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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000001600)=0x4) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000001640)='module_load\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000016c0)='\x00') write$cgroup_type(r1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001800)={0x5, 0x80, 0xff, 0x60, 0x6, 0xf7, 0x0, 0xffffffffffffff66, 0x4003, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000001700), 0x3}, 0x1e464, 0x8000000000000001, 0x7, 0xe, 0x5, 0x0, 0x400, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x10, r2, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001740)=0x647e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000b845ef00b5f6d9c6a1a3862f9f9afc7dbe01a6d3c2593692d48aca1624da2a1aff47af30c035715e3f9ab365d2fad840f3084d9fc570b0a8bd727881aa1439c7c397e34d3e46e2efd17f41fe0a285276cc4660455bd18ea51418962c95fc42"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1004, &(0x7f0000002480)=""/4100, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c54}, 0x80) 09:16:03 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1365.377010][ T823] FAULT_INJECTION: forcing a failure. [ 1365.377010][ T823] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.395400][ T823] CPU: 1 PID: 823 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1365.405825][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1365.415720][ T823] Call Trace: [ 1365.418841][ T823] [ 1365.421620][ T823] dump_stack_lvl+0x151/0x1b7 [ 1365.426134][ T823] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1365.431428][ T823] dump_stack+0x15/0x17 [ 1365.435422][ T823] should_fail+0x3c0/0x510 [ 1365.439672][ T823] __should_failslab+0x9f/0xe0 [ 1365.444276][ T823] should_failslab+0x9/0x20 [ 1365.448622][ T823] kmem_cache_alloc+0x4f/0x2f0 [ 1365.453221][ T823] ? vm_area_dup+0x26/0x1d0 [ 1365.457553][ T823] ? __kasan_check_read+0x11/0x20 [ 1365.462421][ T823] vm_area_dup+0x26/0x1d0 [ 1365.466580][ T823] dup_mmap+0x6b8/0xea0 [ 1365.470574][ T823] ? __delayed_free_task+0x20/0x20 [ 1365.475520][ T823] ? mm_init+0x807/0x960 [ 1365.479597][ T823] dup_mm+0x91/0x330 [ 1365.483330][ T823] copy_mm+0x108/0x1b0 [ 1365.487238][ T823] copy_process+0x1295/0x3250 [ 1365.491750][ T823] ? proc_fail_nth_write+0x213/0x290 [ 1365.496868][ T823] ? proc_fail_nth_read+0x220/0x220 [ 1365.501908][ T823] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1365.506856][ T823] ? vfs_write+0x9af/0x1050 [ 1365.511191][ T823] kernel_clone+0x22d/0x990 [ 1365.515535][ T823] ? irqentry_exit+0x30/0x40 [ 1365.519958][ T823] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1365.525599][ T823] ? create_io_thread+0x1e0/0x1e0 [ 1365.530476][ T823] __x64_sys_clone+0x289/0x310 [ 1365.535062][ T823] ? __do_sys_vfork+0x130/0x130 [ 1365.539749][ T823] ? debug_smp_processor_id+0x17/0x20 [ 1365.544961][ T823] do_syscall_64+0x44/0xd0 [ 1365.549213][ T823] ? irqentry_exit+0x12/0x40 [ 1365.553636][ T823] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1365.559363][ T823] RIP: 0033:0x7f3bd36fc0a9 [ 1365.563614][ T823] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1365.583056][ T823] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1365.591302][ T823] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1365.599114][ T823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1365.606924][ T823] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1365.614735][ T823] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:16:04 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:16:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:04 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0xed, &(0x7f0000000240)=""/237, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2]}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x383, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffeff}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x4, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18270010", @ANYRES32, @ANYBLOB="000000002f41000000b5bb5548aeab9aea0a0600000000000d9ba4435d3de2aa8ffca3714c27479b32221999fe704bd5152670ce3ecbbb406dcbe2c16d561dfd5f0f9fa04f44aa450171a1c66c9446e8155e54d0d38678ba21a9379881695421799db67f864b48125387123b2ded510131ad7ffbfc91328dd310614e99dcd0c39117ca31c77066de06"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)={&(0x7f0000001180)='./file1\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000800), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) openat$cgroup_ro(r7, &(0x7f0000000400)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r5, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001700)=[{}], 0x8, 0x10, &(0x7f0000001740), &(0x7f0000001680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0xd, 0xa, &(0x7f00000022c0)=ANY=[@ANYBLOB="57a00e34a9180000718300005659ad03e287985855a012000000000007000000ff32060005000000183400000408000080000000000000001810000000001869000002000095d01e39b54b17dcc388275d044bb253b5e1ab171cb71c012b5efadffb92f669d0560e61df6525691a9054e579f3388076e14de83694f1faeb87b973dc0d2f29df0e245bf2a005c0ba7842cbb19d77c64cb25e45907a280260b9e159f7ab9ff89aa9dd86adc7"], &(0x7f0000000340)='syzkaller\x00', 0x50000, 0x1000, &(0x7f0000000580)=""/4096, 0x41000, 0xc, '\x00', r6, 0xb, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x7}, 0x8, 0x10, &(0x7f0000001600)={0x5, 0x0, 0xf28f, 0x4}, 0x10, r9, r5, 0x0, &(0x7f0000001940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c40)='memory.numa_stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x3, 0x10, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40000000}, [@call={0x85, 0x0, 0x0, 0x63}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @alu={0x7, 0x1, 0x6, 0x8, 0x3, 0x1, 0xffffffffffffffff}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @map_fd={0x18, 0xb, 0x1, 0x0, r7}, @map_fd={0x18, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0x5, 0x9, 0x0, 0x8}]}, &(0x7f0000001780)='GPL\x00', 0x7f, 0x1000, &(0x7f0000003400)=""/4096, 0x100, 0x14, '\x00', r8, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001c00)={0x4, 0xd, 0x1000, 0x7fffffff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000001c80)=[r3, r10, 0x1, r1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0xc028660f, &(0x7f00000005c0)=0x443000025) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffd}, @generic={0xa3, 0x3, 0x0, 0x3f, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xbcb1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, 0x0, r11, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x2, 0x10001, 0x2}, 0x10}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001580)={0x1, &(0x7f0000001a80)="06112cd755f283eae690d7716bb3037bab00fe1e006f9758a2157eca2f9adc1c338718c08024bcc3a4609f0e4414dc5ed320edf99400a306370c90710b1cdca513b14b99a197c31dd5f79550784ebf49a56dc5044f6755edf89623ae0798948a4a3f8f29520ebb74219d5eea1b4904a94365ad94993002fb1683fa5ba278631fffb7df025c55a95b1d36cde5c78449b215b582c801f983947eb4f0bf21c48a8cb90df0d9499f9c22fc3f8fe73668f9489162cd18e0ad27", &(0x7f0000002400)=""/4096}, 0x20) [ 1365.622548][ T823] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1365.630363][ T823] [ 1365.665274][ T832] FAULT_INJECTION: forcing a failure. [ 1365.665274][ T832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1365.686230][ T832] CPU: 0 PID: 832 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1365.696125][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1365.706016][ T832] Call Trace: [ 1365.709141][ T832] [ 1365.711916][ T832] dump_stack_lvl+0x151/0x1b7 [ 1365.716434][ T832] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1365.721729][ T832] ? should_fail+0x32c/0x510 [ 1365.726156][ T832] dump_stack+0x15/0x17 [ 1365.730152][ T832] should_fail+0x3c0/0x510 [ 1365.734399][ T832] should_fail_alloc_page+0x58/0x70 [ 1365.739439][ T832] __alloc_pages+0x1de/0x7c0 [ 1365.743858][ T832] ? __count_vm_events+0x30/0x30 [ 1365.748631][ T832] ? __kasan_kmalloc+0x9/0x10 [ 1365.753143][ T832] ? __kmalloc+0x203/0x350 [ 1365.757398][ T832] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1365.763039][ T832] ? __vmalloc_node_range+0x2e3/0x800 [ 1365.768248][ T832] __vmalloc_node_range+0x48f/0x800 [ 1365.773286][ T832] dup_task_struct+0x61f/0xa60 [ 1365.777884][ T832] ? copy_process+0x579/0x3250 [ 1365.782486][ T832] ? _raw_spin_unlock_irq+0x49/0x70 [ 1365.787518][ T832] copy_process+0x579/0x3250 [ 1365.791958][ T832] ? timerqueue_add+0x25c/0x280 [ 1365.796637][ T832] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1365.801579][ T832] kernel_clone+0x22d/0x990 [ 1365.805925][ T832] ? __kasan_check_write+0x14/0x20 [ 1365.810867][ T832] ? create_io_thread+0x1e0/0x1e0 [ 1365.815726][ T832] ? lapic_next_event+0x5f/0x70 [ 1365.820414][ T832] ? clockevents_program_event+0x240/0x310 [ 1365.826061][ T832] __x64_sys_clone+0x289/0x310 [ 1365.830657][ T832] ? __do_sys_vfork+0x130/0x130 [ 1365.835342][ T832] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1365.841159][ T832] do_syscall_64+0x44/0xd0 [ 1365.845407][ T832] ? irqentry_exit+0x12/0x40 [ 1365.849836][ T832] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1365.855562][ T832] RIP: 0033:0x7f3bd36fc0a9 [ 1365.859818][ T832] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1365.879263][ T832] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1365.887504][ T832] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1365.895326][ T832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1365.903274][ T832] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 09:16:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1365.911082][ T832] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1365.918891][ T832] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1365.926705][ T832] [ 1365.950112][ T840] FAULT_INJECTION: forcing a failure. [ 1365.950112][ T840] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.962941][ T840] CPU: 0 PID: 840 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1365.972805][ T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1365.982699][ T840] Call Trace: [ 1365.985823][ T840] [ 1365.988600][ T840] dump_stack_lvl+0x151/0x1b7 [ 1365.993112][ T840] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1365.998407][ T840] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1366.004048][ T840] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 1366.010300][ T840] dump_stack+0x15/0x17 [ 1366.014292][ T840] should_fail+0x3c0/0x510 [ 1366.018638][ T840] __should_failslab+0x9f/0xe0 [ 1366.023237][ T840] should_failslab+0x9/0x20 [ 1366.027575][ T840] kmem_cache_alloc+0x4f/0x2f0 [ 1366.032176][ T840] ? anon_vma_fork+0xf7/0x4f0 [ 1366.036689][ T840] anon_vma_fork+0xf7/0x4f0 [ 1366.041032][ T840] ? anon_vma_name+0x4c/0x70 [ 1366.045460][ T840] dup_mmap+0x750/0xea0 [ 1366.049449][ T840] ? __delayed_free_task+0x20/0x20 [ 1366.054395][ T840] ? mm_init+0x807/0x960 [ 1366.058473][ T840] dup_mm+0x91/0x330 [ 1366.062209][ T840] copy_mm+0x108/0x1b0 [ 1366.066115][ T840] copy_process+0x1295/0x3250 [ 1366.070625][ T840] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1366.076275][ T840] ? proc_fail_nth_read+0x220/0x220 [ 1366.081304][ T840] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1366.086248][ T840] ? vfs_write+0x9af/0x1050 [ 1366.090588][ T840] kernel_clone+0x22d/0x990 [ 1366.094933][ T840] ? file_end_write+0x1b0/0x1b0 [ 1366.099961][ T840] ? __kasan_check_write+0x14/0x20 [ 1366.104921][ T840] ? create_io_thread+0x1e0/0x1e0 [ 1366.109772][ T840] ? __mutex_lock_slowpath+0x10/0x10 [ 1366.114891][ T840] __x64_sys_clone+0x289/0x310 [ 1366.119491][ T840] ? __do_sys_vfork+0x130/0x130 [ 1366.124179][ T840] ? debug_smp_processor_id+0x17/0x20 [ 1366.129386][ T840] do_syscall_64+0x44/0xd0 [ 1366.133638][ T840] ? irqentry_exit+0x12/0x40 [ 1366.138067][ T840] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1366.143794][ T840] RIP: 0033:0x7f3bd36fc0a9 [ 1366.148049][ T840] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1366.167491][ T840] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1366.175733][ T840] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1366.183545][ T840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1366.191358][ T840] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1366.199172][ T840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1366.206980][ T840] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1366.214796][ T840] 09:16:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0}, 0x80) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(r0, &(0x7f0000000900)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f00000005c0)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8992, &(0x7f0000000180)='\x19\xc6\xaf\xb5F\x17(H\xe0\x05\xce<:\xce\xa3T\x94\x97\xa1yi\x82i\xc89\xa3=3[\xda\x0e\xc6\x92\xe2\xf2\xaa\xdck1[\xa8\xc2\xbc\x11\x02G\xa2X9\x94\x1c\xd1 l\xe0F\xcd\xf8\xd3i}\x8b\xd6\xcd\xc5!\"\x7f\"?\x04\xdb~3\b\x1c7gV\x93\xab\xd5f\xb5\xd4\"\x04q\x95\xf2\xa6\xe4&\x88oD\x14\xb4\x00C\x90U2') 09:16:05 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000b4a14100000000ea04b60000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 09:16:08 executing program 4: gettid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, 0x0}, 0x40000002) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@cgroup, 0xffffffffffffffff, 0x21}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x25, 0x1c}, 0x10) syz_clone(0x2030400, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="95ca096f21ad43") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000bc0), 0x12) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xe, 0x3, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff}}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000f40)={0x3, 0x0, 0x40, 0xbbd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000f80)=[0xffffffffffffffff]}, 0x80) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001700)={&(0x7f00000016c0)='./file0\x00'}, 0x10) syz_clone(0x50000000, &(0x7f0000001780)="d527cf63a318abddeb44eac15d1f08a9c87d9d8bb96dd0b0941329ef3b1bdde687aa9592cf8809741bd438f076fe952c16a4fec227be739c4ba4cec00a786338bec45855668b06345b75c9d9b18c1749c86d9c025e37a7ef29094c624a7e92", 0x5f, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="33f58992ffbaeda9bab81705") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001b40)='ns/mnt\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x17}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) gettid() (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, 0x0}, 0x40000002) (async) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@cgroup, 0xffffffffffffffff, 0x21}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x25, 0x1c}, 0x10) (async) syz_clone(0x2030400, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="95ca096f21ad43") (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000bc0), 0x12) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xe, 0x3, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff}}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000f40)={0x3, 0x0, 0x40, 0xbbd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000f80)=[0xffffffffffffffff]}, 0x80) (async) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001700)={&(0x7f00000016c0)='./file0\x00'}, 0x10) (async) syz_clone(0x50000000, &(0x7f0000001780)="d527cf63a318abddeb44eac15d1f08a9c87d9d8bb96dd0b0941329ef3b1bdde687aa9592cf8809741bd438f076fe952c16a4fec227be739c4ba4cec00a786338bec45855668b06345b75c9d9b18c1749c86d9c025e37a7ef29094c624a7e92", 0x5f, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="33f58992ffbaeda9bab81705") (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001b40)='ns/mnt\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x17}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) 09:16:08 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:08 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r0}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0xed, &(0x7f0000000240)=""/237, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2]}, 0x80) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x383, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffeff}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x4, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18270010", @ANYRES32, @ANYBLOB="000000002f41000000b5bb5548aeab9aea0a0600000000000d9ba4435d3de2aa8ffca3714c27479b32221999fe704bd5152670ce3ecbbb406dcbe2c16d561dfd5f0f9fa04f44aa450171a1c66c9446e8155e54d0d38678ba21a9379881695421799db67f864b48125387123b2ded510131ad7ffbfc91328dd310614e99dcd0c39117ca31c77066de06"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x660c, 0x0) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)={&(0x7f0000001180)='./file1\x00', 0x0, 0x18}, 0x10) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000800), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) (async, rerun: 64) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) (async) openat$cgroup_ro(r7, &(0x7f0000000400)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r5, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001700)=[{}], 0x8, 0x10, &(0x7f0000001740), &(0x7f0000001680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0xd, 0xa, &(0x7f00000022c0)=ANY=[@ANYBLOB="57a00e34a9180000718300005659ad03e287985855a012000000000007000000ff32060005000000183400000408000080000000000000001810000000001869000002000095d01e39b54b17dcc388275d044bb253b5e1ab171cb71c012b5efadffb92f669d0560e61df6525691a9054e579f3388076e14de83694f1faeb87b973dc0d2f29df0e245bf2a005c0ba7842cbb19d77c64cb25e45907a280260b9e159f7ab9ff89aa9dd86adc7"], &(0x7f0000000340)='syzkaller\x00', 0x50000, 0x1000, &(0x7f0000000580)=""/4096, 0x41000, 0xc, '\x00', r6, 0xb, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x7}, 0x8, 0x10, &(0x7f0000001600)={0x5, 0x0, 0xf28f, 0x4}, 0x10, r9, r5, 0x0, &(0x7f0000001940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) (rerun: 64) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c40)='memory.numa_stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x3, 0x10, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40000000}, [@call={0x85, 0x0, 0x0, 0x63}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @alu={0x7, 0x1, 0x6, 0x8, 0x3, 0x1, 0xffffffffffffffff}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @map_fd={0x18, 0xb, 0x1, 0x0, r7}, @map_fd={0x18, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0x5, 0x9, 0x0, 0x8}]}, &(0x7f0000001780)='GPL\x00', 0x7f, 0x1000, &(0x7f0000003400)=""/4096, 0x100, 0x14, '\x00', r8, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001c00)={0x4, 0xd, 0x1000, 0x7fffffff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000001c80)=[r3, r10, 0x1, r1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0xc028660f, &(0x7f00000005c0)=0x443000025) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffd}, @generic={0xa3, 0x3, 0x0, 0x3f, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xbcb1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, 0x0, r11, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x2, 0x10001, 0x2}, 0x10}, 0x80) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001580)={0x1, &(0x7f0000001a80)="06112cd755f283eae690d7716bb3037bab00fe1e006f9758a2157eca2f9adc1c338718c08024bcc3a4609f0e4414dc5ed320edf99400a306370c90710b1cdca513b14b99a197c31dd5f79550784ebf49a56dc5044f6755edf89623ae0798948a4a3f8f29520ebb74219d5eea1b4904a94365ad94993002fb1683fa5ba278631fffb7df025c55a95b1d36cde5c78449b215b582c801f983947eb4f0bf21c48a8cb90df0d9499f9c22fc3f8fe73668f9489162cd18e0ad27", &(0x7f0000002400)=""/4096}, 0x20) 09:16:08 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000b4a14100000000ea04b60000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 1370.504616][ T869] FAULT_INJECTION: forcing a failure. [ 1370.504616][ T869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1370.522004][ T869] CPU: 0 PID: 869 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1370.531994][ T869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1370.541889][ T869] Call Trace: [ 1370.545015][ T869] [ 1370.547794][ T869] dump_stack_lvl+0x151/0x1b7 [ 1370.552309][ T869] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1370.557598][ T869] ? irqentry_exit+0x30/0x40 [ 1370.562026][ T869] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1370.568016][ T869] dump_stack+0x15/0x17 [ 1370.572010][ T869] should_fail+0x3c0/0x510 [ 1370.576259][ T869] should_fail_alloc_page+0x58/0x70 [ 1370.581296][ T869] __alloc_pages+0x1de/0x7c0 [ 1370.585720][ T869] ? __count_vm_events+0x30/0x30 [ 1370.590493][ T869] ? __vmalloc_node_range+0x44f/0x800 [ 1370.595701][ T869] __vmalloc_node_range+0x48f/0x800 [ 1370.600745][ T869] dup_task_struct+0x61f/0xa60 [ 1370.605333][ T869] ? copy_process+0x579/0x3250 [ 1370.609934][ T869] ? _raw_spin_unlock_irq+0x49/0x70 [ 1370.614968][ T869] copy_process+0x579/0x3250 [ 1370.619398][ T869] ? timerqueue_add+0x25c/0x280 [ 1370.624083][ T869] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1370.629032][ T869] ? irqentry_exit+0x30/0x40 [ 1370.633456][ T869] kernel_clone+0x22d/0x990 [ 1370.637794][ T869] ? __kasan_check_write+0x14/0x20 [ 1370.642746][ T869] ? create_io_thread+0x1e0/0x1e0 [ 1370.647601][ T869] ? lapic_next_event+0x5f/0x70 [ 1370.652289][ T869] ? clockevents_program_event+0x240/0x310 [ 1370.657931][ T869] __x64_sys_clone+0x289/0x310 [ 1370.662533][ T869] ? __do_sys_vfork+0x130/0x130 [ 1370.667308][ T869] ? debug_smp_processor_id+0x17/0x20 [ 1370.672513][ T869] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1370.678424][ T869] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1370.684316][ T869] do_syscall_64+0x44/0xd0 [ 1370.688568][ T869] ? irqentry_exit+0x12/0x40 [ 1370.692995][ T869] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1370.698730][ T869] RIP: 0033:0x7f3bd36fc0a9 [ 1370.702980][ T869] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1370.722423][ T869] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1370.730665][ T869] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1370.738475][ T869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1370.746291][ T869] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 09:16:09 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000001600)=0x4) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000001640)='module_load\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000016c0)='\x00') write$cgroup_type(r1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001800)={0x5, 0x80, 0xff, 0x60, 0x6, 0xf7, 0x0, 0xffffffffffffff66, 0x4003, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000001700), 0x3}, 0x1e464, 0x8000000000000001, 0x7, 0xe, 0x5, 0x0, 0x400, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x10, r2, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001740)=0x647e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000b845ef00b5f6d9c6a1a3862f9f9afc7dbe01a6d3c2593692d48aca1624da2a1aff47af30c035715e3f9ab365d2fad840f3084d9fc570b0a8bd727881aa1439c7c397e34d3e46e2efd17f41fe0a285276cc4660455bd18ea51418962c95fc42"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1004, &(0x7f0000002480)=""/4100, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c54}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000001600)=0x4) (async) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000001640)='module_load\x00', r1}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000016c0)='\x00') (async) write$cgroup_type(r1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000001800)={0x5, 0x80, 0xff, 0x60, 0x6, 0xf7, 0x0, 0xffffffffffffff66, 0x4003, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000001700), 0x3}, 0x1e464, 0x8000000000000001, 0x7, 0xe, 0x5, 0x0, 0x400, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x10, r2, 0x2) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001740)=0x647e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000b845ef00b5f6d9c6a1a3862f9f9afc7dbe01a6d3c2593692d48aca1624da2a1aff47af30c035715e3f9ab365d2fad840f3084d9fc570b0a8bd727881aa1439c7c397e34d3e46e2efd17f41fe0a285276cc4660455bd18ea51418962c95fc42"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1004, &(0x7f0000002480)=""/4100, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c54}, 0x80) (async) 09:16:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0}, 0x80) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) r1 = openat$cgroup_ro(r0, &(0x7f0000000900)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f00000005c0)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8992, &(0x7f0000000180)='\x19\xc6\xaf\xb5F\x17(H\xe0\x05\xce<:\xce\xa3T\x94\x97\xa1yi\x82i\xc89\xa3=3[\xda\x0e\xc6\x92\xe2\xf2\xaa\xdck1[\xa8\xc2\xbc\x11\x02G\xa2X9\x94\x1c\xd1 l\xe0F\xcd\xf8\xd3i}\x8b\xd6\xcd\xc5!