copy_mm+0xa3a/0x13e0 [ 1771.055225][T14847] ? irqentry_exit+0x30/0x40 [ 1771.059655][T14847] ? copy_signal+0x610/0x610 [ 1771.064074][T14847] ? __init_rwsem+0xd6/0x1c0 [ 1771.068504][T14847] ? copy_signal+0x4e3/0x610 [ 1771.072930][T14847] copy_process+0x1149/0x3290 [ 1771.077441][T14847] ? proc_fail_nth_write+0x20b/0x290 [ 1771.082998][T14847] ? irqentry_exit+0x30/0x40 [ 1771.087422][T14847] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1771.092371][T14847] ? kernel_clone+0x1fa/0x9e0 [ 1771.096884][T14847] kernel_clone+0x21e/0x9e0 [ 1771.101228][T14847] ? create_io_thread+0x1e0/0x1e0 [ 1771.106093][T14847] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1771.112081][T14847] __x64_sys_clone+0x23f/0x290 [ 1771.116672][T14847] ? __do_sys_vfork+0x130/0x130 [ 1771.121360][T14847] ? ksys_write+0x260/0x2c0 [ 1771.125700][T14847] ? debug_smp_processor_id+0x17/0x20 [ 1771.130907][T14847] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1771.136808][T14847] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1771.142277][T14847] do_syscall_64+0x3d/0xb0 [ 1771.146530][T14847] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1771.152172][T14847] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1771.157907][T14847] RIP: 0033:0x7f266d5a0da9 [ 1771.162154][T14847] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1771.181592][T14847] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1771.190194][T14847] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1771.197997][T14847] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1771.205806][T14847] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1771.213618][T14847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:38:57 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/user\x00') perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x2, 0x7, 0x80, 0x0, 0x6, 0x90000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0xc00, 0x3a1, 0x3, 0x4, 0x7, 0x0, 0x9, 0x0, 0xaa3, 0x0, 0x6}, r1, 0x4, 0xffffffffffffffff, 0xa) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000100)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/user\x00') (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x2, 0x7, 0x80, 0x0, 0x6, 0x90000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0xc00, 0x3a1, 0x3, 0x4, 0x7, 0x0, 0x9, 0x0, 0xaa3, 0x0, 0x6}, r1, 0x4, 0xffffffffffffffff, 0xa) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:38:57 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xff00}, 0x36) 05:38:57 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:57 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xc000000}, 0x36) 05:38:57 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x33fe0}, 0x36) 05:38:57 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x1f, 0xfe, 0x5, 0x0, 0x8, 0x2000, 0x19, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x1000, 0x5, 0x4, 0x3, 0x685, 0x80000001, 0x5, 0x0, 0x2, 0x0, 0x2}, r2, 0x10, r0, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:57 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xd000000}, 0x36) 05:38:57 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 81) [ 1771.221430][T14847] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1771.229244][T14847] 05:38:57 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xe000000}, 0x36) 05:38:57 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x100000}, 0x36) [ 1771.309490][T14885] FAULT_INJECTION: forcing a failure. [ 1771.309490][T14885] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.335041][T14885] CPU: 0 PID: 14885 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1771.346589][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1771.356486][T14885] Call Trace: 05:38:57 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x1f, 0xfe, 0x5, 0x0, 0x8, 0x2000, 0x19, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x1000, 0x5, 0x4, 0x3, 0x685, 0x80000001, 0x5, 0x0, 0x2, 0x0, 0x2}, r2, 0x10, r0, 0xa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1771.359607][T14885] [ 1771.362385][T14885] dump_stack_lvl+0x151/0x1b7 [ 1771.366898][T14885] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1771.372365][T14885] ? anon_vma_clone+0x304/0x500 [ 1771.377051][T14885] dump_stack+0x15/0x17 [ 1771.381041][T14885] should_fail+0x3c6/0x510 [ 1771.385294][T14885] __should_failslab+0xa4/0xe0 [ 1771.389894][T14885] ? anon_vma_clone+0x9a/0x500 [ 1771.394492][T14885] should_failslab+0x9/0x20 [ 1771.398834][T14885] slab_pre_alloc_hook+0x37/0xd0 [ 1771.403607][T14885] ? anon_vma_clone+0x9a/0x500 [ 1771.408206][T14885] kmem_cache_alloc+0x44/0x200 [ 1771.412808][T14885] anon_vma_clone+0x9a/0x500 [ 1771.417237][T14885] anon_vma_fork+0x91/0x4e0 [ 1771.421571][T14885] ? anon_vma_name+0x43/0x70 [ 1771.426004][T14885] ? vm_area_dup+0x17a/0x230 [ 1771.430426][T14885] copy_mm+0xa3a/0x13e0 [ 1771.434418][T14885] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1771.440064][T14885] ? copy_signal+0x610/0x610 [ 1771.444751][T14885] ? __init_rwsem+0xd6/0x1c0 [ 1771.449179][T14885] ? copy_signal+0x4e3/0x610 [ 1771.453608][T14885] copy_process+0x1149/0x3290 [ 1771.458120][T14885] ? proc_fail_nth_write+0x20b/0x290 [ 1771.463245][T14885] ? fsnotify_perm+0x6a/0x5d0 [ 1771.467753][T14885] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1771.472700][T14885] ? vfs_write+0x9ec/0x1110 [ 1771.477040][T14885] ? irqentry_exit+0x30/0x40 [ 1771.481465][T14885] kernel_clone+0x21e/0x9e0 [ 1771.485813][T14885] ? create_io_thread+0x1e0/0x1e0 [ 1771.490667][T14885] ? mutex_unlock+0xb2/0x260 [ 1771.495093][T14885] ? __mutex_lock_slowpath+0x10/0x10 [ 1771.500213][T14885] __x64_sys_clone+0x23f/0x290 [ 1771.504813][T14885] ? __do_sys_vfork+0x130/0x130 [ 1771.509504][T14885] do_syscall_64+0x3d/0xb0 [ 1771.513752][T14885] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1771.519395][T14885] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1771.525122][T14885] RIP: 0033:0x7f266d5a0da9 [ 1771.529380][T14885] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1771.548832][T14885] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:38:57 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xf000000}, 0x36) 05:38:57 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1145db}, 0x36) 05:38:57 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x10000000}, 0x36) [ 1771.557066][T14885] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1771.564873][T14885] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1771.572688][T14885] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1771.580497][T14885] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1771.588310][T14885] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1771.596124][T14885] 05:38:57 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 82) 05:38:57 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x11000000}, 0x36) 05:38:57 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x149755}, 0x36) 05:38:57 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x1f, 0xfe, 0x5, 0x0, 0x8, 0x2000, 0x19, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x1000, 0x5, 0x4, 0x3, 0x685, 0x80000001, 0x5, 0x0, 0x2, 0x0, 0x2}, r2, 0x10, r0, 0xa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1771.666255][T14909] FAULT_INJECTION: forcing a failure. [ 1771.666255][T14909] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.698607][T14909] CPU: 0 PID: 14909 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1771.710159][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1771.720052][T14909] Call Trace: [ 1771.723179][T14909] [ 1771.725949][T14909] dump_stack_lvl+0x151/0x1b7 [ 1771.730471][T14909] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1771.735937][T14909] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1771.741571][T14909] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1771.747562][T14909] dump_stack+0x15/0x17 [ 1771.751559][T14909] should_fail+0x3c6/0x510 [ 1771.755806][T14909] __should_failslab+0xa4/0xe0 [ 1771.760407][T14909] ? anon_vma_fork+0xf7/0x4e0 [ 1771.764920][T14909] should_failslab+0x9/0x20 [ 1771.769261][T14909] slab_pre_alloc_hook+0x37/0xd0 [ 1771.774032][T14909] ? anon_vma_fork+0xf7/0x4e0 [ 1771.778546][T14909] kmem_cache_alloc+0x44/0x200 [ 1771.783146][T14909] anon_vma_fork+0xf7/0x4e0 [ 1771.787484][T14909] ? anon_vma_name+0x43/0x70 [ 1771.791911][T14909] ? vm_area_dup+0x17a/0x230 [ 1771.796339][T14909] copy_mm+0xa3a/0x13e0 [ 1771.800335][T14909] ? copy_signal+0x610/0x610 [ 1771.804758][T14909] ? copy_process+0x110c/0x3290 [ 1771.809447][T14909] copy_process+0x1149/0x3290 [ 1771.813958][T14909] ? cgroup_rstat_updated+0xe5/0x370 [ 1771.819081][T14909] ? put_prev_entity+0x460/0x460 [ 1771.823852][T14909] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1771.828801][T14909] ? pick_next_task_fair+0x965/0xbc0 [ 1771.833921][T14909] kernel_clone+0x21e/0x9e0 [ 1771.838260][T14909] ? __kasan_check_write+0x14/0x20 [ 1771.843209][T14909] ? create_io_thread+0x1e0/0x1e0 [ 1771.848069][T14909] __x64_sys_clone+0x23f/0x290 [ 1771.852666][T14909] ? __do_sys_vfork+0x130/0x130 [ 1771.857355][T14909] ? switch_fpu_return+0x1ed/0x3d0 [ 1771.862302][T14909] ? __kasan_check_read+0x11/0x20 [ 1771.867164][T14909] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 1771.872628][T14909] do_syscall_64+0x3d/0xb0 [ 1771.876882][T14909] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1771.882525][T14909] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1771.888253][T14909] RIP: 0033:0x7f266d5a0da9 [ 1771.892509][T14909] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1771.911948][T14909] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1771.920194][T14909] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1771.928007][T14909] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1771.935814][T14909] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1771.943627][T14909] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1771.951436][T14909] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1771.959253][T14909] 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x12000000}, 0x36) 05:38:58 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x5a, 0x23, 0x4, 0x3, 0x0, 0x9, 0x80400, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x6}, 0x10000, 0x8001, 0x40, 0x9, 0x20000, 0x2, 0xff, 0x0, 0x8, 0x0, 0xfffffffffffffff9}, r2, 0xd, 0xffffffffffffffff, 0xc) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1ac4d1}, 0x36) 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x13000000}, 0x36) [ 1771.963825][T14909] ------------[ cut here ]------------ [ 1771.974516][T14909] refcount_t: underflow; use-after-free. [ 1771.983991][T14909] WARNING: CPU: 1 PID: 14909 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 1772.002901][T14909] Modules linked in: 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x200000}, 0x36) 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x18000000}, 0x36) [ 1772.006923][T14909] CPU: 1 PID: 14909 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1772.030909][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1772.048231][T14909] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 1772.054630][T14909] Code: 04 01 48 c7 c7 40 c8 82 85 e8 e4 9e dc fe 0f 0b eb 8b e8 6b 49 0b ff c6 05 73 8e 9e 04 01 48 c7 c7 a0 c8 82 85 e8 c8 9e dc fe <0f> 0b e9 6c ff ff ff e8 4c 49 0b ff c6 05 55 8e 9e 04 01 48 c7 c7 [ 1772.080053][T14909] RSP: 0018:ffffc90000b77968 EFLAGS: 00010246 [ 1772.086078][T14909] RAX: 3df8a02b4130b700 RBX: 0000000000000003 RCX: 0000000000040000 [ 1772.094305][T14909] RDX: ffffc90003e4b000 RSI: 0000000000019b85 RDI: 0000000000019b86 05:38:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x5a, 0x23, 0x4, 0x3, 0x0, 0x9, 0x80400, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x6}, 0x10000, 0x8001, 0x40, 0x9, 0x20000, 0x2, 0xff, 0x0, 0x8, 0x0, 0xfffffffffffffff9}, r2, 0xd, 0xffffffffffffffff, 0xc) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x400000}, 0x36) 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x188102a0}, 0x36) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x800000}, 0x36) [ 1772.116142][T14909] RBP: ffffc90000b77978 R08: ffffffff81575f25 R09: ffffed103ee265e8 [ 1772.146517][T14909] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103e8cbfab 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x1f000000}, 0x36) 05:38:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x5a, 0x23, 0x4, 0x3, 0x0, 0x9, 0x80400, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x6}, 0x10000, 0x8001, 0x40, 0x9, 0x20000, 0x2, 0xff, 0x0, 0x8, 0x0, 0xfffffffffffffff9}, r2, 0xd, 0xffffffffffffffff, 0xc) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x80ffff}, 0x36) 05:38:58 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1772.165543][T14909] R13: ffff8881f465fd58 R14: 0000000000000003 R15: ffff88815c930e38 [ 1772.187090][T14909] FS: 00007f266c3226c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1772.201799][T14909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x20000000}, 0x36) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa00000}, 0x36) 05:38:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xca3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x92, 0x3f, 0x81, 0x6, 0x0, 0x100000000, 0x1444, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0xa12, 0x3, 0x3, 0x2, 0x3f9, 0x3ff, 0x5, 0x0, 0x3, 0x0, 0x101}, r1, 0xffffffffffffffff, r2, 0x8) openat$cgroup_ro(r2, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) r4 = syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x81, 0x70, 0x3, 0x0, 0x1, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000100)}, 0x140, 0x0, 0x2, 0x4, 0x588, 0xffff8000, 0x604, 0x0, 0x0, 0x0, 0x7}, r4, 0xd, r3, 0xa) 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x21000000}, 0x36) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc002a0}, 0x36) 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25000000}, 0x36) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1000000}, 0x36) [ 1772.219046][T14909] CR2: 00007f54debb3988 CR3: 000000012e913000 CR4: 00000000003506a0 [ 1772.231664][T14909] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x29000000}, 0x36) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1010000}, 0x36) 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x30000000}, 0x36) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2000000}, 0x36) 05:38:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xca3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x92, 0x3f, 0x81, 0x6, 0x0, 0x100000000, 0x1444, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0xa12, 0x3, 0x3, 0x2, 0x3f9, 0x3ff, 0x5, 0x0, 0x3, 0x0, 0x101}, r1, 0xffffffffffffffff, r2, 0x8) openat$cgroup_ro(r2, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) (async) r4 = syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x81, 0x70, 0x3, 0x0, 0x1, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000100)}, 0x140, 0x0, 0x2, 0x4, 0x588, 0xffff8000, 0x604, 0x0, 0x0, 0x0, 0x7}, r4, 0xd, r3, 0xa) 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3c000000}, 0x36) [ 1772.333847][T14909] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1772.374663][T14909] Call Trace: [ 1772.377924][T14909] [ 1772.380706][T14909] ? show_regs+0x58/0x60 [ 1772.384805][T14909] ? __warn+0x160/0x2f0 [ 1772.388851][T14909] ? refcount_warn_saturate+0x158/0x1a0 [ 1772.394304][T14909] ? report_bug+0x3d9/0x5b0 [ 1772.398666][T14909] ? refcount_warn_saturate+0x158/0x1a0 [ 1772.404133][T14909] ? handle_bug+0x41/0x70 [ 1772.408475][T14909] ? exc_invalid_op+0x1b/0x50 [ 1772.413722][T14909] ? asm_exc_invalid_op+0x1b/0x20 [ 1772.418905][T14909] ? __wake_up_klogd+0xd5/0x110 [ 1772.424424][T14909] ? refcount_warn_saturate+0x158/0x1a0 [ 1772.429951][T14909] ? refcount_warn_saturate+0x158/0x1a0 [ 1772.435395][T14909] vm_area_free_no_check+0x123/0x130 [ 1772.440702][T14909] copy_mm+0xefb/0x13e0 [ 1772.444712][T14909] ? copy_signal+0x610/0x610 [ 1772.449307][T14909] ? copy_process+0x110c/0x3290 [ 1772.454040][T14909] copy_process+0x1149/0x3290 [ 1772.458668][T14909] ? cgroup_rstat_updated+0xe5/0x370 [ 1772.463872][T14909] ? put_prev_entity+0x460/0x460 [ 1772.468800][T14909] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1772.473782][T14909] ? pick_next_task_fair+0x965/0xbc0 [ 1772.478962][T14909] kernel_clone+0x21e/0x9e0 [ 1772.483472][T14909] ? __kasan_check_write+0x14/0x20 [ 1772.488574][T14909] ? create_io_thread+0x1e0/0x1e0 [ 1772.493445][T14909] __x64_sys_clone+0x23f/0x290 [ 1772.498065][T14909] ? __do_sys_vfork+0x130/0x130 [ 1772.502735][T14909] ? switch_fpu_return+0x1ed/0x3d0 [ 1772.507736][T14909] ? __kasan_check_read+0x11/0x20 [ 1772.512543][T14909] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 1772.518044][T14909] do_syscall_64+0x3d/0xb0 [ 1772.522275][T14909] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1772.527977][T14909] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1772.533634][T14909] RIP: 0033:0x7f266d5a0da9 [ 1772.537916][T14909] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1772.557343][T14909] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1772.565584][T14909] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:38:58 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 83) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3000000}, 0x36) 05:38:58 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3e000000}, 0x36) 05:38:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xca3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x92, 0x3f, 0x81, 0x6, 0x0, 0x100000000, 0x1444, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000040), 0xc}, 0xa12, 0x3, 0x3, 0x2, 0x3f9, 0x3ff, 0x5, 0x0, 0x3, 0x0, 0x101}, r1, 0xffffffffffffffff, r2, 0x8) openat$cgroup_ro(r2, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) (async) r4 = syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x2, 0x81, 0x70, 0x3, 0x0, 0x1, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000100)}, 0x140, 0x0, 0x2, 0x4, 0x588, 0xffff8000, 0x604, 0x0, 0x0, 0x0, 0x7}, r4, 0xd, r3, 0xa) 05:38:58 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:58 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4000000}, 0x36) [ 1772.573444][T14909] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1772.581213][T14909] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1772.589024][T14909] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1772.596826][T14909] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1772.604672][T14909] [ 1772.607514][T14909] ---[ end trace 4088592119ab83ba ]--- 05:38:58 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xe4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce6, 0x2, 0x0, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1002, 0x2}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x123f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x4, &(0x7f0000000140)=""/4, 0x1e00, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000200)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x5, 0x80000001, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r2, r2], 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='snd_soc_dapm_walk_done\x00', r3}, 0x10) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1772.651419][T17659] ================================================================== [ 1772.659312][T17659] BUG: KASAN: use-after-free in __rb_insert_augmented+0xa0/0x610 [ 1772.666862][T17659] Read of size 8 at addr ffff8881c0000008 by task syz-executor.1/17659 [ 1772.674933][T17659] [ 1772.677105][T17659] CPU: 1 PID: 17659 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1772.688647][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1772.698541][T17659] Call Trace: [ 1772.701671][T17659] [ 1772.704443][T17659] dump_stack_lvl+0x151/0x1b7 [ 1772.708957][T17659] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1772.714420][T17659] ? panic+0x751/0x751 [ 1772.718328][T17659] print_address_description+0x87/0x3b0 [ 1772.723709][T17659] kasan_report+0x179/0x1c0 [ 1772.728048][T17659] ? __rb_insert_augmented+0xa0/0x610 [ 1772.733256][T17659] ? __rb_insert_augmented+0xa0/0x610 [ 1772.738461][T17659] __asan_report_load8_noabort+0x14/0x20 [ 1772.743935][T17659] __rb_insert_augmented+0xa0/0x610 [ 1772.748965][T17659] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 1772.755217][T17659] vma_interval_tree_insert_after+0x2be/0x2d0 [ 1772.761138][T17659] copy_mm+0xba2/0x13e0 [ 1772.765110][T17659] ? copy_signal+0x610/0x610 [ 1772.769534][T17659] ? __init_rwsem+0xd6/0x1c0 [ 1772.773961][T17659] ? copy_signal+0x4e3/0x610 [ 1772.778388][T17659] copy_process+0x1149/0x3290 [ 1772.782906][T17659] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1772.787858][T17659] kernel_clone+0x21e/0x9e0 [ 1772.792188][T17659] ? kernel_read+0x1f0/0x1f0 [ 1772.796618][T17659] ? kmem_cache_free+0x116/0x2e0 [ 1772.801400][T17659] ? create_io_thread+0x1e0/0x1e0 [ 1772.806250][T17659] ? debug_smp_processor_id+0x17/0x20 [ 1772.811461][T17659] __x64_sys_clone+0x23f/0x290 [ 1772.816056][T17659] ? __do_sys_vfork+0x130/0x130 [ 1772.820744][T17659] do_syscall_64+0x3d/0xb0 [ 1772.825000][T17659] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1772.830725][T17659] RIP: 0033:0x7f266d59ddd3 [ 1772.834979][T17659] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1772.854419][T17659] RSP: 002b:00007ffe00499248 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1772.862662][T17659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f266d59ddd3 [ 1772.870474][T17659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1772.878286][T17659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1772.886098][T17659] R10: 000055555753e750 R11: 0000000000000246 R12: 0000000000000001 [ 1772.893911][T17659] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 1772.901724][T17659] [ 1772.904586][T17659] [ 1772.906755][T17659] The buggy address belongs to the page: [ 1772.912228][T17659] page:ffffea0007000000 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x1c0000 [ 1772.922550][T17659] flags: 0x4000000000000000(zone=1) [ 1772.927593][T17659] raw: 4000000000000000 ffffea0006fe0008 ffffea0007010008 0000000000000000 [ 1772.936010][T17659] raw: 0000000000000000 000000000000000a 00000000ffffff7f 0000000000000000 [ 1772.944426][T17659] page dumped because: kasan: bad access detected [ 1772.950678][T17659] page_owner tracks the page as freed [ 1772.955881][T17659] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x506dc0(GFP_USER|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_ZERO|__GFP_ACCOUNT), pid 19206, ts 1237674196761, free_ts 1239384394034 [ 1772.974801][T17659] post_alloc_hook+0x1a3/0x1b0 [ 1772.979405][T17659] prep_new_page+0x1b/0x110 [ 1772.984199][T17659] get_page_from_freelist+0x3550/0x35d0 [ 1772.989563][T17659] __alloc_pages+0x27e/0x8f0 [ 1772.993983][T17659] bpf_ringbuf_alloc+0xd0/0x3d0 [ 1772.998667][T17659] ringbuf_map_alloc+0x202/0x320 [ 1773.003443][T17659] map_create+0x411/0x2050 [ 1773.007695][T17659] __sys_bpf+0x296/0x760 [ 1773.011774][T17659] __x64_sys_bpf+0x7c/0x90 [ 1773.016032][T17659] do_syscall_64+0x3d/0xb0 [ 1773.020280][T17659] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1773.026012][T17659] page last free stack trace: [ 1773.030522][T17659] free_unref_page_prepare+0x7c8/0x7d0 [ 1773.035817][T17659] free_unref_page+0xe8/0x750 [ 1773.040328][T17659] __free_pages+0x61/0xf0 [ 1773.044496][T17659] ringbuf_map_free+0xbe/0x120 [ 1773.049107][T17659] map_create+0x1a3a/0x2050 [ 1773.053436][T17659] __sys_bpf+0x296/0x760 [ 1773.057516][T17659] __x64_sys_bpf+0x7c/0x90 [ 1773.061766][T17659] do_syscall_64+0x3d/0xb0 [ 1773.066032][T17659] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1773.071749][T17659] [ 1773.073921][T17659] Memory state around the buggy address: [ 1773.079481][T17659] ffff8881bfffff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1773.087374][T17659] ffff8881bfffff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1773.095274][T17659] >ffff8881c0000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1773.103169][T17659] ^ [ 1773.107340][T17659] ffff8881c0000080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1773.115235][T17659] ffff8881c0000100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1773.123131][T17659] ================================================================== [ 1773.131031][T17659] Disabling lock debugging due to kernel taint 05:38:59 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x3f000000}, 0x36) [ 