\"\x7f\"?\x04\xdb~3\b\x1c7gV\x93\xab\xd5f\xb5\xd4\"\x04q\x95\xf2\xa6\xe4&\x88oD\x14\xb4\x00C\x90U2') 09:16:09 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x803}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000b4a14100000000ea04b60000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 09:16:09 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1370.754099][ T869] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1370.761920][ T869] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1370.769729][ T869] 09:16:09 executing program 5: syz_clone(0xc5861000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_clone(0x80001200, &(0x7f0000000080)="d19c8421e3755af0079035dada456ce14e8fc5e54f544e99a0e545b8bc2d7effd5", 0x21, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b413cc7ec03093846e4af4a1c52e77f59b672057aae4a4d7125e0bdfbaa103c852e246cd53aad5b03a7321af135e7d3178a9cca10b6c421c66ed8e07dd52b6cfa845f164fd3f77734849125aabec1519d88f55b18a674ed926b2e903e78ac08f5d030941ed204ec0b4195d476096c86cb1bc48f526f6f2a8186370f92b57880fe61a59ed18857608b0b3d4b3") perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x1f, 0x0, 0xff, 0xff, 0x0, 0x1f, 0x8800, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x9f35, 0x6, 0x3, 0x9, 0x400, 0x800, 0x0, 0x7fffffff, 0x0, 0x4}, r0, 0x2, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x41, 0x53, 0x3, 0x5, 0x0, 0x10000, 0x200, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe8, 0x2, @perf_config_ext={0x2, 0x8}, 0x2, 0x6de1, 0x90, 0x6, 0x0, 0x5, 0x6, 0x0, 0xa28, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 09:16:09 executing program 5: syz_clone(0xc5861000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = syz_clone(0x80001200, &(0x7f0000000080)="d19c8421e3755af0079035dada456ce14e8fc5e54f544e99a0e545b8bc2d7effd5", 0x21, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b413cc7ec03093846e4af4a1c52e77f59b672057aae4a4d7125e0bdfbaa103c852e246cd53aad5b03a7321af135e7d3178a9cca10b6c421c66ed8e07dd52b6cfa845f164fd3f77734849125aabec1519d88f55b18a674ed926b2e903e78ac08f5d030941ed204ec0b4195d476096c86cb1bc48f526f6f2a8186370f92b57880fe61a59ed18857608b0b3d4b3") perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x1f, 0x0, 0xff, 0xff, 0x0, 0x1f, 0x8800, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x9f35, 0x6, 0x3, 0x9, 0x400, 0x800, 0x0, 0x7fffffff, 0x0, 0x4}, r0, 0x2, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x41, 0x53, 0x3, 0x5, 0x0, 0x10000, 0x200, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe8, 0x2, @perf_config_ext={0x2, 0x8}, 0x2, 0x6de1, 0x90, 0x6, 0x0, 0x5, 0x6, 0x0, 0xa28, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) [ 1370.867318][ T883] FAULT_INJECTION: forcing a failure. [ 1370.867318][ T883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1370.893122][ T883] CPU: 0 PID: 883 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1370.903029][ T883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1370.912924][ T883] Call Trace: [ 1370.916043][ T883] [ 1370.918823][ T883] dump_stack_lvl+0x151/0x1b7 [ 1370.923336][ T883] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1370.928629][ T883] ? stack_trace_save+0x1f0/0x1f0 [ 1370.933489][ T883] ? __kernel_text_address+0x9a/0x110 [ 1370.938699][ T883] dump_stack+0x15/0x17 [ 1370.942691][ T883] should_fail+0x3c0/0x510 [ 1370.946945][ T883] should_fail_alloc_page+0x58/0x70 [ 1370.951981][ T883] __alloc_pages+0x1de/0x7c0 [ 1370.956403][ T883] ? __count_vm_events+0x30/0x30 [ 1370.961179][ T883] get_zeroed_page+0x19/0x40 09:16:09 executing program 5: syz_clone(0xc5861000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_clone(0x80001200, &(0x7f0000000080)="d19c8421e3755af0079035dada456ce14e8fc5e54f544e99a0e545b8bc2d7effd5", 0x21, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b413cc7ec03093846e4af4a1c52e77f59b672057aae4a4d7125e0bdfbaa103c852e246cd53aad5b03a7321af135e7d3178a9cca10b6c421c66ed8e07dd52b6cfa845f164fd3f77734849125aabec1519d88f55b18a674ed926b2e903e78ac08f5d030941ed204ec0b4195d476096c86cb1bc48f526f6f2a8186370f92b57880fe61a59ed18857608b0b3d4b3") perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x1f, 0x0, 0xff, 0xff, 0x0, 0x1f, 0x8800, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x9f35, 0x6, 0x3, 0x9, 0x400, 0x800, 0x0, 0x7fffffff, 0x0, 0x4}, r0, 0x2, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x41, 0x53, 0x3, 0x5, 0x0, 0x10000, 0x200, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe8, 0x2, @perf_config_ext={0x2, 0x8}, 0x2, 0x6de1, 0x90, 0x6, 0x0, 0x5, 0x6, 0x0, 0xa28, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) [ 1370.965607][ T883] __pud_alloc+0x8b/0x260 [ 1370.969772][ T883] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1370.975762][ T883] ? do_handle_mm_fault+0x2370/0x2370 [ 1370.980973][ T883] copy_page_range+0xd9e/0x1090 [ 1370.985658][ T883] ? pfn_valid+0x1e0/0x1e0 [ 1370.989912][ T883] dup_mmap+0x99f/0xea0 [ 1370.993901][ T883] ? memcpy_erms+0x6/0x10 [ 1370.998067][ T883] ? __delayed_free_task+0x20/0x20 [ 1371.003016][ T883] ? mm_init+0x807/0x960 [ 1371.007093][ T883] dup_mm+0x91/0x330 [ 1371.010821][ T883] copy_mm+0x108/0x1b0 [ 1371.014729][ T883] copy_process+0x1295/0x3250 [ 1371.019245][ T883] ? timerqueue_add+0x25c/0x280 [ 1371.023931][ T883] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1371.028881][ T883] kernel_clone+0x22d/0x990 [ 1371.033223][ T883] ? irqentry_exit+0x30/0x40 [ 1371.037640][ T883] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1371.043546][ T883] ? create_io_thread+0x1e0/0x1e0 [ 1371.048410][ T883] __x64_sys_clone+0x289/0x310 [ 1371.053009][ T883] ? __do_sys_vfork+0x130/0x130 [ 1371.057694][ T883] ? debug_smp_processor_id+0x17/0x20 [ 1371.062903][ T883] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1371.068892][ T883] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1371.074790][ T883] do_syscall_64+0x44/0xd0 [ 1371.079047][ T883] ? irqentry_exit+0x12/0x40 [ 1371.083470][ T883] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1371.089199][ T883] RIP: 0033:0x7f3bd36fc0a9 [ 1371.093451][ T883] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:16:09 executing program 5: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x2062) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c006c556c4c0f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x0, 0x46e41a9b, 0x3, 0x1, 0x0, 0x20, 0x401, 0x0, 0xe390}, r2, 0x4, r3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x27fff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x7f, 0x7, 0x7f, 0xff, 0x0, 0x80000001, 0x10284, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f00000004c0), 0x4}, 0x0, 0x1, 0x9, 0x0, 0x9, 0x6, 0x81, 0x0, 0x6, 0x0, 0x4}, r5, 0x0, r0, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000580)='\xd7\x00') r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000001c0)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1e, 0x1, 0x3, 0x7, 0x8, 0x1, 0x4}, 0x48) [ 1371.113012][ T883] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1371.121259][ T883] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1371.129154][ T883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1371.136970][ T883] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.144787][ T883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1371.152593][ T883] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1371.160409][ T883] 09:16:13 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone(0xd2102000, &(0x7f00000000c0)="25569912248e5fe0dddf62cdff79915065a1d9671a7b60ca5aae481b52bf39e0d4b2368989b1c4707328b4f35f61f625373ae86c2ccaf211da996da8056dd2aabbc4ffbb8abf8381318b5de44a280b95d000ceae094f467c34a1821766244b2152682c9a0d52df933c09555210627b350a69f19289ca5795ba966f728f1895a63d375c4fd031e2af03df8c4448b9c6aea6ac065932abe7fb4995b38403ac84b2a8a463ed2697a015fad63aeb751ab4c8804f9a61f3458e1a99052ae171b54edc14b05103e7efbb7daf0e63a2861abec7a562ab73bb5df09af2b68f505c3a95a0472358c37800000000000000", 0xec, 0x0, 0x0, &(0x7f0000000000)="7655a0582191292d76955d700689a6caaaf3d99f065cca37b3d60a916786f7c3541cf00714a9053c49755363b5b77924a640a5c3c7e7a8f9c2") 09:16:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:13 executing program 5: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x2062) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c006c556c4c0f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x0, 0x46e41a9b, 0x3, 0x1, 0x0, 0x20, 0x401, 0x0, 0xe390}, r2, 0x4, r3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x27fff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x7f, 0x7, 0x7f, 0xff, 0x0, 0x80000001, 0x10284, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f00000004c0), 0x4}, 0x0, 0x1, 0x9, 0x0, 0x9, 0x6, 0x81, 0x0, 0x6, 0x0, 0x4}, r5, 0x0, r0, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000580)='\xd7\x00') r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000001c0)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1e, 0x1, 0x3, 0x7, 0x8, 0x1, 0x4}, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x2062) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c006c556c4c0f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) gettid() (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x0, 0x46e41a9b, 0x3, 0x1, 0x0, 0x20, 0x401, 0x0, 0xe390}, r2, 0x4, r3, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x27fff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x7f, 0x7, 0x7f, 0xff, 0x0, 0x80000001, 0x10284, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f00000004c0), 0x4}, 0x0, 0x1, 0x9, 0x0, 0x9, 0x6, 0x81, 0x0, 0x6, 0x0, 0x4}, r5, 0x0, r0, 0x5) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000580)='\xd7\x00') (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r8, &(0x7f00000001c0)='memory.numa_stat\x00', 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1e, 0x1, 0x3, 0x7, 0x8, 0x1, 0x4}, 0x48) (async) 09:16:13 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8f}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000500)=@raw=[@generic={0x30, 0x0, 0x0, 0x20}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffc0}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x52}], &(0x7f0000000540)='GPL\x00', 0x653, 0x30, &(0x7f0000000580)=""/48, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x0, 0xcd1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000100)='GPL\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x14, '\x00', r1, 0x13, r0, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x1, 0x1ff, 0x7}, 0x10, r2, r3, 0x0, &(0x7f0000000800)=[r4, r5, 0x1, r6]}, 0x80) [ 1375.292485][ T912] FAULT_INJECTION: forcing a failure. [ 1375.292485][ T912] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.305244][ T912] CPU: 1 PID: 912 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1375.315132][ T912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1375.325027][ T912] Call Trace: [ 1375.328148][ T912] [ 1375.330927][ T912] dump_stack_lvl+0x151/0x1b7 [ 1375.335441][ T912] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1375.340743][ T912] dump_stack+0x15/0x17 [ 1375.344730][ T912] should_fail+0x3c0/0x510 [ 1375.348981][ T912] ? security_prepare_creds+0x50/0x160 [ 1375.354275][ T912] __should_failslab+0x9f/0xe0 [ 1375.358874][ T912] should_failslab+0x9/0x20 [ 1375.363220][ T912] __kmalloc+0x6d/0x350 [ 1375.367206][ T912] security_prepare_creds+0x50/0x160 [ 1375.372323][ T912] prepare_creds+0x471/0x690 [ 1375.376750][ T912] copy_creds+0xde/0x640 [ 1375.380831][ T912] copy_process+0x775/0x3250 [ 1375.385259][ T912] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1375.391255][ T912] ? vfs_write+0x8db/0x1050 [ 1375.395585][ T912] ? _raw_write_unlock_irq+0x10/0x60 [ 1375.400704][ T912] ? vfs_write+0x917/0x1050 [ 1375.405132][ T912] ? preempt_count_add+0xcf/0x1a0 [ 1375.410079][ T912] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1375.415025][ T912] ? vfs_write+0x9af/0x1050 [ 1375.419369][ T912] kernel_clone+0x22d/0x990 [ 1375.423705][ T912] ? file_end_write+0x1b0/0x1b0 [ 1375.428392][ T912] ? __kasan_check_write+0x14/0x20 [ 1375.433339][ T912] ? create_io_thread+0x1e0/0x1e0 [ 1375.438200][ T912] ? __mutex_lock_slowpath+0x10/0x10 [ 1375.443330][ T912] __x64_sys_clone+0x289/0x310 [ 1375.447924][ T912] ? __do_sys_vfork+0x130/0x130 [ 1375.452608][ T912] ? debug_smp_processor_id+0x17/0x20 [ 1375.457819][ T912] do_syscall_64+0x44/0xd0 [ 1375.462073][ T912] ? irqentry_exit+0x12/0x40 [ 1375.466497][ T912] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1375.472223][ T912] RIP: 0033:0x7f3bd36fc0a9 [ 1375.476486][ T912] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1375.495920][ T912] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1375.504175][ T912] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1375.511985][ T912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1375.519786][ T912] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1375.527599][ T912] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1375.535496][ T912] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1375.543314][ T912] 09:16:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:14 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000001600)=0x4) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000001640)='module_load\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000016c0)='\x00') (async) write$cgroup_type(r1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001800)={0x5, 0x80, 0xff, 0x60, 0x6, 0xf7, 0x0, 0xffffffffffffff66, 0x4003, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000001700), 0x3}, 0x1e464, 0x8000000000000001, 0x7, 0xe, 0x5, 0x0, 0x400, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x10, r2, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001740)=0x647e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000b845ef00b5f6d9c6a1a3862f9f9afc7dbe01a6d3c2593692d48aca1624da2a1aff47af30c035715e3f9ab365d2fad840f3084d9fc570b0a8bd727881aa1439c7c397e34d3e46e2efd17f41fe0a285276cc4660455bd18ea51418962c95fc42"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x1004, &(0x7f0000002480)=""/4100, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c54}, 0x80) 09:16:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x6, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x8100, 0xfffffffffffffe72, &(0x7f000000cf3d)=""/183, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x700, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x5, 0x1f, 0x204, r0, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x2}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f0000000380)="df95adb470e5322227ebcc5620feab7fa6d6069f6542f90145a4ca448af68ec6b8cdafe5a0d23a4c3b02c25948a65c2e660902ca833b64b5cc8d6c698d0e688d40438195166018e7b26a768f82920e4b84bb1bab6fb81b4b2ca11e33fb4a22aa247797ea383aa64ffb2984c7f4be6ff8f4a855ef539f40d5afb8687aa915c8c4a23312e428f7260176cd2ebb561ae9521fea24d4abed2d5adff4d26a425d64b1a795976358f456f7fbdc6de3144b7e008746f43b400637"}, 0x20) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff80}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x6, 0x7, 0x1ff}, 0x10}, 0x80) 09:16:14 executing program 5: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/19, 0x13}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x2062) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c006c556c4c0f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r2 = gettid() (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x0, 0x46e41a9b, 0x3, 0x1, 0x0, 0x20, 0x401, 0x0, 0xe390}, r2, 0x4, r3, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x27fff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x7f, 0x7, 0x7f, 0xff, 0x0, 0x80000001, 0x10284, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f00000004c0), 0x4}, 0x0, 0x1, 0x9, 0x0, 0x9, 0x6, 0x81, 0x0, 0x6, 0x0, 0x4}, r5, 0x0, r0, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000580)='\xd7\x00') (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000001c0)='memory.numa_stat\x00', 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1e, 0x1, 0x3, 0x7, 0x8, 0x1, 0x4}, 0x48) 09:16:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x40000000}, 0x10}, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f00000005c0)) [ 1375.853415][ T936] FAULT_INJECTION: forcing a failure. [ 1375.853415][ T936] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.868014][ T936] CPU: 0 PID: 936 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1375.877913][ T936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1375.887802][ T936] Call Trace: [ 1375.890924][ T936] [ 1375.893696][ T936] dump_stack_lvl+0x151/0x1b7 [ 1375.898209][ T936] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1375.903504][ T936] ? copy_fs+0x5c/0x140 [ 1375.907499][ T936] dump_stack+0x15/0x17 [ 1375.911491][ T936] should_fail+0x3c0/0x510 [ 1375.915745][ T936] __should_failslab+0x9f/0xe0 [ 1375.920345][ T936] should_failslab+0x9/0x20 [ 1375.924684][ T936] kmem_cache_alloc+0x4f/0x2f0 [ 1375.929286][ T936] ? copy_fs_struct+0x4e/0x230 [ 1375.933888][ T936] copy_fs_struct+0x4e/0x230 [ 1375.938312][ T936] copy_fs+0x72/0x140 [ 1375.942130][ T936] copy_process+0x1214/0x3250 [ 1375.946648][ T936] ? timerqueue_add+0x25c/0x280 [ 1375.951332][ T936] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1375.956279][ T936] kernel_clone+0x22d/0x990 [ 1375.960791][ T936] ? irqentry_exit+0x30/0x40 [ 1375.965218][ T936] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1375.970859][ T936] ? create_io_thread+0x1e0/0x1e0 [ 1375.975721][ T936] __x64_sys_clone+0x289/0x310 [ 1375.980320][ T936] ? __do_sys_vfork+0x130/0x130 [ 1375.985006][ T936] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1375.990820][ T936] do_syscall_64+0x44/0xd0 [ 1375.995071][ T936] ? irqentry_exit+0x12/0x40 [ 1375.999503][ T936] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1376.005227][ T936] RIP: 0033:0x7f3bd36fc0a9 [ 1376.009482][ T936] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1376.028925][ T936] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1376.037169][ T936] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1376.044979][ T936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 09:16:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1376.052792][ T936] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.060605][ T936] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1376.068416][ T936] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1376.076230][ T936] [ 1376.112667][ T955] FAULT_INJECTION: forcing a failure. [ 1376.112667][ T955] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.125526][ T955] CPU: 1 PID: 955 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1376.135407][ T955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1376.145297][ T955] Call Trace: [ 1376.148421][ T955] [ 1376.151201][ T955] dump_stack_lvl+0x151/0x1b7 [ 1376.155713][ T955] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1376.161007][ T955] dump_stack+0x15/0x17 [ 1376.164999][ T955] should_fail+0x3c0/0x510 [ 1376.169253][ T955] __should_failslab+0x9f/0xe0 [ 1376.173852][ T955] should_failslab+0x9/0x20 [ 1376.178192][ T955] kmem_cache_alloc+0x4f/0x2f0 [ 1376.182790][ T955] ? copy_sighand+0x54/0x250 [ 1376.187218][ T955] ? _raw_spin_unlock+0x4d/0x70 [ 1376.191910][ T955] copy_sighand+0x54/0x250 [ 1376.196160][ T955] copy_process+0x123f/0x3250 [ 1376.200672][ T955] ? proc_fail_nth_write+0x213/0x290 [ 1376.205792][ T955] ? proc_fail_nth_read+0x220/0x220 [ 1376.210913][ T955] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1376.215869][ T955] ? vfs_write+0x9af/0x1050 [ 1376.220204][ T955] kernel_clone+0x22d/0x990 [ 1376.224542][ T955] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1376.230183][ T955] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1376.236170][ T955] ? create_io_thread+0x1e0/0x1e0 [ 1376.241032][ T955] ? memset_erms+0xb/0x10 [ 1376.245198][ T955] __x64_sys_clone+0x289/0x310 [ 1376.249797][ T955] ? __do_sys_vfork+0x130/0x130 [ 1376.254491][ T955] ? debug_smp_processor_id+0x17/0x20 [ 1376.259696][ T955] do_syscall_64+0x44/0xd0 [ 1376.263945][ T955] ? irqentry_exit+0x12/0x40 [ 1376.268372][ T955] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1376.274104][ T955] RIP: 0033:0x7f3bd36fc0a9 [ 1376.278356][ T955] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1376.297801][ T955] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 09:16:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1376.306040][ T955] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1376.313880][ T955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1376.321664][ T955] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.329476][ T955] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1376.337289][ T955] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1376.345104][ T955] [ 1376.378849][ T959] FAULT_INJECTION: forcing a failure. [ 1376.378849][ T959] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.391414][ T959] CPU: 1 PID: 959 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1376.401225][ T959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1376.411117][ T959] Call Trace: [ 1376.414244][ T959] [ 1376.417026][ T959] dump_stack_lvl+0x151/0x1b7 [ 1376.421538][ T959] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1376.426843][ T959] dump_stack+0x15/0x17 [ 1376.430821][ T959] should_fail+0x3c0/0x510 [ 1376.435074][ T959] __should_failslab+0x9f/0xe0 [ 1376.439692][ T959] should_failslab+0x9/0x20 [ 1376.444017][ T959] kmem_cache_alloc+0x4f/0x2f0 [ 1376.448614][ T959] ? vm_area_dup+0x26/0x1d0 [ 1376.452954][ T959] vm_area_dup+0x26/0x1d0 [ 1376.457120][ T959] dup_mmap+0x6b8/0xea0 [ 1376.461284][ T959] ? __delayed_free_task+0x20/0x20 [ 1376.466330][ T959] ? mm_init+0x807/0x960 [ 1376.470408][ T959] dup_mm+0x91/0x330 [ 1376.474132][ T959] copy_mm+0x108/0x1b0 09:16:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x40000000}, 0x10}, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f00000005c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x40000000}, 0x10}, 0x80) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f00000005c0)) (async) [ 1376.478037][ T959] copy_process+0x1295/0x3250 [ 1376.482552][ T959] ? timerqueue_add+0x25c/0x280 [ 1376.487238][ T959] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1376.492185][ T959] kernel_clone+0x22d/0x990 [ 1376.496528][ T959] ? __kasan_check_write+0x14/0x20 [ 1376.501472][ T959] ? create_io_thread+0x1e0/0x1e0 [ 1376.506328][ T959] ? lapic_next_event+0x5f/0x70 [ 1376.511025][ T959] ? clockevents_program_event+0x240/0x310 [ 1376.516747][ T959] __x64_sys_clone+0x289/0x310 [ 1376.521349][ T959] ? __do_sys_vfork+0x130/0x130 [ 1376.526038][ T959] ? debug_smp_processor_id+0x17/0x20 [ 1376.531240][ T959] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1376.537147][ T959] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1376.543046][ T959] do_syscall_64+0x44/0xd0 [ 1376.547295][ T959] ? irqentry_exit+0x12/0x40 [ 1376.551727][ T959] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1376.557452][ T959] RIP: 0033:0x7f3bd36fc0a9 [ 1376.561706][ T959] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1376.581235][ T959] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1376.589480][ T959] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1376.597288][ T959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1376.605097][ T959] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.612913][ T959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1376.620720][ T959] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1376.628537][ T959] 09:16:18 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone(0xd2102000, &(0x7f00000000c0)="25569912248e5fe0dddf62cdff79915065a1d9671a7b60ca5aae481b52bf39e0d4b2368989b1c4707328b4f35f61f625373ae86c2ccaf211da996da8056dd2aabbc4ffbb8abf8381318b5de44a280b95d000ceae094f467c34a1821766244b2152682c9a0d52df933c09555210627b350a69f19289ca5795ba966f728f1895a63d375c4fd031e2af03df8c4448b9c6aea6ac065932abe7fb4995b38403ac84b2a8a463ed2697a015fad63aeb751ab4c8804f9a61f3458e1a99052ae171b54edc14b05103e7efbb7daf0e63a2861abec7a562ab73bb5df09af2b68f505c3a95a0472358c37800000000000000", 0xec, 0x0, 0x0, &(0x7f0000000000)="7655a0582191292d76955d700689a6caaaf3d99f065cca37b3d60a916786f7c3541cf00714a9053c49755363b5b77924a640a5c3c7e7a8f9c2") 09:16:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r0, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x40000000}, 0x10}, 0x80) (async, rerun: 32) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f00000005c0)) 09:16:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8f}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000500)=@raw=[@generic={0x30, 0x0, 0x0, 0x20}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffc0}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x52}], &(0x7f0000000540)='GPL\x00', 0x653, 0x30, &(0x7f0000000580)=""/48, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x0, 0xcd1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000100)='GPL\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x14, '\x00', r1, 0x13, r0, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x1, 0x1ff, 0x7}, 0x10, r2, r3, 0x0, &(0x7f0000000800)=[r4, r5, 0x1, r6]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8f}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000500)=@raw=[@generic={0x30, 0x0, 0x0, 0x20}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffc0}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x52}], &(0x7f0000000540)='GPL\x00', 0x653, 0x30, &(0x7f0000000580)=""/48, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x0, 0xcd1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000100)='GPL\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x14, '\x00', r1, 0x13, r0, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x1, 0x1ff, 0x7}, 0x10, r2, r3, 0x0, &(0x7f0000000800)=[r4, r5, 0x1, r6]}, 0x80) (async) 09:16:18 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x6, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x8100, 0xfffffffffffffe72, &(0x7f000000cf3d)=""/183, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x700, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x5, 0x1f, 0x204, r0, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x2}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f0000000380)="df95adb470e5322227ebcc5620feab7fa6d6069f6542f90145a4ca448af68ec6b8cdafe5a0d23a4c3b02c25948a65c2e660902ca833b64b5cc8d6c698d0e688d40438195166018e7b26a768f82920e4b84bb1bab6fb81b4b2ca11e33fb4a22aa247797ea383aa64ffb2984c7f4be6ff8f4a855ef539f40d5afb8687aa915c8c4a23312e428f7260176cd2ebb561ae9521fea24d4abed2d5adff4d26a425d64b1a795976358f456f7fbdc6de3144b7e008746f43b400637"}, 0x20) (async) close(r1) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff80}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x6, 0x7, 0x1ff}, 0x10}, 0x80) [ 1380.250324][ T990] FAULT_INJECTION: forcing a failure. [ 1380.250324][ T990] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.282868][ T990] CPU: 1 PID: 990 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1380.292778][ T990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1380.302678][ T990] Call Trace: [ 1380.305799][ T990] [ 1380.308576][ T990] dump_stack_lvl+0x151/0x1b7 [ 1380.313090][ T990] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1380.318385][ T990] dump_stack+0x15/0x17 [ 1380.322377][ T990] should_fail+0x3c0/0x510 [ 1380.326633][ T990] __should_failslab+0x9f/0xe0 [ 1380.331228][ T990] should_failslab+0x9/0x20 [ 1380.335567][ T990] kmem_cache_alloc+0x4f/0x2f0 [ 1380.340167][ T990] ? copy_mm+0xdb/0x1b0 [ 1380.344161][ T990] ? dup_mm+0x29/0x330 [ 1380.348067][ T990] dup_mm+0x29/0x330 [ 1380.351798][ T990] copy_mm+0x108/0x1b0 [ 1380.355791][ T990] copy_process+0x1295/0x3250 [ 1380.360303][ T990] ? proc_fail_nth_write+0x213/0x290 [ 1380.365420][ T990] ? proc_fail_nth_read+0x220/0x220 [ 1380.370454][ T990] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1380.375408][ T990] ? vfs_write+0x9af/0x1050 [ 1380.379744][ T990] kernel_clone+0x22d/0x990 [ 1380.384082][ T990] ? file_end_write+0x1b0/0x1b0 [ 1380.388769][ T990] ? __kasan_check_write+0x14/0x20 [ 1380.393950][ T990] ? create_io_thread+0x1e0/0x1e0 [ 1380.398750][ T990] ? __mutex_lock_slowpath+0x10/0x10 [ 1380.403926][ T990] __x64_sys_clone+0x289/0x310 [ 1380.408476][ T990] ? __do_sys_vfork+0x130/0x130 [ 1380.413159][ T990] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1380.418972][ T990] do_syscall_64+0x44/0xd0 [ 1380.423227][ T990] ? irqentry_exit+0x12/0x40 [ 1380.427652][ T990] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1380.433381][ T990] RIP: 0033:0x7f3bd36fc0a9 [ 1380.437635][ T990] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1380.457079][ T990] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1380.465320][ T990] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1380.473141][ T990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1380.480946][ T990] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1380.488754][ T990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1380.496653][ T990] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1380.504469][ T990] 09:16:19 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3fd}, 0x0, 0xbfffffffffffffff, r1, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1805000000000000000000004b24ffec850000007d000000850000002a000000956ec0789e1dd9ff634c54c7fa"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r4, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2abbaa02fe8cc23d}, 0x21, 0x46e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r3, 0x4, r4, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x27fff) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x9, 0x0, 0x0, 0x200, 0x40800, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x2, @perf_config_ext={0x2a, 0x4}, 0xa, 0x9, 0x1, 0x6, 0x9, 0x5, 0x40, 0x0, 0x101, 0x0, 0x4}, r3, 0xf, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r3, 0x10, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r7) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) r8 = syz_clone(0x24000000, &(0x7f0000000400)="766de3b05bb8551434be27ed3176138079bd4be5af39d51101abfa022fea19116cefc0d1f62f58578c296f2b5d74efb28fd084e90f46a7b0e6d55f48b7bd29f26bb1a5b2c31e960a8e4dae355fba89bbc8ca49407e50f4d42632e49d8b5a7b83dd5b9b91f0", 0x65, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="79d867c4ae56f507bb62ead8ce37146f6aa3b883b19e11bed5807630efaec064b0aa3d941f29372b62ec3aeaec0366d40facc55cc15dd17e03bc5ed3d1ad3569aaaa4c73d79daaf3cb1a96e484b76c100763ded5c94dfe5d6b77ac3c24738b8793d376100ef489a8320b14fde653175f2992ffa672e47423447f25a57e420d7e37dd89a27b0685eb22ee0b486e8ef41596c553b12a8a89aa10126cd55189cf3617306c3bf200125a4c23c1da6858") r9 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r9) recvmsg(r9, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x7, 0x5, 0x5, 0x71, 0x0, 0x4000000, 0x1010, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x7, 0x3}, 0x2000, 0x300000, 0x1, 0x4, 0x1, 0x4, 0xf541, 0x0, 0x7, 0x0, 0x3}, r8, 0xd, r9, 0x3) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x81, 0x0, 0x20, 0xcc, 0x0, 0x81, 0x5c00, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140)}, 0x80180, 0x8000, 0xfffffffe, 0x4, 0xffff, 0x81, 0x9, 0x0, 0x8, 0x0, 0x8}, r3, 0xc, r7, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 09:16:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:19 executing program 5: r0 = syz_clone(0xe9000680, &(0x7f0000000000)="be0315a6b20682f30be3eb62988cb68c7cd089e2cb335a9043e4d9ff9a9a44e5223ec38e0e7c10067fb18d79d6692663c80e67d11ed5c0f8c68d0d43e2cc8a494701bcd04814773e839e782cb3129a84780cbb6478acff7c45ac2f2927d29f7fe80e993be16790aaa9c5702b464caad589e6d3839204596e94989ca6cb14632664539893ec5340e00aa7f8bf6ce62eb5553d27c87b4100"/163, 0xa3, 0x0, &(0x7f0000000180), &(0x7f00000000c0)="60ea9ef59c5fe54504e70155dec20abd37b9e04786a081d6595d0029544daad4c00f3a25e99a26356deab58ffc8ad4a8c37f65169b3f2f2b17070f82d50b9e2cda493075f52b30b30215475900d8adc05e0f00ff0d5ba9c22d9d1ad56c80ee08b253edcc575896bb9a4442919e3d3724510160aa471ffdd14a8d92ce8a82a053fbf890") r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x13, &(0x7f0000000200)='!+,{*\'^^@(%@\xff}.]{}\x00'}, 0x30) [ 1380.890157][ T999] FAULT_INJECTION: forcing a failure. [ 1380.890157][ T999] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.902842][ T999] CPU: 1 PID: 999 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1380.912731][ T999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1380.922627][ T999] Call Trace: [ 1380.925749][ T999] [ 1380.928523][ T999] dump_stack_lvl+0x151/0x1b7 [ 1380.933041][ T999] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1380.938338][ T999] dump_stack+0x15/0x17 [ 1380.942327][ T999] should_fail+0x3c0/0x510 [ 1380.946577][ T999] ? mm_init+0x392/0x960 [ 1380.950656][ T999] __should_failslab+0x9f/0xe0 [ 1380.955264][ T999] should_failslab+0x9/0x20 [ 1380.959598][ T999] kmem_cache_alloc_trace+0x4a/0x310 [ 1380.964808][ T999] mm_init+0x392/0x960 [ 1380.968711][ T999] dup_mm+0x7d/0x330 [ 1380.972444][ T999] copy_mm+0x108/0x1b0 [ 1380.976350][ T999] copy_process+0x1295/0x3250 [ 1380.980863][ T999] ? proc_fail_nth_write+0x213/0x290 [ 1380.985985][ T999] ? proc_fail_nth_read+0x220/0x220 [ 1380.991018][ T999] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1380.995968][ T999] kernel_clone+0x22d/0x990 [ 1381.000311][ T999] ? create_io_thread+0x1e0/0x1e0 [ 1381.005175][ T999] __x64_sys_clone+0x289/0x310 [ 1381.009772][ T999] ? __do_sys_vfork+0x130/0x130 [ 1381.014455][ T999] ? debug_smp_processor_id+0x17/0x20 [ 1381.019660][ T999] do_syscall_64+0x44/0xd0 [ 1381.024024][ T999] ? irqentry_exit+0x12/0x40 [ 1381.028446][ T999] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1381.034177][ T999] RIP: 0033:0x7f3bd36fc0a9 [ 1381.038429][ T999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1381.057871][ T999] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1381.066112][ T999] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1381.073927][ T999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 09:16:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:19 executing program 5: r0 = syz_clone(0xe9000680, &(0x7f0000000000)="be0315a6b20682f30be3eb62988cb68c7cd089e2cb335a9043e4d9ff9a9a44e5223ec38e0e7c10067fb18d79d6692663c80e67d11ed5c0f8c68d0d43e2cc8a494701bcd04814773e839e782cb3129a84780cbb6478acff7c45ac2f2927d29f7fe80e993be16790aaa9c5702b464caad589e6d3839204596e94989ca6cb14632664539893ec5340e00aa7f8bf6ce62eb5553d27c87b4100"/163, 0xa3, 0x0, &(0x7f0000000180), &(0x7f00000000c0)="60ea9ef59c5fe54504e70155dec20abd37b9e04786a081d6595d0029544daad4c00f3a25e99a26356deab58ffc8ad4a8c37f65169b3f2f2b17070f82d50b9e2cda493075f52b30b30215475900d8adc05e0f00ff0d5ba9c22d9d1ad56c80ee08b253edcc575896bb9a4442919e3d3724510160aa471ffdd14a8d92ce8a82a053fbf890") r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x13, &(0x7f0000000200)='!+,{*\'^^@(%@\xff}.]{}\x00'}, 0x30) syz_clone(0xe9000680, &(0x7f0000000000)="be0315a6b20682f30be3eb62988cb68c7cd089e2cb335a9043e4d9ff9a9a44e5223ec38e0e7c10067fb18d79d6692663c80e67d11ed5c0f8c68d0d43e2cc8a494701bcd04814773e839e782cb3129a84780cbb6478acff7c45ac2f2927d29f7fe80e993be16790aaa9c5702b464caad589e6d3839204596e94989ca6cb14632664539893ec5340e00aa7f8bf6ce62eb5553d27c87b4100"/163, 0xa3, 0x0, &(0x7f0000000180), &(0x7f00000000c0)="60ea9ef59c5fe54504e70155dec20abd37b9e04786a081d6595d0029544daad4c00f3a25e99a26356deab58ffc8ad4a8c37f65169b3f2f2b17070f82d50b9e2cda493075f52b30b30215475900d8adc05e0f00ff0d5ba9c22d9d1ad56c80ee08b253edcc575896bb9a4442919e3d3724510160aa471ffdd14a8d92ce8a82a053fbf890") (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x13, &(0x7f0000000200)='!+,{*\'^^@(%@\xff}.]{}\x00'}, 0x30) (async) [ 1381.081737][ T999] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1381.094151][ T999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1381.101962][ T999] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1381.109777][ T999] 09:16:19 executing program 5: r0 = syz_clone(0xe9000680, &(0x7f0000000000)="be0315a6b20682f30be3eb62988cb68c7cd089e2cb335a9043e4d9ff9a9a44e5223ec38e0e7c10067fb18d79d6692663c80e67d11ed5c0f8c68d0d43e2cc8a494701bcd04814773e839e782cb3129a84780cbb6478acff7c45ac2f2927d29f7fe80e993be16790aaa9c5702b464caad589e6d3839204596e94989ca6cb14632664539893ec5340e00aa7f8bf6ce62eb5553d27c87b4100"/163, 0xa3, 0x0, &(0x7f0000000180), &(0x7f00000000c0)="60ea9ef59c5fe54504e70155dec20abd37b9e04786a081d6595d0029544daad4c00f3a25e99a26356deab58ffc8ad4a8c37f65169b3f2f2b17070f82d50b9e2cda493075f52b30b30215475900d8adc05e0f00ff0d5ba9c22d9d1ad56c80ee08b253edcc575896bb9a4442919e3d3724510160aa471ffdd14a8d92ce8a82a053fbf890") (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x13, &(0x7f0000000200)='!+,{*\'^^@(%@\xff}.]{}\x00'}, 0x30) [ 1381.167808][ T1010] FAULT_INJECTION: forcing a failure. [ 1381.167808][ T1010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1381.209318][ T1010] CPU: 0 PID: 1010 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1381.219308][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1381.229207][ T1010] Call Trace: [ 1381.232327][ T1010] [ 1381.235104][ T1010] dump_stack_lvl+0x151/0x1b7 [ 1381.239616][ T1010] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1381.245608][ T1010] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1381.250903][ T1010] ? __wake_up_klogd+0xd9/0x110 [ 1381.255591][ T1010] ? dump_stack+0x9/0x17 [ 1381.259668][ T1010] dump_stack+0x15/0x17 [ 1381.263659][ T1010] should_fail+0x3c0/0x510 [ 1381.267912][ T1010] should_fail_alloc_page+0x58/0x70 [ 1381.272952][ T1010] __alloc_pages+0x1de/0x7c0 [ 1381.277392][ T1010] ? __count_vm_events+0x30/0x30 [ 1381.282153][ T1010] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1381.288149][ T1010] __get_free_pages+0xe/0x30 [ 1381.292564][ T1010] pgd_alloc+0x22/0x2c0 [ 1381.296552][ T1010] mm_init+0x5bf/0x960 [ 1381.300461][ T1010] dup_mm+0x7d/0x330 [ 1381.304195][ T1010] copy_mm+0x108/0x1b0 [ 1381.308095][ T1010] copy_process+0x1295/0x3250 [ 1381.312613][ T1010] ? proc_fail_nth_write+0x213/0x290 [ 1381.317732][ T1010] ? proc_fail_nth_read+0x220/0x220 [ 1381.322765][ T1010] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1381.327716][ T1010] ? vfs_write+0x9af/0x1050 [ 1381.332052][ T1010] kernel_clone+0x22d/0x990 [ 1381.336392][ T1010] ? irqentry_exit+0x30/0x40 [ 1381.340816][ T1010] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1381.346459][ T1010] ? create_io_thread+0x1e0/0x1e0 [ 1381.351324][ T1010] __x64_sys_clone+0x289/0x310 [ 1381.355923][ T1010] ? __do_sys_vfork+0x130/0x130 [ 1381.360611][ T1010] ? debug_smp_processor_id+0x17/0x20 [ 1381.365820][ T1010] do_syscall_64+0x44/0xd0 [ 1381.370067][ T1010] ? irqentry_exit+0x12/0x40 [ 1381.374496][ T1010] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1381.380224][ T1010] RIP: 0033:0x7f3bd36fc0a9 [ 1381.384476][ T1010] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:16:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b409001900000000611149000000000085100000020000008500000000000000950000000000000095000000000000002c352dc0c9a65063c768932745b5b20fc85d221c698758f9ac6188fa1c76a1dfa933e6a151eef810b8de667398babe327aea8fba171e123a9e16688005b927fd4e54a17b1a9b3a44215a9f542eebbed854401f70a0597d5e7746ea1e8b8e3bae342d89627eba6432c600"/165], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x700, 0xfffffffffffffffc}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0xffff, 0x4, 0x4, 0xffffffffffffffff, 0xcd6f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0xa}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @generic={0x0, 0xd, 0x4, 0x9, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x0, &(0x7f0000000180), 0x41000, 0x7, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x3, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1, r2, r3, r4, 0xffffffffffffffff]}, 0x80) [ 1381.403921][ T1010] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1381.412165][ T1010] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1381.419979][ T1010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1381.427787][ T1010] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1381.435599][ T1010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1381.443414][ T1010] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1381.451228][ T1010] 09:16:20 