1773.150851][T15010] FAULT_INJECTION: forcing a failure. [ 1773.150851][T15010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1773.165517][T15010] CPU: 1 PID: 15010 Comm: syz-executor.1 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1773.177053][T15010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1773.186946][T15010] Call Trace: [ 1773.190074][T15010] [ 1773.192846][T15010] dump_stack_lvl+0x151/0x1b7 [ 1773.197359][T15010] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1773.202826][T15010] ? kvm_sched_clock_read+0x18/0x40 [ 1773.207859][T15010] dump_stack+0x15/0x17 [ 1773.211854][T15010] should_fail+0x3c6/0x510 [ 1773.216104][T15010] should_fail_alloc_page+0x5a/0x80 [ 1773.221140][T15010] prepare_alloc_pages+0x15c/0x700 [ 1773.226085][T15010] ? __alloc_pages_bulk+0xe40/0xe40 [ 1773.231120][T15010] __alloc_pages+0x18c/0x8f0 [ 1773.235546][T15010] ? prep_new_page+0x110/0x110 [ 1773.240147][T15010] ? stack_trace_save+0x1c0/0x1c0 [ 1773.245007][T15010] ? __kernel_text_address+0x9b/0x110 [ 1773.250215][T15010] pte_alloc_one+0x73/0x1b0 [ 1773.254557][T15010] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1773.259587][T15010] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1773.265230][T15010] __pte_alloc+0x86/0x350 [ 1773.269399][T15010] ? free_pgtables+0x280/0x280 [ 1773.273996][T15010] ? kasan_check_range+0x82/0x2a0 [ 1773.278861][T15010] copy_page_range+0x28a8/0x2f90 [ 1773.283630][T15010] ? _raw_spin_lock+0x1b0/0x1b0 [ 1773.288321][T15010] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1773.293612][T15010] ? pfn_valid+0x1e0/0x1e0 [ 1773.297865][T15010] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1773.303418][T15010] ? __rb_insert_augmented+0x5de/0x610 [ 1773.308716][T15010] copy_mm+0xc7e/0x13e0 [ 1773.312707][T15010] ? copy_signal+0x610/0x610 [ 1773.317139][T15010] ? __init_rwsem+0xd6/0x1c0 [ 1773.321558][T15010] ? copy_signal+0x4e3/0x610 [ 1773.325986][T15010] copy_process+0x1149/0x3290 [ 1773.330502][T15010] ? timerqueue_add+0x250/0x270 [ 1773.335188][T15010] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1773.340131][T15010] ? enqueue_hrtimer+0xca/0x240 [ 1773.344820][T15010] ? __hrtimer_run_queues+0x46b/0xad0 [ 1773.350029][T15010] kernel_clone+0x21e/0x9e0 [ 1773.354368][T15010] ? create_io_thread+0x1e0/0x1e0 [ 1773.359227][T15010] ? clockevents_program_event+0x22f/0x300 [ 1773.364870][T15010] __x64_sys_clone+0x23f/0x290 [ 1773.369468][T15010] ? __do_sys_vfork+0x130/0x130 [ 1773.374185][T15010] ? debug_smp_processor_id+0x17/0x20 [ 1773.379362][T15010] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1773.385264][T15010] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1773.390734][T15010] do_syscall_64+0x3d/0xb0 [ 1773.394984][T15010] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1773.400629][T15010] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1773.406358][T15010] RIP: 0033:0x7f266d5a0da9 [ 1773.410611][T15010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1773.430052][T15010] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1773.438296][T15010] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1773.446109][T15010] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 05:38:59 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5000000}, 0x36) [ 1773.453919][T15010] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1773.461729][T15010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1773.469546][T15010] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1773.477357][T15010] 05:38:59 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x40000000}, 0x36) 05:38:59 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xe4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce6, 0x2, 0x0, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0x8) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1002, 0x2}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x123f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x4, &(0x7f0000000140)=""/4, 0x1e00, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000200)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x5, 0x80000001, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r2, r2], 0x0, 0x10, 0x3}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='snd_soc_dapm_walk_done\x00', r3}, 0x10) (async, rerun: 64) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (rerun: 64) 05:38:59 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 84) 05:38:59 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x48000000}, 0x36) 05:38:59 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6000000}, 0x36) 05:38:59 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:38:59 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x4c000000}, 0x36) 05:38:59 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7000000}, 0x36) [ 1773.581958][T15028] FAULT_INJECTION: forcing a failure. [ 1773.581958][T15028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1773.646510][T15028] CPU: 0 PID: 15028 Comm: syz-executor.1 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1773.658071][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1773.667961][T15028] Call Trace: [ 1773.671081][T15028] [ 1773.673862][T15028] dump_stack_lvl+0x151/0x1b7 [ 1773.678377][T15028] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1773.683840][T15028] dump_stack+0x15/0x17 [ 1773.687831][T15028] should_fail+0x3c6/0x510 [ 1773.692088][T15028] should_fail_alloc_page+0x5a/0x80 [ 1773.697118][T15028] prepare_alloc_pages+0x15c/0x700 [ 1773.702066][T15028] ? __alloc_pages_bulk+0xe40/0xe40 [ 1773.707109][T15028] __alloc_pages+0x18c/0x8f0 [ 1773.711526][T15028] ? prep_new_page+0x110/0x110 [ 1773.716142][T15028] ? stack_trace_save+0x1c0/0x1c0 [ 1773.720991][T15028] ? __kernel_text_address+0x9b/0x110 [ 1773.726199][T15028] pte_alloc_one+0x73/0x1b0 [ 1773.730536][T15028] ? pfn_modify_allowed+0x2f0/0x2f0 [ 1773.735570][T15028] ? irqentry_exit+0x30/0x40 [ 1773.739994][T15028] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1773.746069][T15028] __pte_alloc+0x86/0x350 [ 1773.750236][T15028] ? free_pgtables+0x280/0x280 [ 1773.754834][T15028] ? __stack_depot_save+0x167/0x470 [ 1773.759870][T15028] ? __stack_depot_save+0x34/0x470 [ 1773.764819][T15028] ? anon_vma_clone+0x9a/0x500 [ 1773.769419][T15028] copy_page_range+0x28a8/0x2f90 [ 1773.774190][T15028] ? __kasan_slab_alloc+0xb1/0xe0 [ 1773.779051][T15028] ? slab_post_alloc_hook+0x53/0x2c0 [ 1773.784174][T15028] ? kernel_clone+0x21e/0x9e0 [ 1773.788685][T15028] ? do_syscall_64+0x3d/0xb0 [ 1773.793111][T15028] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1773.799026][T15028] ? pfn_valid+0x1e0/0x1e0 [ 1773.803267][T15028] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 1773.808822][T15028] ? __rb_insert_augmented+0x5de/0x610 [ 1773.814122][T15028] copy_mm+0xc7e/0x13e0 [ 1773.818114][T15028] ? irqentry_exit+0x30/0x40 [ 1773.822538][T15028] ? copy_signal+0x610/0x610 [ 1773.826962][T15028] ? __init_rwsem+0xd6/0x1c0 [ 1773.831387][T15028] ? copy_signal+0x4e3/0x610 [ 1773.835816][T15028] copy_process+0x1149/0x3290 [ 1773.840328][T15028] ? irqentry_exit+0x30/0x40 [ 1773.844766][T15028] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1773.849700][T15028] ? vfs_write+0x9ec/0x1110 [ 1773.854041][T15028] ? irqentry_exit+0x30/0x40 [ 1773.858470][T15028] kernel_clone+0x21e/0x9e0 [ 1773.862809][T15028] ? file_end_write+0x1c0/0x1c0 [ 1773.867496][T15028] ? create_io_thread+0x1e0/0x1e0 [ 1773.872355][T15028] ? mutex_unlock+0xb2/0x260 [ 1773.876784][T15028] ? __mutex_lock_slowpath+0x10/0x10 [ 1773.881907][T15028] __x64_sys_clone+0x23f/0x290 [ 1773.886505][T15028] ? __do_sys_vfork+0x130/0x130 [ 1773.891280][T15028] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1773.897092][T15028] do_syscall_64+0x3d/0xb0 [ 1773.901345][T15028] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1773.906988][T15028] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1773.912713][T15028] RIP: 0033:0x7f266d5a0da9 [ 1773.916967][T15028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1773.936408][T15028] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 05:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x60000000}, 