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) syz_clone(0xd2102000, &(0x7f00000000c0)="25569912248e5fe0dddf62cdff79915065a1d9671a7b60ca5aae481b52bf39e0d4b2368989b1c4707328b4f35f61f625373ae86c2ccaf211da996da8056dd2aabbc4ffbb8abf8381318b5de44a280b95d000ceae094f467c34a1821766244b2152682c9a0d52df933c09555210627b350a69f19289ca5795ba966f728f1895a63d375c4fd031e2af03df8c4448b9c6aea6ac065932abe7fb4995b38403ac84b2a8a463ed2697a015fad63aeb751ab4c8804f9a61f3458e1a99052ae171b54edc14b05103e7efbb7daf0e63a2861abec7a562ab73bb5df09af2b68f505c3a95a0472358c37800000000000000", 0xec, 0x0, 0x0, &(0x7f0000000000)="7655a0582191292d76955d700689a6caaaf3d99f065cca37b3d60a916786f7c3541cf00714a9053c49755363b5b77924a640a5c3c7e7a8f9c2") 09:16:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b409001900000000611149000000000085100000020000008500000000000000950000000000000095000000000000002c352dc0c9a65063c768932745b5b20fc85d221c698758f9ac6188fa1c76a1dfa933e6a151eef810b8de667398babe327aea8fba171e123a9e16688005b927fd4e54a17b1a9b3a44215a9f542eebbed854401f70a0597d5e7746ea1e8b8e3bae342d89627eba6432c600"/165], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x700, 0xfffffffffffffffc}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0xffff, 0x4, 0x4, 0xffffffffffffffff, 0xcd6f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0xa}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @generic={0x0, 0xd, 0x4, 0x9, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x0, &(0x7f0000000180), 0x41000, 0x7, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x3, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1, r2, r3, r4, 0xffffffffffffffff]}, 0x80) 09:16:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1382.371786][ T1025] FAULT_INJECTION: forcing a failure. [ 1382.371786][ T1025] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.387265][ T1025] CPU: 1 PID: 1025 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1382.407147][ T1025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1382.417037][ T1025] Call Trace: [ 1382.420160][ T1025] [ 1382.422936][ T1025] dump_stack_lvl+0x151/0x1b7 [ 1382.427453][ T1025] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1382.432750][ T1025] dump_stack+0x15/0x17 [ 1382.436736][ T1025] should_fail+0x3c0/0x510 [ 1382.440992][ T1025] __should_failslab+0x9f/0xe0 [ 1382.445593][ T1025] should_failslab+0x9/0x20 [ 1382.449932][ T1025] kmem_cache_alloc+0x4f/0x2f0 [ 1382.454530][ T1025] ? vm_area_dup+0x26/0x1d0 [ 1382.458871][ T1025] ? __kasan_check_read+0x11/0x20 [ 1382.463737][ T1025] vm_area_dup+0x26/0x1d0 [ 1382.467900][ T1025] dup_mmap+0x6b8/0xea0 [ 1382.471895][ T1025] ? __delayed_free_task+0x20/0x20 [ 1382.476839][ T1025] ? mm_init+0x807/0x960 [ 1382.480925][ T1025] dup_mm+0x91/0x330 [ 1382.484648][ T1025] copy_mm+0x108/0x1b0 [ 1382.488557][ T1025] copy_process+0x1295/0x3250 [ 1382.493073][ T1025] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1382.498016][ T1025] ? kernel_clone+0x78/0x990 [ 1382.502442][ T1025] kernel_clone+0x22d/0x990 [ 1382.506791][ T1025] ? __kasan_check_write+0x14/0x20 [ 1382.511732][ T1025] ? create_io_thread+0x1e0/0x1e0 [ 1382.516595][ T1025] ? lapic_next_event+0x5f/0x70 [ 1382.521278][ T1025] ? clockevents_program_event+0x240/0x310 [ 1382.526918][ T1025] __x64_sys_clone+0x289/0x310 [ 1382.531520][ T1025] ? __do_sys_vfork+0x130/0x130 [ 1382.536292][ T1025] ? debug_smp_processor_id+0x17/0x20 [ 1382.541499][ T1025] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1382.547403][ T1025] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1382.553450][ T1025] do_syscall_64+0x44/0xd0 [ 1382.557700][ T1025] ? irqentry_exit+0x12/0x40 [ 1382.562126][ T1025] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1382.567858][ T1025] RIP: 0033:0x7f3bd36fc0a9 [ 1382.572109][ T1025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1382.591548][ T1025] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1382.599804][ T1025] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1382.607609][ T1025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1382.615418][ T1025] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1382.623230][ T1025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1382.631046][ T1025] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1382.638858][ T1025] 09:16:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8f}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x0, 0x0}, 0x8) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000500)=@raw=[@generic={0x30, 0x0, 0x0, 0x20}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffc0}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x52}], &(0x7f0000000540)='GPL\x00', 0x653, 0x30, &(0x7f0000000580)=""/48, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x0, 0xcd1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)={&(0x7f0000000740)='./file0\x00', 0x0, 0x10}, 0x10) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000100)='GPL\x00', 0x3f, 0x0, 0x0, 0x40f00, 0x14, '\x00', r1, 0x13, r0, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x1, 0x1ff, 0x7}, 0x10, r2, r3, 0x0, &(0x7f0000000800)=[r4, r5, 0x1, r6]}, 0x80) 09:16:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b409001900000000611149000000000085100000020000008500000000000000950000000000000095000000000000002c352dc0c9a65063c768932745b5b20fc85d221c698758f9ac6188fa1c76a1dfa933e6a151eef810b8de667398babe327aea8fba171e123a9e16688005b927fd4e54a17b1a9b3a44215a9f542eebbed854401f70a0597d5e7746ea1e8b8e3bae342d89627eba6432c600"/165], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x700, 0xfffffffffffffffc}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0xffff, 0x4, 0x4, 0xffffffffffffffff, 0xcd6f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0xa}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @generic={0x0, 0xd, 0x4, 0x9, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x0, &(0x7f0000000180), 0x41000, 0x7, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x3, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1, r2, r3, r4, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b409001900000000611149000000000085100000020000008500000000000000950000000000000095000000000000002c352dc0c9a65063c768932745b5b20fc85d221c698758f9ac6188fa1c76a1dfa933e6a151eef810b8de667398babe327aea8fba171e123a9e16688005b927fd4e54a17b1a9b3a44215a9f542eebbed854401f70a0597d5e7746ea1e8b8e3bae342d89627eba6432c600"/165], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0xffff, 0x4, 0x4, 0xffffffffffffffff, 0xcd6f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0xa}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @generic={0x0, 0xd, 0x4, 0x9, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x0, &(0x7f0000000180), 0x41000, 0x7, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x3, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r1, r2, r3, r4, 0xffffffffffffffff]}, 0x80) (async) 09:16:23 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3fd}, 0x0, 0xbfffffffffffffff, r1, 0x9) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1805000000000000000000004b24ffec850000007d000000850000002a000000956ec0789e1dd9ff634c54c7fa"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r4, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2abbaa02fe8cc23d}, 0x21, 0x46e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r3, 0x4, r4, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x27fff) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x9, 0x0, 0x0, 0x200, 0x40800, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x2, @perf_config_ext={0x2a, 0x4}, 0xa, 0x9, 0x1, 0x6, 0x9, 0x5, 0x40, 0x0, 0x101, 0x0, 0x4}, r3, 0xf, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r3, 0x10, r6, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r7) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) (async) r8 = syz_clone(0x24000000, &(0x7f0000000400)="766de3b05bb8551434be27ed3176138079bd4be5af39d51101abfa022fea19116cefc0d1f62f58578c296f2b5d74efb28fd084e90f46a7b0e6d55f48b7bd29f26bb1a5b2c31e960a8e4dae355fba89bbc8ca49407e50f4d42632e49d8b5a7b83dd5b9b91f0", 0x65, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="79d867c4ae56f507bb62ead8ce37146f6aa3b883b19e11bed5807630efaec064b0aa3d941f29372b62ec3aeaec0366d40facc55cc15dd17e03bc5ed3d1ad3569aaaa4c73d79daaf3cb1a96e484b76c100763ded5c94dfe5d6b77ac3c24738b8793d376100ef489a8320b14fde653175f2992ffa672e47423447f25a57e420d7e37dd89a27b0685eb22ee0b486e8ef41596c553b12a8a89aa10126cd55189cf3617306c3bf200125a4c23c1da6858") r9 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r9) (async) recvmsg(r9, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x7, 0x5, 0x5, 0x71, 0x0, 0x4000000, 0x1010, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x7, 0x3}, 0x2000, 0x300000, 0x1, 0x4, 0x1, 0x4, 0xf541, 0x0, 0x7, 0x0, 0x3}, r8, 0xd, r9, 0x3) (async) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x81, 0x0, 0x20, 0xcc, 0x0, 0x81, 0x5c00, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140)}, 0x80180, 0x8000, 0xfffffffe, 0x4, 0xffff, 0x81, 0x9, 0x0, 0x8, 0x0, 0x8}, r3, 0xc, r7, 0xa) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 09:16:23 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x6, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x8100, 0xfffffffffffffe72, &(0x7f000000cf3d)=""/183, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x700, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x5, 0x1f, 0x204, r0, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x2}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f0000000380)="df95adb470e5322227ebcc5620feab7fa6d6069f6542f90145a4ca448af68ec6b8cdafe5a0d23a4c3b02c25948a65c2e660902ca833b64b5cc8d6c698d0e688d40438195166018e7b26a768f82920e4b84bb1bab6fb81b4b2ca11e33fb4a22aa247797ea383aa64ffb2984c7f4be6ff8f4a855ef539f40d5afb8687aa915c8c4a23312e428f7260176cd2ebb561ae9521fea24d4abed2d5adff4d26a425d64b1a795976358f456f7fbdc6de3144b7e008746f43b400637"}, 0x20) (async) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff80}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x6, 0x7, 0x1ff}, 0x10}, 0x80) 09:16:23 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/129, 0x5a, 0x81, 0x1}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x8}}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x9, 0x7}, @fwd={0x10}, @datasec={0x10, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x9, 0x2}], "c1"}, @fwd={0xd}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x55, 0x4}, @union={0x3, 0x3, 0x0, 0x5, 0x0, 0x7, [{0x4, 0x4, 0x22}, {0x7, 0x0, 0xea}, {0x2, 0x2, 0x800}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x80000001}}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @ptr={0x1, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0xe741a5df309c61f7]}}, &(0x7f0000000600)=""/226, 0xe7, 0xe2, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a32, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @generic={0x29, 0x2, 0x7, 0x7, 0x7ff}]}, &(0x7f0000000040)='GPL\x00', 0xffffff00, 0xd7, &(0x7f0000000400)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x9, 0x23, 0xf5}, 0x10}, 0x80) 09:16:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:23 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x42818800, &(0x7f0000000480), 0x0, &(0x7f0000000000), &(0x7f0000000200), 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xc0, 0x6, 0x4, 0x0, 0x0, 0x6, 0x1040, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x8000000000000001, 0xb8, 0x4, 0xffffffff00000001, 0xffffffff, 0x40, 0x0, 0x8, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000140)="b9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r5) perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x7, 0xf7, 0xff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x1b, 0x3}, 0x200, 0x10000, 0x0, 0x2, 0x8, 0xfffffff8, 0x7fff, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x17) perf_event_open$cgroup(&(0x7f0000000740)={0x1, 0x80, 0x20, 0x1, 0x7f, 0xca, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000700), 0x11}, 0x440, 0x7fffffff, 0x66, 0x6, 0x0, 0x7ff, 0xffff, 0x0, 0x6, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0x3f, 0x8, 0xdd, 0x0, 0x80000000, 0x40000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0xa, @perf_bp={&(0x7f0000000000), 0xc}, 0x19b22, 0x4b6, 0x9, 0x1, 0x0, 0x401, 0x1, 0x0, 0x4, 0x0, 0x8000000000000001}, r2, 0x1, r0, 0x19) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f0000000740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x66}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) [ 1385.375045][ T1040] FAULT_INJECTION: forcing a failure. [ 1385.375045][ T1040] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.387987][ T1040] CPU: 0 PID: 1040 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1385.397968][ T1040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1385.407859][ T1040] Call Trace: [ 1385.410982][ T1040] [ 1385.413757][ T1040] dump_stack_lvl+0x151/0x1b7 [ 1385.418271][ T1040] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1385.423569][ T1040] ? irqentry_exit+0x30/0x40 [ 1385.428083][ T1040] dump_stack+0x15/0x17 [ 1385.432074][ T1040] should_fail+0x3c0/0x510 [ 1385.436327][ T1040] __should_failslab+0x9f/0xe0 [ 1385.440923][ T1040] should_failslab+0x9/0x20 [ 1385.445262][ T1040] kmem_cache_alloc+0x4f/0x2f0 [ 1385.449866][ T1040] ? anon_vma_fork+0xf7/0x4f0 [ 1385.454379][ T1040] anon_vma_fork+0xf7/0x4f0 [ 1385.458715][ T1040] ? anon_vma_name+0x4c/0x70 [ 1385.463141][ T1040] dup_mmap+0x750/0xea0 [ 1385.467138][ T1040] ? __delayed_free_task+0x20/0x20 [ 1385.472085][ T1040] ? mm_init+0x807/0x960 [ 1385.476161][ T1040] dup_mm+0x91/0x330 [ 1385.479892][ T1040] copy_mm+0x108/0x1b0 [ 1385.483798][ T1040] copy_process+0x1295/0x3250 [ 1385.488316][ T1040] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1385.493257][ T1040] ? update_curr+0x38e/0x5d0 [ 1385.497688][ T1040] kernel_clone+0x22d/0x990 [ 1385.502024][ T1040] ? __update_idle_core+0x2a0/0x2a0 [ 1385.507062][ T1040] ? create_io_thread+0x1e0/0x1e0 [ 1385.511921][ T1040] __x64_sys_clone+0x289/0x310 [ 1385.516814][ T1040] ? __do_sys_vfork+0x130/0x130 [ 1385.521470][ T1040] ? switch_fpu_return+0xe/0x10 [ 1385.526154][ T1040] ? arch_exit_to_user_mode_prepare+0x48/0x70 [ 1385.532067][ T1040] do_syscall_64+0x44/0xd0 [ 1385.536311][ T1040] ? irqentry_exit+0x12/0x40 [ 1385.540736][ T1040] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1385.546467][ T1040] RIP: 0033:0x7f3bd36fc0a9 [ 1385.550721][ T1040] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:16:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1385.570158][ T1040] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1385.578403][ T1040] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1385.586215][ T1040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1385.594029][ T1040] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1385.601839][ T1040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1385.609650][ T1040] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1385.617464][ T1040] 09:16:24 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x42818800, &(0x7f0000000480), 0x0, &(0x7f0000000000), &(0x7f0000000200), 0x0) (async) r3 = getpid() r4 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xc0, 0x6, 0x4, 0x0, 0x0, 0x6, 0x1040, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x8000000000000001, 0xb8, 0x4, 0xffffffff00000001, 0xffffffff, 0x40, 0x0, 0x8, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000140)="b9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) close(r5) perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x7, 0xf7, 0xff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x1b, 0x3}, 0x200, 0x10000, 0x0, 0x2, 0x8, 0xfffffff8, 0x7fff, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x17) perf_event_open$cgroup(&(0x7f0000000740)={0x1, 0x80, 0x20, 0x1, 0x7f, 0xca, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000700), 0x11}, 0x440, 0x7fffffff, 0x66, 0x6, 0x0, 0x7ff, 0xffff, 0x0, 0x6, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0x3f, 0x8, 0xdd, 0x0, 0x80000000, 0x40000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0xa, @perf_bp={&(0x7f0000000000), 0xc}, 0x19b22, 0x4b6, 0x9, 0x1, 0x0, 0x401, 0x1, 0x0, 0x4, 0x0, 0x8000000000000001}, r2, 0x1, r0, 0x19) (async) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xffffffffffffffff) (async) perf_event_open$cgroup(&(0x7f0000000740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x66}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) (async) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) 09:16:24 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x42818800, &(0x7f0000000480), 0x0, &(0x7f0000000000), &(0x7f0000000200), 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xc0, 0x6, 0x4, 0x0, 0x0, 0x6, 0x1040, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x8000000000000001, 0xb8, 0x4, 0xffffffff00000001, 0xffffffff, 0x40, 0x0, 0x8, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000140)="b9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r5) (async, rerun: 64) perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x7, 0xf7, 0xff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x1b, 0x3}, 0x200, 0x10000, 0x0, 0x2, 0x8, 0xfffffff8, 0x7fff, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x17) (async, rerun: 64) perf_event_open$cgroup(&(0x7f0000000740)={0x1, 0x80, 0x20, 0x1, 0x7f, 0xca, 0x0, 0x8, 0x40, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000700), 0x11}, 0x440, 0x7fffffff, 0x66, 0x6, 0x0, 0x7ff, 0xffff, 0x0, 0x6, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0x3f, 0x8, 0xdd, 0x0, 0x80000000, 0x40000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0xa, @perf_bp={&(0x7f0000000000), 0xc}, 0x19b22, 0x4b6, 0x9, 0x1, 0x0, 0x401, 0x1, 0x0, 0x4, 0x0, 0x8000000000000001}, r2, 0x1, r0, 0x19) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f0000000740)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x66}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) (rerun: 32) [ 1385.647359][ T1055] FAULT_INJECTION: forcing a failure. [ 1385.647359][ T1055] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.661140][ T1055] CPU: 1 PID: 1055 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1385.671120][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1385.681097][ T1055] Call Trace: [ 1385.684222][ T1055] [ 1385.687172][ T1055] dump_stack_lvl+0x151/0x1b7 [ 1385.691683][ T1055] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1385.696982][ T1055] dump_stack+0x15/0x17 [ 1385.700973][ T1055] should_fail+0x3c0/0x510 [ 1385.705224][ T1055] __should_failslab+0x9f/0xe0 [ 1385.709824][ T1055] should_failslab+0x9/0x20 [ 1385.714162][ T1055] kmem_cache_alloc+0x4f/0x2f0 [ 1385.718764][ T1055] ? anon_vma_fork+0x1b9/0x4f0 [ 1385.723363][ T1055] anon_vma_fork+0x1b9/0x4f0 [ 1385.727789][ T1055] dup_mmap+0x750/0xea0 [ 1385.731783][ T1055] ? __delayed_free_task+0x20/0x20 [ 1385.736729][ T1055] ? mm_init+0x807/0x960 [ 1385.740808][ T1055] dup_mm+0x91/0x330 [ 1385.744544][ T1055] copy_mm+0x108/0x1b0 [ 1385.748448][ T1055] copy_process+0x1295/0x3250 [ 1385.752963][ T1055] ? proc_fail_nth_write+0x213/0x290 [ 1385.758081][ T1055] ? proc_fail_nth_read+0x220/0x220 [ 1385.763115][ T1055] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1385.768061][ T1055] ? vfs_write+0x9af/0x1050 [ 1385.772404][ T1055] kernel_clone+0x22d/0x990 [ 1385.776744][ T1055] ? file_end_write+0x1b0/0x1b0 [ 1385.781430][ T1055] ? create_io_thread+0x1e0/0x1e0 [ 1385.786288][ T1055] ? __mutex_lock_slowpath+0x10/0x10 [ 1385.791410][ T1055] __x64_sys_clone+0x289/0x310 [ 1385.796010][ T1055] ? __do_sys_vfork+0x130/0x130 [ 1385.800701][ T1055] do_syscall_64+0x44/0xd0 [ 1385.804954][ T1055] ? irqentry_exit+0x12/0x40 [ 1385.809376][ T1055] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1385.815108][ T1055] RIP: 0033:0x7f3bd36fc0a9 [ 1385.819359][ T1055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1385.838798][ T1055] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 09:16:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:24 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000540)="9453b363d2d0a6815e358e7d49ac7e19ab5930ec9b2af4c3a8a0d93116b017860c8608c5614a64aab3f5", &(0x7f0000000780)=""/220, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0xff, 0x0, 0x0, 0x108, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x48) r0 = perf_event_open(0x0, 0x0, 0x2000c, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58d9ef63, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x82a01, 0x0, 0x3a, 0x5, 0x3, 0x1, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x1) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x1, 0x5f, 0xf7, 0x2, 0x0, 0xffc, 0xa8021, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000440), 0xb}, 0x8018, 0x1000, 0xfffffffe, 0x7, 0x6, 0x43c8, 0x5, 0x0, 0x6, 0x0, 0x5}, r1, 0x2, 0xffffffffffffffff, 0xb) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xc131b8d706baf99a}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000140)=""/10) socketpair(0x1, 0x2, 0x1, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c0a1ec946de15a3f4475140000000200000010000000008000080500000005b19b000040040000040100000002c3e5b77d8300000001000000d2760600000009f30000040000008108000006000000000000007f00334000000000000000010000000d1900000000000700000000030000f307000004090000000410000000000000030000000d000000050000000a0000000100000002000000ffffff7f0600010002000000050000000c00000000000000fa8300000f0000000300000001800040000000000100000005000000120000000100000000000000ec35ebd240dc081cd9e657cfcedba9c12fff50108ad4cbe06cfab37f2e0baeb11eafd513d909e7b87966b6b6c3a2bee14368e9d435d1b19b54cb07fdc8d5919b178beb77a49e0d000000000d6519cd62e8780868d4507d88f5d9e60f2c043c53e6a2bb335f4f110b9cb938fdccfaf2f7ae95c7b825d441b661396fba105e9f9fc0da6a8eaf243536354db5ada18675b67861e3671aaaa9c3eb2d541d5b449163790269c561206ad1efa3ff8fc66295ecc3bbb6d424638d6db9605699257b35cafeff2a68b1a851b0d0f475e70000000052318d9ecc51138812815bf3f3306cd96cfdecf254cb91596f8a16b867ead74e4efa94ddcdf18555d2a1ddd133536fa8c6da749b7b28"], &(0x7f0000000640)=""/227, 0xda, 0xe3, 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0x10000, 0x3, 0x3, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x4, 0x0, 0x0, 0xf}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'batadv_slave_1\x00', 0xbe522773f172483f}) socketpair(0x2, 0x802, 0x88, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x45, 0x0, 0x81, 0x3, 0x0, 0xc6a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000004, 0x1, @perf_config_ext={0xffff, 0xfffffffffffffff4}, 0x204, 0x2, 0x3, 0x0, 0x25, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x7ff}, 0x0, 0x0, r6, 0x8) openat$cgroup_ro(r6, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20400, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) openat$cgroup_ro(r6, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000500)=0x100000001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) socketpair(0x1f, 0x21e95b431c07ec8c, 0x2000002, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES32=r3, @ANYRES8]) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1385.847044][ T1055] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1385.854860][ T1055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1385.862670][ T1055] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1385.870478][ T1055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1385.878288][ T1055] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1385.886107][ T1055] [ 1385.911727][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.918713][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.925329][ T1071] FAULT_INJECTION: forcing a failure. [ 1385.925329][ T1071] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.938063][ T1069] device bridge0 entered promiscuous mode [ 1385.938429][ T1071] CPU: 1 PID: 1071 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1385.953496][ T1071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1385.963388][ T1071] Call Trace: [ 1385.966512][ T1071] [ 1385.969289][ T1071] dump_stack_lvl+0x151/0x1b7 [ 1385.973803][ T1071] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1385.979098][ T1071] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 1385.985346][ T1071] dump_stack+0x15/0x17 [ 1385.989339][ T1071] should_fail+0x3c0/0x510 [ 1385.993593][ T1071] __should_failslab+0x9f/0xe0 [ 1385.998193][ T1071] should_failslab+0x9/0x20 [ 1386.002530][ T1071] kmem_cache_alloc+0x4f/0x2f0 [ 1386.007130][ T1071] ? anon_vma_fork+0xf7/0x4f0 [ 1386.011644][ T1071] anon_vma_fork+0xf7/0x4f0 [ 1386.015985][ T1071] ? anon_vma_name+0x4c/0x70 [ 1386.020411][ T1071] dup_mmap+0x750/0xea0 [ 1386.024416][ T1071] ? __delayed_free_task+0x20/0x20 [ 1386.029350][ T1071] ? mm_init+0x807/0x960 [ 1386.033429][ T1071] dup_mm+0x91/0x330 [ 1386.037164][ T1071] copy_mm+0x108/0x1b0 [ 1386.041070][ T1071] copy_process+0x1295/0x3250 [ 1386.045581][ T1071] ? proc_fail_nth_write+0x213/0x290 [ 1386.050703][ T1071] ? proc_fail_nth_read+0x220/0x220 [ 1386.055737][ T1071] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1386.060682][ T1071] ? vfs_write+0x9af/0x1050 [ 1386.065025][ T1071] ? irqentry_exit+0x30/0x40 [ 1386.069450][ T1071] kernel_clone+0x22d/0x990 [ 1386.073797][ T1071] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1386.079431][ T1071] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1386.085422][ T1071] ? create_io_thread+0x1e0/0x1e0 [ 1386.090280][ T1071] ? memset_erms+0xb/0x10 [ 1386.094447][ T1071] __x64_sys_clone+0x289/0x310 [ 1386.099049][ T1071] ? __do_sys_vfork+0x130/0x130 [ 1386.103733][ T1071] ? debug_smp_processor_id+0x17/0x20 [ 1386.108943][ T1071] do_syscall_64+0x44/0xd0 [ 1386.113196][ T1071] ? irqentry_exit+0x12/0x40 [ 1386.117620][ T1071] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1386.123349][ T1071] RIP: 0033:0x7f3bd36fc0a9 [ 1386.127603][ T1071] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1386.147044][ T1071] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1386.155288][ T1071] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1386.163102][ T1071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1386.170910][ T1071] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1386.178723][ T1071] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1386.186542][ T1071] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1386.194349][ T1071] [ 1386.200970][ T1069] device bridge_slave_1 left promiscuous mode [ 1386.207172][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.215168][ T1069] device bridge_slave_0 left promiscuous mode [ 1386.221185][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state 09:16:30 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2cffdf28, 0x8dc8, 0x3, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xc}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x9, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, @generic={0x9, 0x0, 0x8, 0x1c00, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ldst={0x0, 0x2, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f0000000300)='GPL\x00', 0x6, 0xa2, &(0x7f0000000380)=""/162, 0x41100, 0x1e, '\x00', r1, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x0, 0x9d, 0xfffff861}, 0x10, 0x0, r2, 0x0, &(0x7f0000000580)}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 09:16:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:30 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000540)="9453b363d2d0a6815e358e7d49ac7e19ab5930ec9b2af4c3a8a0d93116b017860c8608c5614a64aab3f5", &(0x7f0000000780)=""/220, 0x4}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0xff, 0x0, 0x0, 0x108, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x48) (async) r0 = perf_event_open(0x0, 0x0, 0x2000c, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58d9ef63, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x82a01, 0x0, 0x3a, 0x5, 0x3, 0x1, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x1) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x1, 0x5f, 0xf7, 0x2, 0x0, 0xffc, 0xa8021, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000440), 0xb}, 0x8018, 0x1000, 0xfffffffe, 0x7, 0x6, 0x43c8, 0x5, 0x0, 0x6, 0x0, 0x5}, r1, 0x2, 0xffffffffffffffff, 0xb) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xc131b8d706baf99a}) (async) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000140)=""/10) (async) socketpair(0x1, 0x2, 0x1, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c0a1ec946de15a3f4475140000000200000010000000008000080500000005b19b000040040000040100000002c3e5b77d8300000001000000d2760600000009f30000040000008108000006000000000000007f00334000000000000000010000000d1900000000000700000000030000f307000004090000000410000000000000030000000d000000050000000a0000000100000002000000ffffff7f0600010002000000050000000c00000000000000fa8300000f0000000300000001800040000000000100000005000000120000000100000000000000ec35ebd240dc081cd9e657cfcedba9c12fff50108ad4cbe06cfab37f2e0baeb11eafd513d909e7b87966b6b6c3a2bee14368e9d435d1b19b54cb07fdc8d5919b178beb77a49e0d000000000d6519cd62e8780868d4507d88f5d9e60f2c043c53e6a2bb335f4f110b9cb938fdccfaf2f7ae95c7b825d441b661396fba105e9f9fc0da6a8eaf243536354db5ada18675b67861e3671aaaa9c3eb2d541d5b449163790269c561206ad1efa3ff8fc66295ecc3bbb6d424638d6db9605699257b35cafeff2a68b1a851b0d0f475e70000000052318d9ecc51138812815bf3f3306cd96cfdecf254cb91596f8a16b867ead74e4efa94ddcdf18555d2a1ddd133536fa8c6da749b7b28"], &(0x7f0000000640)=""/227, 0xda, 0xe3, 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0x10000, 0x3, 0x3, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x4, 0x0, 0x0, 0xf}, 0x48) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'batadv_slave_1\x00', 0xbe522773f172483f}) socketpair(0x2, 0x802, 0x88, &(0x7f0000000000)) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x45, 0x0, 0x81, 0x3, 0x0, 0xc6a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000004, 0x1, @perf_config_ext={0xffff, 0xfffffffffffffff4}, 0x204, 0x2, 0x3, 0x0, 0x25, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x7ff}, 0x0, 0x0, r6, 0x8) (async) openat$cgroup_ro(r6, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20400, 0x0) (async) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) (async) openat$cgroup_ro(r6, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000500)=0x100000001) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) (async) socketpair(0x1f, 0x21e95b431c07ec8c, 0x2000002, &(0x7f00000001c0)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES32=r3, @ANYRES8]) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) 09:16:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/129, 0x5a, 0x81, 0x1}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x8}}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x9, 0x7}, @fwd={0x10}, @datasec={0x10, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x9, 0x2}], "c1"}, @fwd={0xd}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x55, 0x4}, @union={0x3, 0x3, 0x0, 0x5, 0x0, 0x7, [{0x4, 0x4, 0x22}, {0x7, 0x0, 0xea}, {0x2, 0x2, 0x800}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x80000001}}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @ptr={0x1, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0xe741a5df309c61f7]}}, &(0x7f0000000600)=""/226, 0xe7, 0xe2, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a32, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @generic={0x29, 0x2, 0x7, 0x7, 0x7ff}]}, &(0x7f0000000040)='GPL\x00', 0xffffff00, 0xd7, &(0x7f0000000400)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x9, 0x23, 0xf5}, 0x10}, 0x80) [ 1391.584240][ T1096] FAULT_INJECTION: forcing a failure. [ 1391.584240][ T1096] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.602361][ T1096] CPU: 1 PID: 1096 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1391.612341][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1391.622234][ T1096] Call Trace: [ 1391.625359][ T1096] [ 1391.628135][ T1096] dump_stack_lvl+0x151/0x1b7 [ 1391.632665][ T1096] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1391.637943][ T1096] dump_stack+0x15/0x17 [ 1391.641939][ T1096] should_fail+0x3c0/0x510 [ 1391.646202][ T1096] __should_failslab+0x9f/0xe0 [ 1391.650795][ T1096] should_failslab+0x9/0x20 [ 1391.655130][ T1096] kmem_cache_alloc+0x4f/0x2f0 [ 1391.659732][ T1096] ? anon_vma_fork+0x1b9/0x4f0 [ 1391.664335][ T1096] anon_vma_fork+0x1b9/0x4f0 [ 1391.668759][ T1096] dup_mmap+0x750/0xea0 [ 1391.672753][ T1096] ? __delayed_free_task+0x20/0x20 [ 1391.677697][ T1096] ? mm_init+0x807/0x960 [ 1391.681775][ T1096] dup_mm+0x91/0x330 [ 1391.685508][ T1096] copy_mm+0x108/0x1b0 [ 1391.689412][ T1096] copy_process+0x1295/0x3250 [ 1391.693946][ T1096] ? timerqueue_add+0x25c/0x280 [ 1391.698709][ T1096] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1391.703670][ T1096] ? do_user_addr_fault+0x477/0x1220 [ 1391.708785][ T1096] kernel_clone+0x22d/0x990 [ 1391.713119][ T1096] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1391.718760][ T1096] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1391.724749][ T1096] ? create_io_thread+0x1e0/0x1e0 [ 1391.729608][ T1096] ? memset_erms+0xb/0x10 [ 1391.733774][ T1096] __x64_sys_clone+0x289/0x310 [ 1391.738378][ T1096] ? __do_sys_vfork+0x130/0x130 [ 1391.743062][ T1096] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1391.748876][ T1096] do_syscall_64+0x44/0xd0 [ 1391.753131][ T1096] ? irqentry_exit+0x12/0x40 [ 1391.757557][ T1096] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1391.763285][ T1096] RIP: 0033:0x7f3bd36fc0a9 [ 1391.767538][ T1096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1391.786981][ T1096] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1391.795282][ T1096] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1391.803035][ T1096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1391.810847][ T1096] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1391.818656][ T1096] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1391.826471][ T1096] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1391.834283][ T1096] 09:16:30 executing program 2: r0 = syz_clone(0x84205000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7, 0x8, 0x3, 0x0, 0x80, 0x2c00, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e30, 0x1, @perf_bp, 0x10, 0x0, 0x7f, 0x7, 0x1, 0xffffff7f, 0x6, 0x0, 0x7, 0x0, 0x5}, r0, 0x10, r1, 0x2) 09:16:30 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000540)="9453b363d2d0a6815e358e7d49ac7e19ab5930ec9b2af4c3a8a0d93116b017860c8608c5614a64aab3f5", &(0x7f0000000780)=""/220, 0x4}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0xff, 0x0, 0x0, 0x108, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x48) (async) r0 = perf_event_open(0x0, 0x0, 0x2000c, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58d9ef63, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x82a01, 0x0, 0x3a, 0x5, 0x3, 0x1, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x1) perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x1, 0x5f, 0xf7, 0x2, 0x0, 0xffc, 0xa8021, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000440), 0xb}, 0x8018, 0x1000, 0xfffffffe, 0x7, 0x6, 0x43c8, 0x5, 0x0, 0x6, 0x0, 0x5}, r1, 0x2, 0xffffffffffffffff, 0xb) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xc131b8d706baf99a}) (async) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000140)=""/10) (async) socketpair(0x1, 0x2, 0x1, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/227, 0xda, 0xe3, 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x3, 0x10000, 0x3, 0x3, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x4, 0x0, 0x0, 0xf}, 0x48) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'batadv_slave_1\x00', 0xbe522773f172483f}) (async) socketpair(0x2, 0x802, 0x88, &(0x7f0000000000)) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x45, 0x0, 0x81, 0x3, 0x0, 0xc6a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000004, 0x1, @perf_config_ext={0xffff, 0xfffffffffffffff4}, 0x204, 0x2, 0x3, 0x0, 0x25, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x7ff}, 0x0, 0x0, r6, 0x8) (async) openat$cgroup_ro(r6, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20400, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) openat$cgroup_ro(r6, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000500)=0x100000001) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) (async) socketpair(0x1f, 0x21e95b431c07ec8c, 0x2000002, &(0x7f00000001c0)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYRES32=r3, @ANYRES8]) (async) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) 09:16:30 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3fd}, 0x0, 0xbfffffffffffffff, r1, 0x9) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1805000000000000000000004b24ffec850000007d000000850000002a000000956ec0789e1dd9ff634c54c7fa"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r4, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2abbaa02fe8cc23d}, 0x21, 0x46e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r3, 0x4, r4, 0x8) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x27fff) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x9, 0x0, 0x0, 0x200, 0x40800, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x2, @perf_config_ext={0x2a, 0x4}, 0xa, 0x9, 0x1, 0x6, 0x9, 0x5, 0x40, 0x0, 0x101, 0x0, 0x4}, r3, 0xf, r4, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r3, 0x10, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r7) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) (async) r8 = syz_clone(0x24000000, &(0x7f0000000400)="766de3b05bb8551434be27ed3176138079bd4be5af39d51101abfa022fea19116cefc0d1f62f58578c296f2b5d74efb28fd084e90f46a7b0e6d55f48b7bd29f26bb1a5b2c31e960a8e4dae355fba89bbc8ca49407e50f4d42632e49d8b5a7b83dd5b9b91f0", 0x65, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="79d867c4ae56f507bb62ead8ce37146f6aa3b883b19e11bed5807630efaec064b0aa3d941f29372b62ec3aeaec0366d40facc55cc15dd17e03bc5ed3d1ad3569aaaa4c73d79daaf3cb1a96e484b76c100763ded5c94dfe5d6b77ac3c24738b8793d376100ef489a8320b14fde653175f2992ffa672e47423447f25a57e420d7e37dd89a27b0685eb22ee0b486e8ef41596c553b12a8a89aa10126cd55189cf3617306c3bf200125a4c23c1da6858") (async) r9 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r9) recvmsg(r9, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x7, 0x5, 0x5, 0x71, 0x0, 0x4000000, 0x1010, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x7, 0x3}, 0x2000, 0x300000, 0x1, 0x4, 0x1, 0x4, 0xf541, 0x0, 0x7, 0x0, 0x3}, r8, 0xd, r9, 0x3) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x81, 0x0, 0x20, 0xcc, 0x0, 0x81, 0x5c00, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140)}, 0x80180, 0x8000, 0xfffffffe, 0x4, 0xffff, 0x81, 0x9, 0x0, 0x8, 0x0, 0x8}, r3, 0xc, r7, 0xa) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 09:16:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, [@generic={0x2, 0x9, 0x6, 0x7, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x4c, &(0x7f0000000080)=""/76, 0x41100, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x4, 0xfffffffb, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, r1]}, 0x80) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) [ 1392.422148][ T1107] FAULT_INJECTION: forcing a failure. [ 1392.422148][ T1107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1392.438884][ T1107] CPU: 0 PID: 1107 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1392.448876][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1392.458770][ T1107] Call Trace: [ 1392.461895][ T1107] [ 1392.464679][ T1107] dump_stack_lvl+0x151/0x1b7 [ 1392.469183][ T1107] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1392.475176][ T1107] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1392.480470][ T1107] ? __wake_up_klogd+0xd9/0x110 [ 1392.485156][ T1107] ? dump_stack+0x9/0x17 [ 1392.489244][ T1107] dump_stack+0x15/0x17 [ 1392.493228][ T1107] should_fail+0x3c0/0x510 [ 1392.497483][ T1107] should_fail_alloc_page+0x58/0x70 [ 1392.502512][ T1107] __alloc_pages+0x1de/0x7c0 [ 1392.506944][ T1107] ? __count_vm_events+0x30/0x30 [ 1392.511720][ T1107] ? dup_mm+0x91/0x330 [ 1392.515621][ T1107] ? copy_mm+0x108/0x1b0 [ 1392.519699][ T1107] ? copy_process+0x1295/0x3250 [ 1392.524385][ T1107] ? kernel_clone+0x22d/0x990 [ 1392.528899][ T1107] ? __x64_sys_clone+0x289/0x310 [ 1392.533681][ T1107] pte_alloc_one+0x73/0x1b0 [ 1392.538014][ T1107] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1392.543048][ T1107] ? __kasan_check_write+0x14/0x20 [ 1392.547991][ T1107] ? __set_page_owner+0x2ee/0x310 [ 1392.552857][ T1107] __pte_alloc+0x86/0x350 [ 1392.557017][ T1107] ? post_alloc_hook+0x1ab/0x1b0 [ 1392.561792][ T1107] ? free_pgtables+0x210/0x210 [ 1392.566391][ T1107] ? get_page_from_freelist+0x38b/0x400 [ 1392.571771][ T1107] copy_pte_range+0x1b1f/0x20b0 [ 1392.576461][ T1107] ? __kunmap_atomic+0x80/0x80 [ 1392.581062][ T1107] ? irqentry_exit+0x30/0x40 [ 1392.585483][ T1107] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1392.591125][ T1107] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1392.597116][ T1107] copy_page_range+0xc1e/0x1090 [ 1392.601805][ T1107] ? pfn_valid+0x1e0/0x1e0 [ 1392.606059][ T1107] dup_mmap+0x99f/0xea0 [ 1392.610049][ T1107] ? __delayed_free_task+0x20/0x20 [ 1392.614994][ T1107] ? mm_init+0x807/0x960 [ 1392.619075][ T1107] dup_mm+0x91/0x330 [ 1392.622805][ T1107] copy_mm+0x108/0x1b0 [ 1392.626713][ T1107] copy_process+0x1295/0x3250 [ 1392.631234][ T1107] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1392.636875][ T1107] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1392.641814][ T1107] ? vfs_write+0x9af/0x1050 [ 1392.646154][ T1107] kernel_clone+0x22d/0x990 [ 1392.650493][ T1107] ? create_io_thread+0x1e0/0x1e0 [ 1392.655355][ T1107] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1392.661341][ T1107] __x64_sys_clone+0x289/0x310 [ 1392.666030][ T1107] ? __do_sys_vfork+0x130/0x130 [ 1392.670718][ T1107] do_syscall_64+0x44/0xd0 [ 1392.674974][ T1107] ? irqentry_exit+0x12/0x40 [ 1392.679410][ T1107] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1392.685127][ T1107] RIP: 0033:0x7f3bd36fc0a9 [ 1392.689377][ T1107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1392.708820][ T1107] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 09:16:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1392.717063][ T1107] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1392.724874][ T1107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1392.732685][ T1107] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.740498][ T1107] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1392.748311][ T1107] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1392.756123][ T1107] [ 1392.808157][ T1127] FAULT_INJECTION: forcing a failure. [ 1392.808157][ T1127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1392.825406][ T1127] CPU: 0 PID: 1127 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1392.835562][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1392.845457][ T1127] Call Trace: [ 1392.848577][ T1127] [ 1392.851355][ T1127] dump_stack_lvl+0x151/0x1b7 [ 1392.855870][ T1127] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1392.861162][ T1127] ? __kasan_check_write+0x14/0x20 [ 1392.866113][ T1127] ? __set_page_owner+0x2ee/0x310 [ 1392.870971][ T1127] dump_stack+0x15/0x17 [ 1392.874964][ T1127] should_fail+0x3c0/0x510 [ 1392.879214][ T1127] should_fail_alloc_page+0x58/0x70 [ 1392.884253][ T1127] __alloc_pages+0x1de/0x7c0 [ 1392.888679][ T1127] ? __count_vm_events+0x30/0x30 [ 1392.893450][ T1127] ? __kasan_check_write+0x14/0x20 [ 1392.898399][ T1127] ? _raw_spin_lock+0xa3/0x1b0 [ 1392.902999][ T1127] __pmd_alloc+0xb1/0x550 [ 1392.907162][ T1127] ? __pud_alloc+0x260/0x260 [ 1392.911588][ T1127] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1392.917581][ T1127] copy_page_range+0xd04/0x1090 [ 1392.922269][ T1127] ? pfn_valid+0x1e0/0x1e0 [ 1392.926527][ T1127] dup_mmap+0x99f/0xea0 [ 1392.930511][ T1127] ? __delayed_free_task+0x20/0x20 [ 1392.935459][ T1127] ? mm_init+0x807/0x960 [ 1392.939541][ T1127] dup_mm+0x91/0x330 [ 1392.943268][ T1127] copy_mm+0x108/0x1b0 [ 1392.947174][ T1127] copy_process+0x1295/0x3250 [ 1392.951693][ T1127] ? timerqueue_add+0x25c/0x280 [ 1392.956376][ T1127] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1392.961327][ T1127] kernel_clone+0x22d/0x990 [ 1392.965663][ T1127] ? __kasan_check_write+0x14/0x20 [ 1392.970612][ T1127] ? create_io_thread+0x1e0/0x1e0 [ 1392.975471][ T1127] ? lapic_next_event+0x5f/0x70 [ 1392.980165][ T1127] ? clockevents_program_event+0x240/0x310 [ 1392.985801][ T1127] __x64_sys_clone+0x289/0x310 [ 1392.990408][ T1127] ? __do_sys_vfork+0x130/0x130 [ 1392.995089][ T1127] do_syscall_64+0x44/0xd0 [ 1392.999338][ T1127] ? irqentry_exit+0x12/0x40 [ 1393.003769][ T1127] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1393.009502][ T1127] RIP: 0033:0x7f3bd36fc0a9 [ 1393.013755][ T1127] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1393.033188][ T1127] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1393.041437][ T1127] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1393.049247][ T1127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1393.057063][ T1127] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1393.064872][ T1127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1393.072681][ T1127] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1393.080497][ T1127] 09:16:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1393.178929][ T1132] FAULT_INJECTION: forcing a failure. [ 1393.178929][ T1132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1393.203119][ T1132] CPU: 0 PID: 1132 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1393.213114][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1393.223009][ T1132] Call Trace: [ 1393.226129][ T1132] [ 1393.228910][ T1132] dump_stack_lvl+0x151/0x1b7 [ 1393.233422][ T1132] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1393.238719][ T1132] dump_stack+0x15/0x17 [ 1393.242710][ T1132] should_fail+0x3c0/0x510 [ 1393.246964][ T1132] should_fail_alloc_page+0x58/0x70 [ 1393.251996][ T1132] __alloc_pages+0x1de/0x7c0 [ 1393.256424][ T1132] ? __count_vm_events+0x30/0x30 [ 1393.261196][ T1132] ? dup_mm+0x91/0x330 [ 1393.265101][ T1132] ? copy_mm+0x108/0x1b0 [ 1393.269183][ T1132] ? copy_process+0x1295/0x3250 [ 1393.273865][ T1132] ? kernel_clone+0x22d/0x990 [ 1393.278382][ T1132] ? __x64_sys_clone+0x289/0x310 [ 1393.283159][ T1132] pte_alloc_one+0x73/0x1b0 [ 1393.287489][ T1132] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1393.292525][ T1132] ? __kasan_check_write+0x14/0x20 [ 1393.297645][ T1132] ? __set_page_owner+0x2ee/0x310 [ 1393.302516][ T1132] __pte_alloc+0x86/0x350 [ 1393.306674][ T1132] ? post_alloc_hook+0x1ab/0x1b0 [ 1393.311451][ T1132] ? free_pgtables+0x210/0x210 [ 1393.316047][ T1132] ? get_page_from_freelist+0x38b/0x400 [ 1393.321436][ T1132] copy_pte_range+0x1b1f/0x20b0 [ 1393.326122][ T1132] ? __kunmap_atomic+0x80/0x80 [ 1393.330803][ T1132] ? irqentry_exit+0x30/0x40 [ 1393.335227][ T1132] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1393.340869][ T1132] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1393.346858][ T1132] copy_page_range+0xc1e/0x1090 [ 1393.351557][ T1132] ? pfn_valid+0x1e0/0x1e0 [ 1393.355800][ T1132] dup_mmap+0x99f/0xea0 [ 1393.359794][ T1132] ? __delayed_free_task+0x20/0x20 [ 1393.364740][ T1132] ? mm_init+0x807/0x960 [ 1393.368817][ T1132] dup_mm+0x91/0x330 [ 1393.372549][ T1132] copy_mm+0x108/0x1b0 [ 1393.376456][ T1132] copy_process+0x1295/0x3250 [ 1393.380969][ T1132] ? proc_fail_nth_write+0x213/0x290 [ 1393.386091][ T1132] ? proc_fail_nth_read+0x220/0x220 [ 1393.391123][ T1132] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1393.396078][ T1132] ? vfs_write+0x9af/0x1050 [ 1393.400410][ T1132] ? access_error+0x233/0x270 [ 1393.404926][ T1132] kernel_clone+0x22d/0x990 [ 1393.409267][ T1132] ? file_end_write+0x1b0/0x1b0 [ 1393.413950][ T1132] ? __kasan_check_write+0x14/0x20 [ 1393.418897][ T1132] ? create_io_thread+0x1e0/0x1e0 [ 1393.423763][ T1132] ? __mutex_lock_slowpath+0x10/0x10 [ 1393.428889][ T1132] __x64_sys_clone+0x289/0x310 [ 1393.433480][ T1132] ? __do_sys_vfork+0x130/0x130 [ 1393.438170][ T1132] ? debug_smp_processor_id+0x17/0x20 [ 1393.443383][ T1132] do_syscall_64+0x44/0xd0 [ 1393.447627][ T1132] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1393.453355][ T1132] RIP: 0033:0x7f3bd36fc0a9 [ 1393.457609][ T1132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:16:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1393.477048][ T1132] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1393.485295][ T1132] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1393.493106][ T1132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1393.500916][ T1132] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1393.508727][ T1132] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1393.516539][ T1132] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1393.524355][ T1132] [ 1393.550194][ T1136] FAULT_INJECTION: forcing a failure. [ 1393.550194][ T1136] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.562799][ T1136] CPU: 1 PID: 1136 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1393.572768][ T1136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1393.582666][ T1136] Call Trace: [ 1393.585787][ T1136] [ 1393.588564][ T1136] dump_stack_lvl+0x151/0x1b7 [ 1393.593077][ T1136] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1393.598371][ T1136] ? do_syscall_64+0x44/0xd0 [ 1393.602799][ T1136] dump_stack+0x15/0x17 [ 1393.606790][ T1136] should_fail+0x3c0/0x510 [ 1393.611042][ T1136] __should_failslab+0x9f/0xe0 [ 1393.615639][ T1136] should_failslab+0x9/0x20 [ 1393.619980][ T1136] kmem_cache_alloc+0x4f/0x2f0 [ 1393.624578][ T1136] ? anon_vma_clone+0xa1/0x4f0 [ 1393.629179][ T1136] anon_vma_clone+0xa1/0x4f0 [ 1393.633619][ T1136] anon_vma_fork+0x91/0x4f0 [ 1393.637957][ T1136] ? anon_vma_name+0x4c/0x70 [ 1393.642374][ T1136] dup_mmap+0x750/0xea0 [ 1393.646367][ T1136] ? __delayed_free_task+0x20/0x20 [ 1393.651351][ T1136] ? mm_init+0x807/0x960 [ 1393.655397][ T1136] dup_mm+0x91/0x330 [ 1393.659123][ T1136] copy_mm+0x108/0x1b0 [ 1393.663028][ T1136] copy_process+0x1295/0x3250 [ 1393.667542][ T1136] ? proc_fail_nth_write+0x213/0x290 [ 1393.672665][ T1136] ? proc_fail_nth_read+0x220/0x220 [ 1393.677698][ T1136] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1393.682645][ T1136] ? vfs_write+0x9af/0x1050 [ 1393.686986][ T1136] kernel_clone+0x22d/0x990 [ 1393.691325][ T1136] ? file_end_write+0x1b0/0x1b0 [ 1393.696010][ T1136] ? __kasan_check_write+0x14/0x20 [ 1393.700959][ T1136] ? create_io_thread+0x1e0/0x1e0 [ 1393.705826][ T1136] ? __mutex_lock_slowpath+0x10/0x10 [ 1393.710942][ T1136] __x64_sys_clone+0x289/0x310 [ 1393.715542][ T1136] ? __do_sys_vfork+0x130/0x130 [ 1393.720229][ T1136] ? debug_smp_processor_id+0x17/0x20 [ 1393.725435][ T1136] do_syscall_64+0x44/0xd0 [ 1393.729687][ T1136] ? irqentry_exit+0x12/0x40 [ 1393.734113][ T1136] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1393.739843][ T1136] RIP: 0033:0x7f3bd36fc0a9 [ 1393.744095][ T1136] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1393.763538][ T1136] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1393.771782][ T1136] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1393.779593][ T1136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1393.787404][ T1136] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1393.795223][ T1136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1393.803029][ T1136] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1393.810840][ T1136] 09:16:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2cffdf28, 0x8dc8, 0x3, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xc}, 0x48) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x9, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, @generic={0x9, 0x0, 0x8, 0x1c00, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ldst={0x0, 0x2, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f0000000300)='GPL\x00', 0x6, 0xa2, &(0x7f0000000380)=""/162, 0x41100, 0x1e, '\x00', r1, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x0, 0x9d, 0xfffff861}, 0x10, 0x0, r2, 0x0, &(0x7f0000000580)}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000632977fbac141416e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 09:16:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, [@generic={0x2, 0x9, 0x6, 0x7, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x4c, &(0x7f0000000080)=""/76, 0x41100, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x4, 0xfffffffb, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, r1]}, 0x80) (async) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x74809480, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) close(r2) (rerun: 64) 09:16:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:35 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x18, 0x7f, 0x5, 0x9, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', r0, r1, 0x4, 0x2, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func, @cb_func, @map_idx_val, @initr0, @func]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xb5, &(0x7f0000000100)=""/181, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1396.841536][ T1149] FAULT_INJECTION: forcing a failure. [ 1396.841536][ T1149] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.856126][ T1149] CPU: 0 PID: 1149 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1396.866109][ T1149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1396.876004][ T1149] Call Trace: [ 1396.879152][ T1149] [ 1396.881905][ T1149] dump_stack_lvl+0x151/0x1b7 [ 1396.886419][ T1149] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1396.891719][ T1149] dump_stack+0x15/0x17 [ 1396.895705][ T1149] should_fail+0x3c0/0x510 [ 1396.899960][ T1149] __should_failslab+0x9f/0xe0 [ 1396.904562][ T1149] should_failslab+0x9/0x20 [ 1396.908899][ T1149] kmem_cache_alloc+0x4f/0x2f0 [ 1396.913500][ T1149] ? vm_area_dup+0x26/0x1d0 [ 1396.917838][ T1149] ? dup_mmap+0x64a/0xea0 [ 1396.922005][ T1149] vm_area_dup+0x26/0x1d0 [ 1396.926175][ T1149] dup_mmap+0x6b8/0xea0 [ 1396.930173][ T1149] ? __delayed_free_task+0x20/0x20 [ 1396.935110][ T1149] ? mm_init+0x807/0x960 [ 1396.939190][ T1149] dup_mm+0x91/0x330 [ 1396.942921][ T1149] copy_mm+0x108/0x1b0 [ 1396.946826][ T1149] copy_process+0x1295/0x3250 [ 1396.951336][ T1149] ? timerqueue_add+0x25c/0x280 [ 1396.956022][ T1149] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1396.960970][ T1149] kernel_clone+0x22d/0x990 [ 1396.965309][ T1149] ? __kasan_check_write+0x14/0x20 [ 1396.970257][ T1149] ? create_io_thread+0x1e0/0x1e0 [ 1396.975115][ T1149] ? lapic_next_event+0x5f/0x70 [ 1396.979803][ T1149] ? clockevents_program_event+0x240/0x310 [ 1396.985447][ T1149] __x64_sys_clone+0x289/0x310 [ 1396.990045][ T1149] ? __do_sys_vfork+0x130/0x130 [ 1396.994734][ T1149] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1397.000555][ T1149] do_syscall_64+0x44/0xd0 [ 1397.004800][ T1149] ? irqentry_exit+0x12/0x40 [ 1397.009228][ T1149] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1397.014956][ T1149] RIP: 0033:0x7f3bd36fc0a9 [ 1397.019209][ T1149] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1397.038651][ T1149] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1397.046897][ T1149] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1397.054706][ T1149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1397.062605][ T1149] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.070418][ T1149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1397.078227][ T1149] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1397.086047][ T1149] 09:16:35 executing program 2: r0 = syz_clone(0x84205000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7, 0x8, 0x3, 0x0, 0x80, 0x2c00, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e30, 0x1, @perf_bp, 0x10, 0x0, 0x7f, 0x7, 0x1, 0xffffff7f, 0x6, 0x0, 0x7, 0x0, 0x5}, r0, 0x10, r1, 0x2) 09:16:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/129, 0x5a, 0x81, 0x1}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x8}}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x2c, 0x0, 0x9, 0x7}, @fwd={0x10}, @datasec={0x10, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x9, 0x2}], "c1"}, @fwd={0xd}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x55, 0x4}, @union={0x3, 0x3, 0x0, 0x5, 0x0, 0x7, [{0x4, 0x4, 0x22}, {0x7, 0x0, 0xea}, {0x2, 0x2, 0x800}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x80000001}}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @ptr={0x1, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0xe741a5df309c61f7]}}, &(0x7f0000000600)=""/226, 0xe7, 0xe2, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a32, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @generic={0x29, 0x2, 0x7, 0x7, 0x7ff}]}, &(0x7f0000000040)='GPL\x00', 0xffffff00, 0xd7, &(0x7f0000000400)=""/215, 0x41000, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x9, 0x23, 0xf5}, 0x10}, 0x80) 09:16:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1397.456034][ T1190] FAULT_INJECTION: forcing a failure. [ 1397.456034][ T1190] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.474177][ T1190] CPU: 1 PID: 1190 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1397.484159][ T1190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1397.494057][ T1190] Call Trace: [ 1397.497179][ T1190] [ 1397.499956][ T1190] dump_stack_lvl+0x151/0x1b7 [ 1397.504472][ T1190] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1397.509766][ T1190] dump_stack+0x15/0x17 [ 1397.513762][ T1190] should_fail+0x3c0/0x510 [ 1397.518014][ T1190] __should_failslab+0x9f/0xe0 [ 1397.522608][ T1190] should_failslab+0x9/0x20 [ 1397.526954][ T1190] kmem_cache_alloc+0x4f/0x2f0 [ 1397.531548][ T1190] ? vm_area_dup+0x26/0x1d0 [ 1397.535889][ T1190] vm_area_dup+0x26/0x1d0 [ 1397.540055][ T1190] dup_mmap+0x6b8/0xea0 [ 1397.544055][ T1190] ? __delayed_free_task+0x20/0x20 [ 1397.548994][ T1190] ? mm_init+0x807/0x960 [ 1397.553074][ T1190] dup_mm+0x91/0x330 [ 1397.556807][ T1190] copy_mm+0x108/0x1b0 [ 1397.560715][ T1190] copy_process+0x1295/0x3250 [ 1397.565227][ T1190] ? proc_fail_nth_write+0x213/0x290 [ 1397.570351][ T1190] ? proc_fail_nth_read+0x220/0x220 [ 1397.575382][ T1190] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1397.580335][ T1190] ? vfs_write+0x9af/0x1050 [ 1397.584678][ T1190] kernel_clone+0x22d/0x990 [ 1397.589007][ T1190] ? file_end_write+0x1b0/0x1b0 [ 1397.593702][ T1190] ? __kasan_check_write+0x14/0x20 [ 1397.598642][ T1190] ? create_io_thread+0x1e0/0x1e0 [ 1397.603503][ T1190] ? __mutex_lock_slowpath+0x10/0x10 [ 1397.608622][ T1190] __x64_sys_clone+0x289/0x310 [ 1397.613221][ T1190] ? __do_sys_vfork+0x130/0x130 [ 1397.617911][ T1190] ? fpregs_restore_userregs+0x1f0/0x3a0 [ 1397.623377][ T1190] ? switch_fpu_return+0xe/0x10 [ 1397.628060][ T1190] do_syscall_64+0x44/0xd0 [ 1397.632315][ T1190] ? irqentry_exit+0x12/0x40 [ 1397.636739][ T1190] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1397.642465][ T1190] RIP: 0033:0x7f3bd36fc0a9 [ 1397.646726][ T1190] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1397.666162][ T1190] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1397.674407][ T1190] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1397.682219][ T1190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1397.690029][ T1190] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.697842][ T1190] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:16:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, [@generic={0x2, 0x9, 0x6, 0x7, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x4c, &(0x7f0000000080)=""/76, 0x41100, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x4, 0xfffffffb, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, r1]}, 0x80) (async) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x74809480, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) 09:16:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1397.705652][ T1190] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1397.713470][ T1190] [ 1397.749229][ T1205] FAULT_INJECTION: forcing a failure. [ 1397.749229][ T1205] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.762187][ T1205] CPU: 0 PID: 1205 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1397.772156][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1397.782053][ T1205] Call Trace: [ 1397.785174][ T1205] [ 1397.787954][ T1205] dump_stack_lvl+0x151/0x1b7 [ 1397.792465][ T1205] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1397.797761][ T1205] ? kasan_check_range+0x80/0x2e0 [ 1397.802621][ T1205] dump_stack+0x15/0x17 [ 1397.806612][ T1205] should_fail+0x3c0/0x510 [ 1397.810867][ T1205] __should_failslab+0x9f/0xe0 [ 1397.815466][ T1205] should_failslab+0x9/0x20 [ 1397.819807][ T1205] kmem_cache_alloc+0x4f/0x2f0 [ 1397.824408][ T1205] ? anon_vma_clone+0xa1/0x4f0 [ 1397.829005][ T1205] anon_vma_clone+0xa1/0x4f0 [ 1397.833437][ T1205] anon_vma_fork+0x91/0x4f0 [ 1397.837773][ T1205] ? anon_vma_name+0x4c/0x70 [ 1397.842200][ T1205] dup_mmap+0x750/0xea0 [ 1397.846194][ T1205] ? __delayed_free_task+0x20/0x20 [ 1397.851138][ T1205] ? mm_init+0x807/0x960 [ 1397.855221][ T1205] dup_mm+0x91/0x330 [ 1397.858952][ T1205] copy_mm+0x108/0x1b0 [ 1397.862858][ T1205] copy_process+0x1295/0x3250 [ 1397.867369][ T1205] ? proc_fail_nth_write+0x213/0x290 [ 1397.872501][ T1205] ? proc_fail_nth_read+0x220/0x220 [ 1397.877528][ T1205] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1397.882480][ T1205] ? vfs_write+0x9af/0x1050 [ 1397.886815][ T1205] ? vmacache_update+0xb7/0x120 [ 1397.891500][ T1205] kernel_clone+0x22d/0x990 [ 1397.895840][ T1205] ? file_end_write+0x1b0/0x1b0 [ 1397.900527][ T1205] ? __kasan_check_write+0x14/0x20 [ 1397.905471][ T1205] ? create_io_thread+0x1e0/0x1e0 [ 1397.910333][ T1205] ? __mutex_lock_slowpath+0x10/0x10 [ 1397.915457][ T1205] __x64_sys_clone+0x289/0x310 [ 1397.920055][ T1205] ? __do_sys_vfork+0x130/0x130 [ 1397.924740][ T1205] ? debug_smp_processor_id+0x17/0x20 [ 1397.929947][ T1205] do_syscall_64+0x44/0xd0 [ 1397.934200][ T1205] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1397.939927][ T1205] RIP: 0033:0x7f3bd36fc0a9 [ 1397.944184][ T1205] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1397.963629][ T1205] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1397.971870][ T1205] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1397.979681][ T1205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1397.987491][ T1205] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 09:16:36 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004c6000001000000b7050000340000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273a16b72e060fc5a3b061773f04a6082ba8cedf8510e63fb112cf695606000000ef3b217e2f6ae30b"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x2}, 0x10}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000180)="a663f3cb268509f6eb4f5724029c5b02", 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0xd4328480, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1397.995304][ T1205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1398.003115][ T1205] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1398.010931][ T1205] 09:16:36 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004c6000001000000b7050000340000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273a16b72e060fc5a3b061773f04a6082ba8cedf8510e63fb112cf695606000000ef3b217e2f6ae30b"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x2}, 0x10}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000180)="a663f3cb268509f6eb4f5724029c5b02", 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) syz_clone(0xd4328480, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 09:16:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1398.109494][ T1220] FAULT_INJECTION: forcing a failure. [ 1398.109494][ T1220] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.122183][ T1220] CPU: 1 PID: 1220 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1398.132155][ T1220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1398.142051][ T1220] Call Trace: [ 1398.145173][ T1220] [ 1398.147949][ T1220] dump_stack_lvl+0x151/0x1b7 [ 1398.152463][ T1220] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1398.157761][ T1220] ? preempt_schedule_irq+0xef/0x140 [ 1398.162883][ T1220] dump_stack+0x15/0x17 [ 1398.166871][ T1220] should_fail+0x3c0/0x510 [ 1398.171127][ T1220] __should_failslab+0x9f/0xe0 [ 1398.175725][ T1220] should_failslab+0x9/0x20 [ 1398.180066][ T1220] kmem_cache_alloc+0x4f/0x2f0 [ 1398.184754][ T1220] ? anon_vma_clone+0xa1/0x4f0 [ 1398.189353][ T1220] anon_vma_clone+0xa1/0x4f0 [ 1398.193781][ T1220] anon_vma_fork+0x91/0x4f0 [ 1398.198116][ T1220] ? anon_vma_name+0x4c/0x70 [ 1398.202544][ T1220] dup_mmap+0x750/0xea0 [ 1398.206544][ T1220] ? __delayed_free_task+0x20/0x20 [ 1398.211484][ T1220] ? mm_init+0x807/0x960 [ 1398.215562][ T1220] dup_mm+0x91/0x330 [ 1398.219296][ T1220] copy_mm+0x108/0x1b0 [ 