0x36) 05:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8000000}, 0x36) 05:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x9000000}, 0x36) [ 1773.944652][T15028] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1773.952463][T15028] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1773.960276][T15028] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1773.968086][T15028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1773.975897][T15028] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1773.983715][T15028] 05:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x61000000}, 0x36) 05:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa000000}, 0x36) 05:39:00 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 85) 05:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xb000000}, 0x36) 05:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x62000000}, 0x36) 05:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc000000}, 0x36) [ 1774.103923][T15061] FAULT_INJECTION: forcing a failure. [ 1774.103923][T15061] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.132539][T15061] CPU: 1 PID: 15061 Comm: syz-executor.1 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1774.144091][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1774.153985][T15061] Call Trace: [ 1774.157103][T15061] [ 1774.159882][T15061] dump_stack_lvl+0x151/0x1b7 [ 1774.164396][T15061] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1774.169865][T15061] dump_stack+0x15/0x17 [ 1774.173855][T15061] should_fail+0x3c6/0x510 [ 1774.178108][T15061] __should_failslab+0xa4/0xe0 [ 1774.183241][T15061] ? anon_vma_clone+0x9a/0x500 [ 1774.187841][T15061] should_failslab+0x9/0x20 [ 1774.192180][T15061] slab_pre_alloc_hook+0x37/0xd0 [ 1774.196955][T15061] ? anon_vma_clone+0x9a/0x500 [ 1774.201552][T15061] kmem_cache_alloc+0x44/0x200 [ 1774.206155][T15061] anon_vma_clone+0x9a/0x500 [ 1774.210579][T15061] anon_vma_fork+0x91/0x4e0 [ 1774.214917][T15061] ? anon_vma_name+0x4c/0x70 [ 1774.219345][T15061] ? vm_area_dup+0x17a/0x230 [ 1774.223781][T15061] copy_mm+0xa3a/0x13e0 [ 1774.227767][T15061] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1774.233411][T15061] ? copy_signal+0x610/0x610 [ 1774.237836][T15061] ? __init_rwsem+0xd6/0x1c0 [ 1774.242261][T15061] ? copy_signal+0x4e3/0x610 [ 1774.246686][T15061] copy_process+0x1149/0x3290 [ 1774.251199][T15061] ? irqentry_exit+0x30/0x40 [ 1774.255627][T15061] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1774.260573][T15061] ? vfs_write+0x9e1/0x1110 [ 1774.264913][T15061] ? vfs_write+0x9ec/0x1110 [ 1774.269250][T15061] ? __hrtimer_run_queues+0x46b/0xad0 [ 1774.274461][T15061] kernel_clone+0x21e/0x9e0 [ 1774.278806][T15061] ? file_end_write+0x1c0/0x1c0 [ 1774.283955][T15061] ? create_io_thread+0x1e0/0x1e0 [ 1774.288816][T15061] ? mutex_unlock+0xb2/0x260 [ 1774.293241][T15061] ? __mutex_lock_slowpath+0x10/0x10 [ 1774.298363][T15061] __x64_sys_clone+0x23f/0x290 [ 1774.302964][T15061] ? __do_sys_vfork+0x130/0x130 [ 1774.307650][T15061] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1774.313466][T15061] do_syscall_64+0x3d/0xb0 [ 1774.317715][T15061] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1774.323355][T15061] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1774.329087][T15061] RIP: 0033:0x7f266d5a0da9 [ 1774.333341][T15061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x63000000}, 0x36) 05:39:00 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) [ 1774.352784][T15061] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1774.361027][T15061] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1774.368848][T15061] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1774.376649][T15061] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1774.384843][T15061] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1774.392656][T15061] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1774.400470][T15061] 05:39:00 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xe4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce6, 0x2, 0x0, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1002, 0x2}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x123f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x4, &(0x7f0000000140)=""/4, 0x1e00, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000200)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x5, 0x80000001, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r2, r2], 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='snd_soc_dapm_walk_done\x00', r3}, 0x10) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xe4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce6, 0x2, 0x0, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0x8) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1002, 0x2}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x123f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x4, &(0x7f0000000140)=""/4, 0x1e00, 0x11, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000200)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x5, 0x80000001, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r2, r2], 0x0, 0x10, 0x3}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='snd_soc_dapm_walk_done\x00', r3}, 0x10) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) 05:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xd000000}, 0x36) 05:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x64000000}, 0x36) 05:39:00 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 86) 05:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x68000000}, 0x36) 05:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xe000000}, 0x36) [ 1774.508319][T15084] FAULT_INJECTION: forcing a failure. [ 1774.508319][T15084] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.552758][T15084] CPU: 0 PID: 15084 Comm: syz-executor.1 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1774.564312][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1774.574206][T15084] Call Trace: [ 1774.577329][T15084] [ 1774.580105][T15084] dump_stack_lvl+0x151/0x1b7 [ 1774.584619][T15084] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1774.590087][T15084] ? kasan_check_range+0x66/0x2a0 [ 1774.594945][T15084] dump_stack+0x15/0x17 [ 1774.598939][T15084] should_fail+0x3c6/0x510 [ 1774.603204][T15084] __should_failslab+0xa4/0xe0 [ 1774.607792][T15084] ? anon_vma_clone+0x9a/0x500 [ 1774.612397][T15084] should_failslab+0x9/0x20 [ 1774.616731][T15084] slab_pre_alloc_hook+0x37/0xd0 [ 1774.621506][T15084] ? anon_vma_clone+0x9a/0x500 [ 1774.626106][T15084] kmem_cache_alloc+0x44/0x200 [ 1774.630707][T15084] anon_vma_clone+0x9a/0x500 [ 1774.635136][T15084] anon_vma_fork+0x91/0x4e0 [ 1774.639472][T15084] ? anon_vma_name+0x43/0x70 [ 1774.643898][T15084] ? vm_area_dup+0x17a/0x230 [ 1774.648324][T15084] copy_mm+0xa3a/0x13e0 [ 1774.652314][T15084] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1774.658309][T15084] ? copy_signal+0x610/0x610 [ 1774.662731][T15084] ? __init_rwsem+0xd6/0x1c0 [ 1774.667156][T15084] ? copy_signal+0x4e3/0x610 [ 1774.671583][T15084] copy_process+0x1149/0x3290 [ 1774.676118][T15084] ? proc_fail_nth_write+0x20b/0x290 [ 1774.681220][T15084] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1774.686166][T15084] ? vfs_write+0x9ec/0x1110 [ 1774.690505][T15084] ? __hrtimer_run_queues+0x46b/0xad0 [ 1774.695715][T15084] kernel_clone+0x21e/0x9e0 [ 1774.700055][T15084] ? irqentry_exit+0x30/0x40 [ 1774.704479][T15084] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1774.710122][T15084] ? create_io_thread+0x1e0/0x1e0 [ 1774.714985][T15084] __x64_sys_clone+0x23f/0x290 [ 1774.719582][T15084] ? __do_sys_vfork+0x130/0x130 [ 1774.724266][T15084] ? ksys_write+0x260/0x2c0 [ 1774.728620][T15084] ? debug_smp_processor_id+0x17/0x20 [ 1774.733817][T15084] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1774.739727][T15084] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1774.745199][T15084] do_syscall_64+0x3d/0xb0 [ 1774.749438][T15084] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1774.755090][T15084] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1774.760810][T15084] RIP: 0033:0x7f266d5a0da9 [ 1774.765063][T15084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1774.784505][T15084] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1774.792748][T15084] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 05:39:00 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xda, 0x40, 0x1, 0x80, 0x0, 0x100000000000, 0x31, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x400, 0x4, 0xd2, 0x0, 0xffff, 0x7, 0x5, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x69000000}, 0x36) 05:39:00 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6a000000}, 0x36) 05:39:00 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xf000000}, 0x36) [ 1774.800560][T15084] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1774.808371][T15084] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1774.816182][T15084] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1774.823993][T15084] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1774.831811][T15084] 05:39:01 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xda, 0x40, 0x1, 0x80, 0x0, 0x100000000000, 0x31, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x400, 0x4, 0xd2, 0x0, 0xffff, 0x7, 0x5, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:39:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6b000000}, 0x36) 05:39:01 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:39:01 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 87) 05:39:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x6c000000}, 0x36) 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x10000000}, 0x36) [ 1774.951649][T15115] FAULT_INJECTION: forcing a failure. [ 1774.951649][T15115] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.966899][T15115] CPU: 1 PID: 15115 Comm: syz-executor.1 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1774.978439][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1774.988591][T15115] Call Trace: [ 1774.991717][T15115] [ 1774.994502][T15115] dump_stack_lvl+0x151/0x1b7 [ 1774.999006][T15115] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1775.004482][T15115] dump_stack+0x15/0x17 [ 1775.008468][T15115] should_fail+0x3c6/0x510 [ 1775.012721][T15115] __should_failslab+0xa4/0xe0 [ 1775.017321][T15115] ? anon_vma_clone+0x9a/0x500 [ 1775.021920][T15115] should_failslab+0x9/0x20 [ 1775.026259][T15115] slab_pre_alloc_hook+0x37/0xd0 [ 1775.031033][T15115] ? anon_vma_clone+0x9a/0x500 [ 1775.035635][T15115] kmem_cache_alloc+0x44/0x200 [ 1775.040235][T15115] anon_vma_clone+0x9a/0x500 [ 1775.044660][T15115] anon_vma_fork+0x91/0x4e0 [ 1775.048999][T15115] ? anon_vma_name+0x43/0x70 [ 1775.053424][T15115] ? vm_area_dup+0x17a/0x230 [ 1775.057852][T15115] copy_mm+0xa3a/0x13e0 [ 1775.061843][T15115] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1775.067835][T15115] ? copy_signal+0x610/0x610 [ 1775.072261][T15115] ? __init_rwsem+0xd6/0x1c0 [ 1775.076685][T15115] ? copy_signal+0x4e3/0x610 [ 1775.081113][T15115] copy_process+0x1149/0x3290 [ 1775.085977][T15115] ? proc_fail_nth_write+0x20b/0x290 [ 1775.091095][T15115] ? fsnotify_perm+0x6a/0x5d0 [ 1775.095608][T15115] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1775.100554][T15115] ? vfs_write+0x9ec/0x1110 [ 1775.104900][T15115] ? __hrtimer_run_queues+0x46b/0xad0 [ 1775.110149][T15115] kernel_clone+0x21e/0x9e0 [ 1775.114440][T15115] ? irqentry_exit+0x30/0x40 [ 1775.118869][T15115] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1775.124515][T15115] ? create_io_thread+0x1e0/0x1e0 [ 1775.129372][T15115] __x64_sys_clone+0x23f/0x290 [ 1775.133972][T15115] ? __do_sys_vfork+0x130/0x130 [ 1775.138660][T15115] ? ksys_write+0x260/0x2c0 [ 1775.143001][T15115] ? debug_smp_processor_id+0x17/0x20 [ 1775.148204][T15115] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1775.154106][T15115] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1775.159575][T15115] do_syscall_64+0x3d/0xb0 [ 1775.163827][T15115] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1775.169471][T15115] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1775.175199][T15115] RIP: 0033:0x7f266d5a0da9 [ 1775.179452][T15115] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 05:39:01 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 88) 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x11000000}, 0x36) [ 1775.199151][T15115] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1775.207398][T15115] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1775.215209][T15115] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1775.223108][T15115] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1775.231181][T15115] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1775.238990][T15115] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1775.246804][T15115] 05:39:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x70000000}, 0x36) 05:39:01 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xda, 0x40, 0x1, 0x80, 0x0, 0x100000000000, 0x31, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x400, 0x4, 0xd2, 0x0, 0xffff, 0x7, 0x5, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x12000000}, 0x36) 05:39:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x71000000}, 0x36) 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x13000000}, 0x36) [ 1775.353144][T15136] FAULT_INJECTION: forcing a failure. [ 1775.353144][T15136] name failslab, interval 1, probability 0, space 0, times 0 [ 1775.391411][T15136] CPU: 1 PID: 15136 Comm: syz-executor.1 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 05:39:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x72000000}, 0x36) [ 1775.402965][T15136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1775.412860][T15136] Call Trace: [ 1775.415982][T15136] [ 1775.418755][T15136] dump_stack_lvl+0x151/0x1b7 [ 1775.423271][T15136] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1775.428737][T15136] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1775.434378][T15136] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1775.440366][T15136] ? anon_vma_clone+0x9a/0x500 [ 1775.444970][T15136] dump_stack+0x15/0x17 [ 1775.448959][T15136] should_fail+0x3c6/0x510 [ 1775.453211][T15136] __should_failslab+0xa4/0xe0 [ 1775.457812][T15136] ? anon_vma_fork+0xf7/0x4e0 [ 1775.462325][T15136] should_failslab+0x9/0x20 [ 1775.466662][T15136] slab_pre_alloc_hook+0x37/0xd0 [ 1775.471441][T15136] ? anon_vma_fork+0xf7/0x4e0 [ 1775.475949][T15136] kmem_cache_alloc+0x44/0x200 [ 1775.480561][T15136] anon_vma_fork+0xf7/0x4e0 [ 1775.484889][T15136] ? anon_vma_name+0x43/0x70 [ 1775.489317][T15136] ? vm_area_dup+0x17a/0x230 [ 1775.493745][T15136] copy_mm+0xa3a/0x13e0 [ 1775.497737][T15136] ? irqentry_exit+0x30/0x40 [ 1775.502165][T15136] ? copy_signal+0x610/0x610 [ 1775.506597][T15136] ? __init_rwsem+0xd6/0x1c0 [ 1775.511015][T15136] ? copy_signal+0x4e3/0x610 [ 1775.515442][T15136] copy_process+0x1149/0x3290 [ 1775.519957][T15136] ? proc_fail_nth_write+0x20b/0x290 [ 1775.525076][T15136] ? fsnotify_perm+0x6a/0x5d0 [ 1775.529589][T15136] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1775.534540][T15136] ? vfs_write+0x9ec/0x1110 [ 1775.538879][T15136] ? __hrtimer_run_queues+0x46b/0xad0 [ 1775.544081][T15136] kernel_clone+0x21e/0x9e0 [ 1775.548428][T15136] ? file_end_write+0x1c0/0x1c0 [ 1775.553110][T15136] ? create_io_thread+0x1e0/0x1e0 [ 1775.557974][T15136] ? mutex_unlock+0xb2/0x260 [ 1775.562398][T15136] ? __mutex_lock_slowpath+0x10/0x10 [ 1775.567519][T15136] __x64_sys_clone+0x23f/0x290 [ 1775.572135][T15136] ? __do_sys_vfork+0x130/0x130 [ 1775.576810][T15136] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1775.582624][T15136] do_syscall_64+0x3d/0xb0 [ 1775.586875][T15136] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1775.592518][T15136] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1775.598245][T15136] RIP: 0033:0x7f266d5a0da9 [ 1775.602498][T15136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1775.621939][T15136] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1775.630185][T15136] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1775.637994][T15136] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1775.645806][T15136] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 05:39:01 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) syz_clone(0x24000380, &(0x7f0000000080)="76564d4ec23ee351b2f9f7da0fca853c288df34676365d541aeae268005cdb6342ded5470b15d55da2c8a466359f11c672bcba23dd6ef7def20cf085ddcdc0172a71f1334b04e58376503bb8be49d39ef3be82d51dfa1e71c14c8ffaa54064b73c0fae80edd1d2527c2152e85ff7b8fcd45064698d995cda85b90aa2b38aae894575958bd039bd366b53d1388d5d2997ddd072cdd28360eb404e7a3ecbba5db4f3e125a7bb00997c0ae85c0fb89aa3502a6d514b1018a5dd969e1323061a7985faf7b7ef7bc91e0fd0450c9b6b4014300f1af878b97a3fbe98", 0xd9, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8eaef8dda050f3172de8d695fee1938708750bfdbcf172069126c9b08cee4e1301ddbe3354e24490a7e5addd319c3c4a6106f3422e3319fa40b299d6a165c323de645f594653f9415969df6229c869f3a66dde01a88572aa32dab9da40c544498b2782") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0xdd, 0x0, 0x0, 0x3442, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x100000000}, 0x1a08, 0x8000000000000001, 0x1, 0x0, 0x0, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x5}, r2, 0x8, r3, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x3, 0x20, 0x3, 0x0, 0xffffffffffffffff, 0x8, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x6fe2, 0x7}, 0x100000, 0x7, 0xfffff7ca, 0x1, 0xffffffffffff8000, 0x5, 0x200, 0x0, 0x7, 0x0, 0x6}, r2, 0xf, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x18000000}, 0x36) 05:39:01 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:39:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x73000000}, 0x36) [ 1775.653621][T15136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1775.661427][T15136] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1775.669245][T15136] 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1f000000}, 0x36) 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x20000000}, 0x36) 05:39:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x74000000}, 0x36) 05:39:01 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 89) 05:39:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x79000000}, 0x36) 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x21000000}, 0x36) 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x25000000}, 0x36) 05:39:01 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7a000000}, 0x36) 05:39:01 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x29000000}, 0x36) [ 1775.805958][T15160] FAULT_INJECTION: forcing a failure. [ 1775.805958][T15160] name failslab, interval 1, probability 0, space 0, times 0 05:39:02 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) syz_clone(0x24000380, &(0x7f0000000080)="76564d4ec23ee351b2f9f7da0fca853c288df34676365d541aeae268005cdb6342ded5470b15d55da2c8a466359f11c672bcba23dd6ef7def20cf085ddcdc0172a71f1334b04e58376503bb8be49d39ef3be82d51dfa1e71c14c8ffaa54064b73c0fae80edd1d2527c2152e85ff7b8fcd45064698d995cda85b90aa2b38aae894575958bd039bd366b53d1388d5d2997ddd072cdd28360eb404e7a3ecbba5db4f3e125a7bb00997c0ae85c0fb89aa3502a6d514b1018a5dd969e1323061a7985faf7b7ef7bc91e0fd0450c9b6b4014300f1af878b97a3fbe98", 0xd9, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8eaef8dda050f3172de8d695fee1938708750bfdbcf172069126c9b08cee4e1301ddbe3354e24490a7e5addd319c3c4a6106f3422e3319fa40b299d6a165c323de645f594653f9415969df6229c869f3a66dde01a88572aa32dab9da40c544498b2782") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0xdd, 0x0, 0x0, 0x3442, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x100000000}, 0x1a08, 0x8000000000000001, 0x1, 0x0, 0x0, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x5}, r2, 0x8, r3, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x3, 0x20, 0x3, 0x0, 0xffffffffffffffff, 0x8, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x6fe2, 0x7}, 0x100000, 0x7, 0xfffff7ca, 0x1, 0xffffffffffff8000, 0x5, 0x200, 0x0, 0x7, 0x0, 0x6}, r2, 0xf, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) syz_clone(0x24000380, &(0x7f0000000080)="76564d4ec23ee351b2f9f7da0fca853c288df34676365d541aeae268005cdb6342ded5470b15d55da2c8a466359f11c672bcba23dd6ef7def20cf085ddcdc0172a71f1334b04e58376503bb8be49d39ef3be82d51dfa1e71c14c8ffaa54064b73c0fae80edd1d2527c2152e85ff7b8fcd45064698d995cda85b90aa2b38aae894575958bd039bd366b53d1388d5d2997ddd072cdd28360eb404e7a3ecbba5db4f3e125a7bb00997c0ae85c0fb89aa3502a6d514b1018a5dd969e1323061a7985faf7b7ef7bc91e0fd0450c9b6b4014300f1af878b97a3fbe98", 0xd9, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8eaef8dda050f3172de8d695fee1938708750bfdbcf172069126c9b08cee4e1301ddbe3354e24490a7e5addd319c3c4a6106f3422e3319fa40b299d6a165c323de645f594653f9415969df6229c869f3a66dde01a88572aa32dab9da40c544498b2782") (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) gettid() (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0xdd, 0x0, 0x0, 0x3442, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x100000000}, 0x1a08, 0x8000000000000001, 0x1, 0x0, 0x0, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x5}, r2, 0x8, r3, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x3, 0x20, 0x3, 0x0, 0xffffffffffffffff, 0x8, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x6fe2, 0x7}, 0x100000, 0x7, 0xfffff7ca, 0x1, 0xffffffffffff8000, 0x5, 0x200, 0x0, 0x7, 0x0, 0x6}, r2, 0xf, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (async) [ 1775.862954][T15160] CPU: 1 PID: 15160 Comm: syz-executor.1 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1775.874503][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1775.884396][T15160] Call Trace: [ 1775.887519][T15160] [ 1775.890296][T15160] dump_stack_lvl+0x151/0x1b7 [ 1775.894807][T15160] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1775.900277][T15160] dump_stack+0x15/0x17 [ 1775.904268][T15160] should_fail+0x3c6/0x510 [ 1775.908522][T15160] __should_failslab+0xa4/0xe0 [ 1775.913119][T15160] ? anon_vma_fork+0xf7/0x4e0 [ 1775.917634][T15160] should_failslab+0x9/0x20 [ 1775.921975][T15160] slab_pre_alloc_hook+0x37/0xd0 [ 1775.926747][T15160] ? anon_vma_fork+0xf7/0x4e0 [ 1775.931258][T15160] kmem_cache_alloc+0x44/0x200 [ 1775.935873][T15160] anon_vma_fork+0xf7/0x4e0 [ 1775.940205][T15160] ? anon_vma_name+0x43/0x70 [ 1775.944625][T15160] ? vm_area_dup+0x17a/0x230 [ 1775.949053][T15160] copy_mm+0xa3a/0x13e0 [ 1775.953047][T15160] ? copy_signal+0x610/0x610 [ 1775.957470][T15160] ? __init_rwsem+0xd6/0x1c0 [ 1775.961900][T15160] ? copy_signal+0x4e3/0x610 [ 1775.966326][T15160] copy_process+0x1149/0x3290 [ 1775.970838][T15160] ? proc_fail_nth_write+0x20b/0x290 [ 1775.975967][T15160] ? fsnotify_perm+0x6a/0x5d0 [ 1775.980474][T15160] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1775.985429][T15160] ? vfs_write+0x9ec/0x1110 [ 1775.989760][T15160] kernel_clone+0x21e/0x9e0 [ 1775.994097][T15160] ? file_end_write+0x1c0/0x1c0 [ 1775.998785][T15160] ? create_io_thread+0x1e0/0x1e0 [ 1776.003644][T15160] ? mutex_unlock+0xb2/0x260 [ 1776.008072][T15160] ? __mutex_lock_slowpath+0x10/0x10 [ 1776.013194][T15160] __x64_sys_clone+0x23f/0x290 [ 1776.017796][T15160] ? __do_sys_vfork+0x130/0x130 [ 1776.022482][T15160] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 1776.028297][T15160] do_syscall_64+0x3d/0xb0 [ 1776.032548][T15160] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1776.038190][T15160] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1776.043921][T15160] RIP: 0033:0x7f266d5a0da9 [ 1776.048173][T15160] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1776.067614][T15160] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1776.075860][T15160] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1776.083671][T15160] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1776.091482][T15160] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 [ 1776.099294][T15160] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x7b000000}, 0x36) 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x30000000}, 0x36) 05:39:02 executing program 1: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0x0, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffd, 0x0, @perf_config_ext={0x0, 0x3}, 0x14d10, 0x0, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) (fail_nth: 90) [ 1776.107107][T15160] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1776.114930][T15160] 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x80ffffff}, 0x36) 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c000000}, 0x36) 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x83000000}, 0x36) 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3e000000}, 0x36) 05:39:02 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x85ffffff}, 0x36) 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3f000000}, 0x36) 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x90ffffff}, 0x36) 05:39:02 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x0, 0xc4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x0, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5}, r1, 0x0, r0, 0xa) (async) syz_clone(0x24000380, &(0x7f0000000080)="76564d4ec23ee351b2f9f7da0fca853c288df34676365d541aeae268005cdb6342ded5470b15d55da2c8a466359f11c672bcba23dd6ef7def20cf085ddcdc0172a71f1334b04e58376503bb8be49d39ef3be82d51dfa1e71c14c8ffaa54064b73c0fae80edd1d2527c2152e85ff7b8fcd45064698d995cda85b90aa2b38aae894575958bd039bd366b53d1388d5d2997ddd072cdd28360eb404e7a3ecbba5db4f3e125a7bb00997c0ae85c0fb89aa3502a6d514b1018a5dd969e1323061a7985faf7b7ef7bc91e0fd0450c9b6b4014300f1af878b97a3fbe98", 0xd9, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8eaef8dda050f3172de8d695fee1938708750bfdbcf172069126c9b08cee4e1301ddbe3354e24490a7e5addd319c3c4a6106f3422e3319fa40b299d6a165c323de645f594653f9415969df6229c869f3a66dde01a88572aa32dab9da40c544498b2782") (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() (async) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0xdd, 0x0, 0x0, 0x3442, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x100000000}, 0x1a08, 0x8000000000000001, 0x1, 0x0, 0x0, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x5}, r2, 0x8, r3, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x3, 0x20, 0x3, 0x0, 0xffffffffffffffff, 0x8, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x6fe2, 0x7}, 0x100000, 0x7, 0xfffff7ca, 0x1, 0xffffffffffff8000, 0x5, 0x200, 0x0, 0x7, 0x0, 0x6}, r2, 0xf, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x9cffffff}, 0x36) 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x40000000}, 0x36) 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x9fffffff}, 0x36) 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x48000000}, 0x36) 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4c000000}, 0x36) 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa0028118}, 0x36) 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x55971400}, 0x36) 05:39:02 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x7f, 0xc4, 0x1, 0x0, 0x3, 0x2a1, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x1, @perf_config_ext={0x4, 0x100000069e}, 0x20440, 0xce3, 0x2, 0x1, 0x3, 0x4, 0x100, 0x0, 0x5, 0x0, 0x8}, r1, 0x0, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x7db8e8e71c4a530a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x8000000000000000}, 0x202, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x6a, 0x3f, 0x4, 0x0, 0x0, 0x3000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0x2048, 0x3, 0x9, 0x0, 0x6, 0x3, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xab) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020662a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000100)='\x00') perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x9, 0x3f, 0xd, 0x8, 0x0, 0x101, 0x81400, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffd, 0x0, @perf_config_ext={0x500000000000000, 0x3}, 0x14d10, 0x9, 0xff, 0x1, 0x7c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r2, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_ext_show_extent\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x2, 0x7, 0x0, 0x400, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) syz_clone(0x13025000, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa002a6e8}, 0x36) [ 1776.392457][T15221] FAULT_INJECTION: forcing a failure. [ 1776.392457][T15221] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1776.426817][T15221] CPU: 1 PID: 15221 Comm: syz-executor.1 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 1776.438367][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 1776.448263][T15221] Call Trace: [ 1776.451385][T15221] [ 1776.454161][T15221] dump_stack_lvl+0x151/0x1b7 [ 1776.458676][T15221] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1776.464146][T15221] dump_stack+0x15/0x17 [ 1776.468138][T15221] should_fail+0x3c6/0x510 [ 1776.472391][T15221] should_fail_alloc_page+0x5a/0x80 [ 1776.477423][T15221] prepare_alloc_pages+0x15c/0x700 [ 1776.482804][T15221] ? __alloc_pages_bulk+0xe40/0xe40 [ 1776.487841][T15221] __alloc_pages+0x18c/0x8f0 [ 1776.492262][T15221] ? prep_new_page+0x110/0x110 [ 1776.496869][T15221] get_zeroed_page+0x1b/0x40 [ 1776.501291][T15221] __pud_alloc+0x8b/0x260 [ 1776.505458][T15221] ? stack_trace_snprint+0xf0/0xf0 [ 1776.510404][T15221] ? do_handle_mm_fault+0x2330/0x2330 [ 1776.515616][T15221] ? __stack_depot_save+0x34/0x470 [ 1776.520563][T15221] ? anon_vma_clone+0x9a/0x500 [ 1776.525167][T15221] copy_page_range+0x2bcf/0x2f90 [ 1776.529940][T15221] ? __kasan_slab_alloc+0xb1/0xe0 [ 1776.534798][T15221] ? slab_post_alloc_hook+0x53/0x2c0 [ 1776.539937][T15221] ? copy_mm+0xa3a/0x13e0 [ 1776.544080][T15221] ? copy_process+0x1149/0x3290 [ 1776.548768][T15221] ? kernel_clone+0x21e/0x9e0 [ 1776.553279][T15221] ? __x64_sys_clone+0x23f/0x290 [ 1776.558052][T15221] ? do_syscall_64+0x3d/0xb0 [ 1776.562482][T15221] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1776.568391][T15221] ? pfn_valid+0x1e0/0x1e0 [ 1776.572638][T15221] ? irqentry_exit+0x30/0x40 [ 1776.577069][T15221] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1776.582703][T15221] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 1776.588957][T15221] copy_mm+0xc7e/0x13e0 [ 1776.592951][T15221] ? copy_signal+0x610/0x610 [ 1776.597370][T15221] ? __init_rwsem+0xd6/0x1c0 [ 1776.601798][T15221] ? copy_signal+0x4e3/0x610 [ 1776.606227][T15221] copy_process+0x1149/0x3290 [ 1776.610743][T15221] ? timerqueue_add+0x250/0x270 [ 1776.615427][T15221] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1776.620371][T15221] ? enqueue_hrtimer+0xca/0x240 [ 1776.625060][T15221] ? __hrtimer_run_queues+0x46b/0xad0 [ 1776.630270][T15221] kernel_clone+0x21e/0x9e0 [ 1776.634615][T15221] ? create_io_thread+0x1e0/0x1e0 [ 1776.639469][T15221] ? clockevents_program_event+0x22f/0x300 [ 1776.645116][T15221] __x64_sys_clone+0x23f/0x290 [ 1776.649713][T15221] ? __do_sys_vfork+0x130/0x130 [ 1776.654396][T15221] ? debug_smp_processor_id+0x17/0x20 [ 1776.659604][T15221] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1776.665504][T15221] ? exit_to_user_mode_prepare+0x39/0xa0 [ 1776.671233][T15221] do_syscall_64+0x3d/0xb0 [ 1776.675487][T15221] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1776.681128][T15221] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1776.686856][T15221] RIP: 0033:0x7f266d5a0da9 [ 1776.691110][T15221] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1776.710554][T15221] RSP: 002b:00007f266c322078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1776.718794][T15221] RAX: ffffffffffffffda RBX: 00007f266d6cef80 RCX: 00007f266d5a0da9 [ 1776.726614][T15221] RDX: 0000000000000000 RSI: ffffffff00000000 RDI: 0000000013025000 [ 1776.734417][T15221] RBP: 00007f266c322120 R08: 0000000000000000 R09: 0000000000000000 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x60000000}, 0x36) 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xa002c000}, 0x36) [ 1776.742231][T15221] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1776.750054][T15221] R13: 000000000000000b R14: 00007f266d6cef80 R15: 00007ffe00499038 [ 1776.757862][T15221] 05:39:02 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x61000000}, 0x36) 05:39:02 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x24, 0x7f, 0x81}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @printk={@x={0x18, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0xb0ffffff}, 0x36) 05:39:02 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000700)="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