1398.223199][ T1220] copy_process+0x1295/0x3250 [ 1398.227717][ T1220] ? proc_fail_nth_write+0x213/0x290 [ 1398.232836][ T1220] ? proc_fail_nth_read+0x220/0x220 [ 1398.237871][ T1220] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1398.242820][ T1220] ? vfs_write+0x9af/0x1050 [ 1398.247159][ T1220] ? irqentry_exit+0x30/0x40 [ 1398.251583][ T1220] kernel_clone+0x22d/0x990 [ 1398.255921][ T1220] ? irqentry_exit+0x30/0x40 [ 1398.260348][ T1220] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1398.265995][ T1220] ? create_io_thread+0x1e0/0x1e0 [ 1398.270853][ T1220] __x64_sys_clone+0x289/0x310 [ 1398.275449][ T1220] ? __do_sys_vfork+0x130/0x130 [ 1398.280141][ T1220] ? debug_smp_processor_id+0x17/0x20 [ 1398.285347][ T1220] do_syscall_64+0x44/0xd0 [ 1398.289599][ T1220] ? irqentry_exit+0x12/0x40 [ 1398.294026][ T1220] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1398.299778][ T1220] RIP: 0033:0x7f3bd36fc0a9 [ 1398.304006][ T1220] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1398.323448][ T1220] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1398.331694][ T1220] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1398.339505][ T1220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1398.347319][ T1220] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1398.355128][ T1220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1398.362940][ T1220] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1398.370763][ T1220] 09:16:40 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2cffdf28, 0x8dc8, 0x3, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xc}, 0x48) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x9, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, @generic={0x9, 0x0, 0x8, 0x1c00, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ldst={0x0, 0x2, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f0000000300)='GPL\x00', 0x6, 0xa2, &(0x7f0000000380)=""/162, 0x41100, 0x1e, '\x00', r1, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x0, 0x9d, 0xfffff861}, 0x10, 0x0, r2, 0x0, &(0x7f0000000580)}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 09:16:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:40 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004c6000001000000b7050000340000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273a16b72e060fc5a3b061773f04a6082ba8cedf8510e63fb112cf695606000000ef3b217e2f6ae30b"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x2}, 0x10}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000180)="a663f3cb268509f6eb4f5724029c5b02", 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0xd4328480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000000000bfa30000000000004503000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004c6000001000000b7050000340000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273a16b72e060fc5a3b061773f04a6082ba8cedf8510e63fb112cf695606000000ef3b217e2f6ae30b"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x2}, 0x10}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x10, 0x0, &(0x7f0000000180)="a663f3cb268509f6eb4f5724029c5b02", 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) syz_clone(0xd4328480, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 09:16:40 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x18, 0x7f, 0x5, 0x9, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', r0, r1, 0x4, 0x2, 0x3}, 0x48) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func, @cb_func, @map_idx_val, @initr0, @func]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xb5, &(0x7f0000000100)=""/181, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 32) [ 1401.928971][ T1299] FAULT_INJECTION: forcing a failure. [ 1401.928971][ T1299] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.941812][ T1299] CPU: 1 PID: 1299 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1401.951786][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1401.961679][ T1299] Call Trace: [ 1401.964802][ T1299] [ 1401.967581][ T1299] dump_stack_lvl+0x151/0x1b7 [ 1401.972091][ T1299] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1401.977389][ T1299] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1401.983033][ T1299] dump_stack+0x15/0x17 [ 1401.987021][ T1299] should_fail+0x3c0/0x510 [ 1401.991273][ T1299] __should_failslab+0x9f/0xe0 [ 1401.995874][ T1299] should_failslab+0x9/0x20 [ 1402.000212][ T1299] kmem_cache_alloc+0x4f/0x2f0 [ 1402.004814][ T1299] ? anon_vma_clone+0xa1/0x4f0 [ 1402.009415][ T1299] anon_vma_clone+0xa1/0x4f0 [ 1402.013843][ T1299] anon_vma_fork+0x91/0x4f0 [ 1402.018184][ T1299] ? anon_vma_name+0x4c/0x70 [ 1402.022606][ T1299] dup_mmap+0x750/0xea0 [ 1402.026601][ T1299] ? __delayed_free_task+0x20/0x20 [ 1402.031546][ T1299] ? mm_init+0x807/0x960 [ 1402.035629][ T1299] dup_mm+0x91/0x330 [ 1402.039358][ T1299] copy_mm+0x108/0x1b0 [ 1402.043265][ T1299] copy_process+0x1295/0x3250 [ 1402.047781][ T1299] ? timerqueue_add+0x25c/0x280 [ 1402.052465][ T1299] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1402.057499][ T1299] kernel_clone+0x22d/0x990 [ 1402.061837][ T1299] ? __kasan_check_write+0x14/0x20 [ 1402.066788][ T1299] ? create_io_thread+0x1e0/0x1e0 [ 1402.071647][ T1299] ? lapic_next_event+0x5f/0x70 [ 1402.076331][ T1299] ? clockevents_program_event+0x240/0x310 [ 1402.081975][ T1299] __x64_sys_clone+0x289/0x310 [ 1402.086575][ T1299] ? __do_sys_vfork+0x130/0x130 [ 1402.091264][ T1299] ? debug_smp_processor_id+0x17/0x20 [ 1402.096467][ T1299] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1402.102371][ T1299] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1402.108274][ T1299] do_syscall_64+0x44/0xd0 [ 1402.112523][ T1299] ? irqentry_exit+0x12/0x40 [ 1402.116961][ T1299] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1402.122681][ T1299] RIP: 0033:0x7f3bd36fc0a9 [ 1402.126935][ T1299] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1402.146375][ T1299] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1402.154621][ T1299] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1402.162435][ T1299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1402.170242][ T1299] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1402.178054][ T1299] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1402.185865][ T1299] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1402.193679][ T1299] 09:16:40 executing program 2: r0 = syz_clone(0x84205000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 64) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) (async, rerun: 64) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x7, 0x8, 0x3, 0x0, 0x80, 0x2c00, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e30, 0x1, @perf_bp, 0x10, 0x0, 0x7f, 0x7, 0x1, 0xffffff7f, 0x6, 0x0, 0x7, 0x0, 0x5}, r0, 0x10, r1, 0x2) (rerun: 32) 09:16:40 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000062d8ea927e31d1b3dc90acdc5d9200000000000000003b8100850000006d000000b0de36b4be00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9600010000801b10fb54e30353dd32ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0f7020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093adc57196b40def3858ef56963ec39f5147fa4108328392d322ab5df090000006bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac442e0000000000ee16c729300d238ab70000000000002b5a8b05fcc154ed5290a8cd8470e776d6b8064fd6cbde49b29a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b558fbf17956f3547497aba814382ff67b345b677a9d6525187543208000000000000003c229ff92be0d8de95ae7b68136b0046d535dd39c0f35469869e9b342b953f91447e6b9e522d62b1e6ffdaab304f134306330600a44095254b45a6c1312a13696c7202df5f764713504facc5320da3acde0f2f1042aeb480c53980268058ca7125ccbdc1f55738e4bdbd3eb09db2bfdabdab3cab78d6980590f10b02e1a5a7b9f162506e1ef0d5b4628e88a69c40a0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 09:16:40 executing program 5: gettid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/177, 0xb1}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f00000003c0)=""/143, 0x8f}], 0x6}, 0x40000002) unlink(&(0x7f0000000540)='./file0\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/28, 0x1c}, {&(0x7f0000000740)=""/135, 0x87}], 0x3, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x100000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@cgroup=r3, r4, 0x21, 0x0, r1}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r4, 0x0, 0x25, 0x1c}, 0x10) syz_clone(0x2030400, &(0x7f0000000a00), 0x0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="95ca096f21ad43") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000bc0), 0x12) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001040)={&(0x7f0000000dc0)='./file0\x00', r5}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001100)=""/127, 0x7f}, {&(0x7f0000001180)}, {0x0}, {&(0x7f00000012c0)=""/221, 0xdd}], 0x4, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2100) perf_event_open(&(0x7f0000001580)={0x0, 0x80, 0x0, 0x2, 0x0, 0x7, 0x0, 0xffffffffffff44b6, 0x53090, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x400, 0xffffffffffffffff, 0x8000, 0x9, 0x1, 0x4, 0x1, 0x0, 0x4, 0x0, 0x5}, r6, 0x7, r2, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001700)={&(0x7f00000016c0)='./file0\x00'}, 0x10) r7 = syz_clone(0x50000000, &(0x7f0000001780)="d527cf63a318abddeb44eac15d1f08a9c87d9d8bb96dd0b0941329ef3b1bdde687aa9592cf8809741bd438f076fe952c16a4fec227be739c4ba4cec00a786338bec45855668b06345b75c9d9b18c1749c86d9c025e37a7ef29094c624a7e92", 0x5f, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="33f58992ffbaeda9bab81705") r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)={&(0x7f00000018c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x6, 0x9, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ab}, [@call={0x85, 0x0, 0x0, 0x67}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x0, 0xa, 0x5, 0x8, 0x1}]}, &(0x7f00000019c0)='syzkaller\x00', 0x8c, 0x9, &(0x7f0000001a00)=""/9, 0x0, 0x11, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000000a00)='ns/net\x00') 09:16:40 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:40 executing program 5: gettid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/177, 0xb1}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f00000003c0)=""/143, 0x8f}], 0x6}, 0x40000002) (async) unlink(&(0x7f0000000540)='./file0\x00') (async, rerun: 32) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/28, 0x1c}, {&(0x7f0000000740)=""/135, 0x87}], 0x3, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x100000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@cgroup=r3, r4, 0x21, 0x0, r1}, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r4, 0x0, 0x25, 0x1c}, 0x10) syz_clone(0x2030400, &(0x7f0000000a00), 0x0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="95ca096f21ad43") (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000bc0), 0x12) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001040)={&(0x7f0000000dc0)='./file0\x00', r5}, 0x10) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001100)=""/127, 0x7f}, {&(0x7f0000001180)}, {0x0}, {&(0x7f00000012c0)=""/221, 0xdd}], 0x4, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2100) perf_event_open(&(0x7f0000001580)={0x0, 0x80, 0x0, 0x2, 0x0, 0x7, 0x0, 0xffffffffffff44b6, 0x53090, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x400, 0xffffffffffffffff, 0x8000, 0x9, 0x1, 0x4, 0x1, 0x0, 0x4, 0x0, 0x5}, r6, 0x7, r2, 0x1) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001700)={&(0x7f00000016c0)='./file0\x00'}, 0x10) (async, rerun: 64) r7 = syz_clone(0x50000000, &(0x7f0000001780)="d527cf63a318abddeb44eac15d1f08a9c87d9d8bb96dd0b0941329ef3b1bdde687aa9592cf8809741bd438f076fe952c16a4fec227be739c4ba4cec00a786338bec45855668b06345b75c9d9b18c1749c86d9c025e37a7ef29094c624a7e92", 0x5f, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="33f58992ffbaeda9bab81705") (rerun: 64) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)={&(0x7f00000018c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x6, 0x9, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ab}, [@call={0x85, 0x0, 0x0, 0x67}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x0, 0xa, 0x5, 0x8, 0x1}]}, &(0x7f00000019c0)='syzkaller\x00', 0x8c, 0x9, &(0x7f0000001a00)=""/9, 0x0, 0x11, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000000a00)='ns/net\x00') [ 1402.531819][ T1315] FAULT_INJECTION: forcing a failure. [ 1402.531819][ T1315] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.551044][ T1315] CPU: 0 PID: 1315 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1402.561033][ T1315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1402.570928][ T1315] Call Trace: [ 1402.574050][ T1315] [ 1402.576829][ T1315] dump_stack_lvl+0x151/0x1b7 [ 1402.581342][ T1315] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1402.586636][ T1315] dump_stack+0x15/0x17 [ 1402.590628][ T1315] should_fail+0x3c0/0x510 [ 1402.594881][ T1315] __should_failslab+0x9f/0xe0 [ 1402.599485][ T1315] should_failslab+0x9/0x20 [ 1402.603825][ T1315] kmem_cache_alloc+0x4f/0x2f0 [ 1402.608419][ T1315] ? anon_vma_fork+0xf7/0x4f0 [ 1402.612934][ T1315] anon_vma_fork+0xf7/0x4f0 [ 1402.617274][ T1315] ? dup_mmap+0x73b/0xea0 [ 1402.621442][ T1315] dup_mmap+0x750/0xea0 [ 1402.625434][ T1315] ? __delayed_free_task+0x20/0x20 [ 1402.630383][ T1315] ? mm_init+0x807/0x960 [ 1402.634458][ T1315] dup_mm+0x91/0x330 [ 1402.638193][ T1315] copy_mm+0x108/0x1b0 [ 1402.642097][ T1315] copy_process+0x1295/0x3250 [ 1402.646616][ T1315] ? timerqueue_add+0x25c/0x280 [ 1402.651297][ T1315] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1402.656245][ T1315] kernel_clone+0x22d/0x990 [ 1402.660585][ T1315] ? __kasan_check_write+0x14/0x20 [ 1402.665534][ T1315] ? create_io_thread+0x1e0/0x1e0 [ 1402.670392][ T1315] ? lapic_next_event+0x5f/0x70 [ 1402.675185][ T1315] ? clockevents_program_event+0x240/0x310 [ 1402.680820][ T1315] __x64_sys_clone+0x289/0x310 [ 1402.685418][ T1315] ? __do_sys_vfork+0x130/0x130 [ 1402.690108][ T1315] do_syscall_64+0x44/0xd0 [ 1402.694357][ T1315] ? irqentry_exit+0x12/0x40 [ 1402.698794][ T1315] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1402.704512][ T1315] RIP: 0033:0x7f3bd36fc0a9 [ 1402.708767][ T1315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:16:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1402.728641][ T1315] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1402.736884][ T1315] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1402.744701][ T1315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1402.752505][ T1315] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1402.760317][ T1315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1402.768127][ T1315] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1402.775943][ T1315] [ 1402.808232][ T1327] FAULT_INJECTION: forcing a failure. [ 1402.808232][ T1327] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.823436][ T1327] CPU: 1 PID: 1327 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1402.833418][ T1327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1402.843314][ T1327] Call Trace: [ 1402.846437][ T1327] [ 1402.849216][ T1327] dump_stack_lvl+0x151/0x1b7 [ 1402.853730][ T1327] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1402.859371][ T1327] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1402.864662][ T1327] ? __wake_up_klogd+0xd9/0x110 [ 1402.869350][ T1327] dump_stack+0x15/0x17 [ 1402.873344][ T1327] should_fail+0x3c0/0x510 [ 1402.877597][ T1327] __should_failslab+0x9f/0xe0 [ 1402.882196][ T1327] should_failslab+0x9/0x20 [ 1402.886535][ T1327] kmem_cache_alloc+0x4f/0x2f0 [ 1402.891134][ T1327] ? anon_vma_fork+0x1b9/0x4f0 [ 1402.895737][ T1327] anon_vma_fork+0x1b9/0x4f0 [ 1402.900162][ T1327] dup_mmap+0x750/0xea0 [ 1402.904154][ T1327] ? __delayed_free_task+0x20/0x20 [ 1402.909101][ T1327] ? mm_init+0x807/0x960 [ 1402.913181][ T1327] dup_mm+0x91/0x330 [ 1402.916916][ T1327] copy_mm+0x108/0x1b0 [ 1402.920818][ T1327] copy_process+0x1295/0x3250 [ 1402.925335][ T1327] ? timerqueue_add+0x25c/0x280 [ 1402.930019][ T1327] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1402.934968][ T1327] kernel_clone+0x22d/0x990 [ 1402.939306][ T1327] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1402.944949][ T1327] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1402.950938][ T1327] ? create_io_thread+0x1e0/0x1e0 [ 1402.955800][ T1327] ? memset_erms+0xb/0x10 [ 1402.959963][ T1327] __x64_sys_clone+0x289/0x310 [ 1402.964565][ T1327] ? __do_sys_vfork+0x130/0x130 [ 1402.969252][ T1327] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1402.975067][ T1327] do_syscall_64+0x44/0xd0 [ 1402.979318][ T1327] ? irqentry_exit+0x12/0x40 [ 1402.983743][ T1327] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1402.989474][ T1327] RIP: 0033:0x7f3bd36fc0a9 [ 1402.993726][ T1327] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1403.013169][ T1327] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1403.021412][ T1327] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1403.029225][ T1327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1403.037036][ T1327] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.044848][ T1327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:16:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1403.052658][ T1327] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1403.060476][ T1327] [ 1403.095805][ T1332] FAULT_INJECTION: forcing a failure. [ 1403.095805][ T1332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1403.109130][ T1332] CPU: 0 PID: 1332 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1403.119099][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1403.128995][ T1332] Call Trace: [ 1403.132117][ T1332] [ 1403.134897][ T1332] dump_stack_lvl+0x151/0x1b7 [ 1403.139418][ T1332] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1403.144717][ T1332] ? __kasan_check_write+0x14/0x20 [ 1403.149652][ T1332] ? __set_page_owner+0x2ee/0x310 [ 1403.154513][ T1332] dump_stack+0x15/0x17 [ 1403.158504][ T1332] should_fail+0x3c0/0x510 [ 1403.162758][ T1332] should_fail_alloc_page+0x58/0x70 [ 1403.167791][ T1332] __alloc_pages+0x1de/0x7c0 [ 1403.172219][ T1332] ? __count_vm_events+0x30/0x30 [ 1403.176990][ T1332] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1403.182643][ T1332] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1403.188623][ T1332] __pmd_alloc+0xb1/0x550 [ 1403.192786][ T1332] ? _raw_spin_unlock+0x21/0x70 [ 1403.197476][ T1332] ? __pud_alloc+0x260/0x260 [ 1403.201902][ T1332] ? __pud_alloc+0x218/0x260 [ 1403.206327][ T1332] ? do_handle_mm_fault+0x2370/0x2370 [ 1403.211537][ T1332] copy_page_range+0xd04/0x1090 [ 1403.216228][ T1332] ? pfn_valid+0x1e0/0x1e0 [ 1403.220482][ T1332] dup_mmap+0x99f/0xea0 [ 1403.224469][ T1332] ? __delayed_free_task+0x20/0x20 [ 1403.229417][ T1332] ? mm_init+0x807/0x960 [ 1403.233494][ T1332] dup_mm+0x91/0x330 [ 1403.237225][ T1332] copy_mm+0x108/0x1b0 [ 1403.241130][ T1332] copy_process+0x1295/0x3250 [ 1403.245649][ T1332] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1403.250595][ T1332] kernel_clone+0x22d/0x990 [ 1403.254933][ T1332] ? __kasan_check_write+0x14/0x20 [ 1403.259880][ T1332] ? create_io_thread+0x1e0/0x1e0 [ 1403.264739][ T1332] ? lapic_next_event+0x5f/0x70 [ 1403.269425][ T1332] ? clockevents_program_event+0x240/0x310 [ 1403.275069][ T1332] __x64_sys_clone+0x289/0x310 [ 1403.279676][ T1332] ? __do_sys_vfork+0x130/0x130 [ 1403.284356][ T1332] ? debug_smp_processor_id+0x17/0x20 [ 1403.289563][ T1332] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1403.295465][ T1332] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1403.301366][ T1332] do_syscall_64+0x44/0xd0 [ 1403.305618][ T1332] ? irqentry_exit+0x12/0x40 [ 1403.310047][ T1332] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1403.315775][ T1332] RIP: 0033:0x7f3bd36fc0a9 [ 1403.320031][ T1332] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:16:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1403.339471][ T1332] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1403.347715][ T1332] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1403.355529][ T1332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1403.363336][ T1332] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.371150][ T1332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1403.378968][ T1332] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1403.386774][ T1332] [ 1403.408791][ T1352] FAULT_INJECTION: forcing a failure. [ 1403.408791][ T1352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1403.422578][ T1352] CPU: 1 PID: 1352 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1403.432560][ T1352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1403.442446][ T1352] Call Trace: [ 1403.445570][ T1352] [ 1403.448349][ T1352] dump_stack_lvl+0x151/0x1b7 [ 1403.452860][ T1352] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1403.458155][ T1352] ? __kasan_check_write+0x14/0x20 [ 1403.463102][ T1352] ? __set_page_owner+0x2ee/0x310 [ 1403.467965][ T1352] dump_stack+0x15/0x17 [ 1403.471955][ T1352] should_fail+0x3c0/0x510 [ 1403.476209][ T1352] should_fail_alloc_page+0x58/0x70 [ 1403.481244][ T1352] __alloc_pages+0x1de/0x7c0 [ 1403.485669][ T1352] ? __count_vm_events+0x30/0x30 [ 1403.490444][ T1352] ? __count_vm_events+0x30/0x30 [ 1403.495216][ T1352] ? __kasan_check_write+0x14/0x20 [ 1403.500164][ T1352] ? _raw_spin_lock+0xa3/0x1b0 [ 1403.504763][ T1352] __pmd_alloc+0xb1/0x550 [ 1403.508933][ T1352] ? kmem_cache_alloc+0x189/0x2f0 [ 1403.513789][ T1352] ? anon_vma_fork+0x1b9/0x4f0 [ 1403.518391][ T1352] ? __pud_alloc+0x260/0x260 [ 1403.522815][ T1352] ? __pud_alloc+0x218/0x260 [ 1403.527243][ T1352] ? do_handle_mm_fault+0x2370/0x2370 [ 1403.532452][ T1352] copy_page_range+0xd04/0x1090 [ 1403.537149][ T1352] ? pfn_valid+0x1e0/0x1e0 [ 1403.541392][ T1352] dup_mmap+0x99f/0xea0 [ 1403.545384][ T1352] ? __delayed_free_task+0x20/0x20 [ 1403.550332][ T1352] ? mm_init+0x807/0x960 [ 1403.554410][ T1352] dup_mm+0x91/0x330 [ 1403.558141][ T1352] copy_mm+0x108/0x1b0 [ 1403.562047][ T1352] copy_process+0x1295/0x3250 [ 1403.566561][ T1352] ? proc_fail_nth_write+0x213/0x290 [ 1403.571683][ T1352] ? proc_fail_nth_read+0x220/0x220 [ 1403.576717][ T1352] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1403.581670][ T1352] ? vfs_write+0x9af/0x1050 [ 1403.586004][ T1352] kernel_clone+0x22d/0x990 [ 1403.590344][ T1352] ? file_end_write+0x1b0/0x1b0 [ 1403.595029][ T1352] ? __kasan_check_write+0x14/0x20 [ 1403.599975][ T1352] ? create_io_thread+0x1e0/0x1e0 [ 1403.604839][ T1352] ? __mutex_lock_slowpath+0x10/0x10 [ 1403.609961][ T1352] __x64_sys_clone+0x289/0x310 [ 1403.614561][ T1352] ? __do_sys_vfork+0x130/0x130 [ 1403.619246][ T1352] ? debug_smp_processor_id+0x17/0x20 [ 1403.624453][ T1352] do_syscall_64+0x44/0xd0 [ 1403.628704][ T1352] ? irqentry_exit+0x12/0x40 [ 1403.633132][ T1352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1403.638862][ T1352] RIP: 0033:0x7f3bd36fc0a9 [ 1403.643116][ T1352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1403.662728][ T1352] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1403.670973][ T1352] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1403.678786][ T1352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1403.686599][ T1352] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.694409][ T1352] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1403.702222][ T1352] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1403.710035][ T1352] 09:16:45 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = perf_event_open(&(0x7f00000015c0)={0x0, 0x80, 0x0, 0x0, 0xce, 0x40, 0x0, 0x5, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x2, @perf_config_ext={0x1}, 0x0, 0xfffffffffffffffa, 0xfff, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x80, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040)}, 0x4020, 0x37afbde8, 0x6b5bf913, 0x6, 0x7fffffffffffffff, 0x6, 0x6, 0x0, 0x401, 0x0, 0x3}, 0x0, 0xa, r1, 0x1) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x4, 0x0, 0xc4, 0x8, 0x0, 0x40, 0x22818, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x4238}, 0x4c0, 0x8, 0x400, 0x7, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xa325}, 0x0, 0x7, 0xffffffffffffffff, 0x1) syz_clone(0x40001400, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7f, 0x3, 0x4, 0x1, 0x0, 0xa4, 0x48224, 0xf, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x96c08, 0x100000000, 0x1f, 0x8, 0x0, 0x1, 0x7, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x2) 09:16:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:45 executing program 5: gettid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/177, 0xb1}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f00000003c0)=""/143, 0x8f}], 0x6}, 0x40000002) unlink(&(0x7f0000000540)='./file0\x00') (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/28, 0x1c}, {&(0x7f0000000740)=""/135, 0x87}], 0x3, &(0x7f0000000840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x100000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@cgroup=r3, r4, 0x21, 0x0, r1}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r4, 0x0, 0x25, 0x1c}, 0x10) (async) syz_clone(0x2030400, &(0x7f0000000a00), 0x0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="95ca096f21ad43") (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000bc0), 0x12) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001040)={&(0x7f0000000dc0)='./file0\x00', r5}, 0x10) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001100)=""/127, 0x7f}, {&(0x7f0000001180)}, {0x0}, {&(0x7f00000012c0)=""/221, 0xdd}], 0x4, &(0x7f0000001500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2100) perf_event_open(&(0x7f0000001580)={0x0, 0x80, 0x0, 0x2, 0x0, 0x7, 0x0, 0xffffffffffff44b6, 0x53090, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x400, 0xffffffffffffffff, 0x8000, 0x9, 0x1, 0x4, 0x1, 0x0, 0x4, 0x0, 0x5}, r6, 0x7, r2, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001700)={&(0x7f00000016c0)='./file0\x00'}, 0x10) (async) r7 = syz_clone(0x50000000, &(0x7f0000001780)="d527cf63a318abddeb44eac15d1f08a9c87d9d8bb96dd0b0941329ef3b1bdde687aa9592cf8809741bd438f076fe952c16a4fec227be739c4ba4cec00a786338bec45855668b06345b75c9d9b18c1749c86d9c025e37a7ef29094c624a7e92", 0x5f, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="33f58992ffbaeda9bab81705") r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)={&(0x7f00000018c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x6, 0x9, &(0x7f0000001940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ab}, [@call={0x85, 0x0, 0x0, 0x67}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x0, 0xa, 0x5, 0x8, 0x1}]}, &(0x7f00000019c0)='syzkaller\x00', 0x8c, 0x9, &(0x7f0000001a00)=""/9, 0x0, 0x11, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000000a00)='ns/net\x00') 09:16:45 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x18, 0x7f, 0x5, 0x9, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', r0, r1, 0x4, 0x2, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func, @cb_func, @map_idx_val, @initr0, @func]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xb5, &(0x7f0000000100)=""/181, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1406.991181][ T1361] FAULT_INJECTION: forcing a failure. [ 1406.991181][ T1361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1407.005348][ T1361] CPU: 0 PID: 1361 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1407.015324][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1407.025217][ T1361] Call Trace: [ 1407.028339][ T1361] [ 1407.031116][ T1361] dump_stack_lvl+0x151/0x1b7 [ 1407.035629][ T1361] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1407.040929][ T1361] dump_stack+0x15/0x17 [ 1407.044915][ T1361] should_fail+0x3c0/0x510 [ 1407.049171][ T1361] should_fail_alloc_page+0x58/0x70 [ 1407.054201][ T1361] __alloc_pages+0x1de/0x7c0 [ 1407.058630][ T1361] ? __count_vm_events+0x30/0x30 [ 1407.063408][ T1361] ? dup_mm+0x91/0x330 [ 1407.067399][ T1361] ? copy_mm+0x108/0x1b0 [ 1407.071647][ T1361] ? copy_process+0x1295/0x3250 [ 1407.076420][ T1361] ? kernel_clone+0x22d/0x990 [ 1407.080934][ T1361] ? __x64_sys_clone+0x289/0x310 [ 1407.085715][ T1361] pte_alloc_one+0x73/0x1b0 [ 1407.090048][ T1361] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1407.095090][ T1361] ? __kasan_check_write+0x14/0x20 [ 1407.100031][ T1361] __pte_alloc+0x86/0x350 [ 1407.104198][ T1361] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1407.109843][ T1361] ? free_pgtables+0x210/0x210 [ 1407.114439][ T1361] copy_pte_range+0x1b1f/0x20b0 [ 1407.119135][ T1361] ? __kunmap_atomic+0x80/0x80 [ 1407.123728][ T1361] ? __pud_alloc+0x260/0x260 [ 1407.128153][ T1361] ? __pud_alloc+0x218/0x260 [ 1407.132577][ T1361] ? do_handle_mm_fault+0x2370/0x2370 [ 1407.137795][ T1361] copy_page_range+0xc1e/0x1090 [ 1407.142476][ T1361] ? pfn_valid+0x1e0/0x1e0 [ 1407.146733][ T1361] dup_mmap+0x99f/0xea0 [ 1407.150720][ T1361] ? __delayed_free_task+0x20/0x20 [ 1407.155668][ T1361] dup_mm+0x91/0x330 [ 1407.159419][ T1361] copy_mm+0x108/0x1b0 [ 1407.163304][ T1361] copy_process+0x1295/0x3250 [ 1407.167818][ T1361] ? timerqueue_add+0x25c/0x280 [ 1407.172503][ T1361] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1407.177454][ T1361] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1407.183095][ T1361] kernel_clone+0x22d/0x990 [ 1407.187464][ T1361] ? irqentry_exit+0x30/0x40 [ 1407.191869][ T1361] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1407.197620][ T1361] ? create_io_thread+0x1e0/0x1e0 [ 1407.202479][ T1361] __x64_sys_clone+0x289/0x310 [ 1407.207082][ T1361] ? __do_sys_vfork+0x130/0x130 [ 1407.211767][ T1361] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1407.217588][ T1361] do_syscall_64+0x44/0xd0 [ 1407.221835][ T1361] ? irqentry_exit+0x12/0x40 [ 1407.226266][ T1361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1407.231988][ T1361] RIP: 0033:0x7f3bd36fc0a9 [ 1407.236241][ T1361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1407.255683][ T1361] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1407.263926][ T1361] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1407.271742][ T1361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1407.279556][ T1361] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1407.287362][ T1361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1407.295174][ T1361] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1407.302994][ T1361] 09:16:45 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 09:16:45 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000062d8ea927e31d1b3dc90acdc5d9200000000000000003b8100850000006d000000b0de36b4be00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000062d8ea927e31d1b3dc90acdc5d9200000000000000003b8100850000006d000000b0de36b4be00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) 09:16:45 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x8, 0x0, 0x0, 0x9, 0x3ff}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000001c0)=""/187, 0x28, 0xbb, 0x1}, 0x20) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x8, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, @generic={0x2, 0x2, 0x6, 0x2, 0x4}, @generic={0x2, 0xe, 0x8, 0x4, 0x7}], &(0x7f0000000040)='GPL\x00', 0x9, 0xfe, &(0x7f0000000080)=""/254, 0x40f00, 0x8, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000002c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x6, 0x8000}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0x3, 0x9, 0x20, 0x5, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x9, &(0x7f0000000400)=@raw=[@generic={0x1a, 0x6, 0xd, 0x2, 0x101}, @ldst={0x3, 0x3, 0x1, 0x3, 0xa, 0xfffffffffffffff4, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x9, 0x8, 0x8, 0x100, 0xb7}], &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x2, r0, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xe, 0x401, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000900)=[r4, r5, 0x1, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r2, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0)={r4}, 0x8) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)={&(0x7f0000000e00)='./file0\x00', 0x0, 0x10}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000e80)={r5}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x7, 0x80000000, 0x80000000, 0x880, r4, 0x1f, '\x00', 0x0, r0, 0x4, 0x3, 0x3, 0xb}, 0x48) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x7, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10001}, @alu={0x7, 0x1, 0x15, 0x4, 0x9, 0xffffffffffffffe0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xc, 0x6, 0x9, 0x4, 0x8}]}, &(0x7f0000000d00)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0xa, '\x00', r8, 0x0, r0, 0x8, &(0x7f0000000d40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x10, 0x3f2956d2, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[r9, 0xffffffffffffffff, r10, r11, r5, r12, r5, r4]}, 0x80) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x9, &(0x7f0000001040)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x6}, @ldst={0x0, 0x2, 0x2, 0x4, 0x4, 0xffffffffffffffe0, 0x1}, @exit, @jmp={0x5, 0x1, 0x3, 0x6, 0x3, 0x40, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0x1, 0x0, 0x1, 0x18, 0x8}], &(0x7f00000010c0)='GPL\x00', 0x0, 0xbc, &(0x7f0000001100)=""/188, 0x40f00, 0x7, '\x00', r8, 0x0, r9, 0x8, &(0x7f00000011c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x1, 0xf}, 0x10}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r13, 0x0, 0x9e, 0x68, &(0x7f00000012c0)="88c19d572fd6e7a9287344573b3760763245cd179243bc214b41166d8fa08457c834b7c63c52c7addf95990921a0247a4a399365959628fe3b41a9aca755d779e565b74cae4920a0f0560a8af4e30129e3d6af5f1afee13bc32c1930ef570b06ba54d35bcfe85deb426203a35078b03613c63715c0ae2983c08936a055a08e65f8c89ba6abf9715cfa28fd5398652c8cddbc100aea66ffb5fdca0a74f007", &(0x7f0000001380)=""/104, 0x5, 0x0, 0x85, 0x6d, &(0x7f0000001400)="271a7872b428f5de9b6a8603ccd29b67505cf7d089397037640531d32edc5574a8a303553d3455d97023f36beaf9cb73d42a000c63eec17ddb14db757b89586fd5778df0328c30bb86948dfa22814995fe47700bcb6a7391557c48e31bbaca86dd382c75c20b857790615e01a0b5fbb90824e7330d187a48d8c94a81a4c8058b59d6f0225b", &(0x7f00000014c0)="a7552161794d8462bd6837b94b9b81b03d84690a6af8f559adabac0e664f043ea8493114f0ea6d3d0addd4777488d8157b83197ab69474f67047a1ea72eaa0cc35ef79af5ab5496c007360962461345d9d677b8b83b6b1494ab11b05c910f717d6c3f7a7dcc72ce1a1de24806a", 0x1, 0x40}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r12, 0x58, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001800)={0x6, 0x0}, 0x8) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1b, 0x3, &(0x7f00000015c0)=@raw=[@exit, @generic={0x0, 0xd, 0x3, 0xdcfc, 0x9}, @generic={0x40, 0x7, 0x6, 0x5, 0x7}], &(0x7f0000001600)='syzkaller\x00', 0x3, 0x71, &(0x7f0000001640)=""/113, 0x41000, 0x11, '\x00', r16, 0x1b, r0, 0x8, &(0x7f0000001780)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x7, 0x20, 0xfffff024}, 0x10, r17, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r9]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r18, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001a00)=[0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001a80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) r21 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d40)={r15, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xb, &(0x7f0000001900)=@raw=[@call={0x85, 0x0, 0x0, 0x22}, @ldst={0x0, 0x1, 0x1, 0x4, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @alu={0x4, 0x1, 0xa, 0x1, 0x3, 0xc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', r19, 0xb07eada1db9dbfde, r11, 0x8, &(0x7f0000001cc0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001d00)={0x5, 0xe, 0x4, 0x1}, 0x10, 0x0, r5, 0x0, &(0x7f0000001d80)=[r21, r12, r11, r4, r14, r14, r9]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={r11, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001e40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001f00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001f40), &(0x7f0000001f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002280)={r21, 0x58, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r24 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002340)={r7}, 0x4) r25 = bpf$ITER_CREATE(0x21, &(0x7f0000002380)={r9}, 0x8) r26 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@bloom_filter={0x1e, 0x7a, 0x1, 0x2, 0x41, r9, 0x7, '\x00', r16, r0, 0x5, 0x5, 0x4, 0xc}, 0x48) r27 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002480)={&(0x7f0000002440)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x18, 0x5, &(0x7f0000002140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x8, 0x8, 0x9, 0xc, 0xfffffffffffffffc}]}, &(0x7f0000002180)='GPL\x00', 0x7f, 0x3e, &(0x7f00000021c0)=""/62, 0x41000, 0x20, '\x00', r23, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002300)={0x0, 0xf, 0x10001, 0x2}, 0x10, r20, r24, 0x0, &(0x7f00000024c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r21, r25, r11, r26, 0x1, r27]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000002580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000025c0)='GPL\x00', 0x8, 0x1f, &(0x7f0000002600)=""/31, 0x40f00, 0xa, '\x00', r22, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000002680)={0x4, 0xd, 0x48e8, 0x3}, 0x10, 0xe542, r6, 0x0, &(0x7f0000002780)=[0xffffffffffffffff, r12, r13, r25, 0xffffffffffffffff, r25]}, 0x80) 09:16:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:45 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x8, 0x0, 0x0, 0x9, 0x3ff}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000001c0)=""/187, 0x28, 0xbb, 0x1}, 0x20) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x8, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, @generic={0x2, 0x2, 0x6, 0x2, 0x4}, @generic={0x2, 0xe, 0x8, 0x4, 0x7}], &(0x7f0000000040)='GPL\x00', 0x9, 0xfe, &(0x7f0000000080)=""/254, 0x40f00, 0x8, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000002c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x6, 0x8000}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0x3, 0x9, 0x20, 0x5, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x9, &(0x7f0000000400)=@raw=[@generic={0x1a, 0x6, 0xd, 0x2, 0x101}, @ldst={0x3, 0x3, 0x1, 0x3, 0xa, 0xfffffffffffffff4, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x9, 0x8, 0x8, 0x100, 0xb7}], &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x2, r0, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xe, 0x401, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000900)=[r4, r5, 0x1, 0x1]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r2, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0)={r4}, 0x8) (async, rerun: 32) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)={&(0x7f0000000e00)='./file0\x00', 0x0, 0x10}, 0x10) (async, rerun: 32) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000e80)={r5}, 0x8) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x7, 0x80000000, 0x80000000, 0x880, r4, 0x1f, '\x00', 0x0, r0, 0x4, 0x3, 0x3, 0xb}, 0x48) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x7, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10001}, @alu={0x7, 0x1, 0x15, 0x4, 0x9, 0xffffffffffffffe0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xc, 0x6, 0x9, 0x4, 0x8}]}, &(0x7f0000000d00)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0xa, '\x00', r8, 0x0, r0, 0x8, &(0x7f0000000d40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x10, 0x3f2956d2, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[r9, 0xffffffffffffffff, r10, r11, r5, r12, r5, r4]}, 0x80) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x9, &(0x7f0000001040)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x6}, @ldst={0x0, 0x2, 0x2, 0x4, 0x4, 0xffffffffffffffe0, 0x1}, @exit, @jmp={0x5, 0x1, 0x3, 0x6, 0x3, 0x40, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0x1, 0x0, 0x1, 0x18, 0x8}], &(0x7f00000010c0)='GPL\x00', 0x0, 0xbc, &(0x7f0000001100)=""/188, 0x40f00, 0x7, '\x00', r8, 0x0, r9, 0x8, &(0x7f00000011c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x1, 0xf}, 0x10}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r13, 0x0, 0x9e, 0x68, &(0x7f00000012c0)="88c19d572fd6e7a9287344573b3760763245cd179243bc214b41166d8fa08457c834b7c63c52c7addf95990921a0247a4a399365959628fe3b41a9aca755d779e565b74cae4920a0f0560a8af4e30129e3d6af5f1afee13bc32c1930ef570b06ba54d35bcfe85deb426203a35078b03613c63715c0ae2983c08936a055a08e65f8c89ba6abf9715cfa28fd5398652c8cddbc100aea66ffb5fdca0a74f007", &(0x7f0000001380)=""/104, 0x5, 0x0, 0x85, 0x6d, &(0x7f0000001400)="271a7872b428f5de9b6a8603ccd29b67505cf7d089397037640531d32edc5574a8a303553d3455d97023f36beaf9cb73d42a000c63eec17ddb14db757b89586fd5778df0328c30bb86948dfa22814995fe47700bcb6a7391557c48e31bbaca86dd382c75c20b857790615e01a0b5fbb90824e7330d187a48d8c94a81a4c8058b59d6f0225b", &(0x7f00000014c0)="a7552161794d8462bd6837b94b9b81b03d84690a6af8f559adabac0e664f043ea8493114f0ea6d3d0addd4777488d8157b83197ab69474f67047a1ea72eaa0cc35ef79af5ab5496c007360962461345d9d677b8b83b6b1494ab11b05c910f717d6c3f7a7dcc72ce1a1de24806a", 0x1, 0x40}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r12, 0x58, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001800)={0x6, 0x0}, 0x8) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1b, 0x3, &(0x7f00000015c0)=@raw=[@exit, @generic={0x0, 0xd, 0x3, 0xdcfc, 0x9}, @generic={0x40, 0x7, 0x6, 0x5, 0x7}], &(0x7f0000001600)='syzkaller\x00', 0x3, 0x71, &(0x7f0000001640)=""/113, 0x41000, 0x11, '\x00', r16, 0x1b, r0, 0x8, &(0x7f0000001780)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x7, 0x20, 0xfffff024}, 0x10, r17, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r9]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r18, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001a00)=[0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001a80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) (async) r21 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d40)={r15, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xb, &(0x7f0000001900)=@raw=[@call={0x85, 0x0, 0x0, 0x22}, @ldst={0x0, 0x1, 0x1, 0x4, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @alu={0x4, 0x1, 0xa, 0x1, 0x3, 0xc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', r19, 0xb07eada1db9dbfde, r11, 0x8, &(0x7f0000001cc0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001d00)={0x5, 0xe, 0x4, 0x1}, 0x10, 0x0, r5, 0x0, &(0x7f0000001d80)=[r21, r12, r11, r4, r14, r14, r9]}, 0x80) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={r11, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001e40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001f00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001f40), &(0x7f0000001f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002280)={r21, 0x58, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r24 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002340)={r7}, 0x4) (rerun: 64) r25 = bpf$ITER_CREATE(0x21, &(0x7f0000002380)={r9}, 0x8) r26 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@bloom_filter={0x1e, 0x7a, 0x1, 0x2, 0x41, r9, 0x7, '\x00', r16, r0, 0x5, 0x5, 0x4, 0xc}, 0x48) r27 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002480)={&(0x7f0000002440)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x18, 0x5, &(0x7f0000002140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x8, 0x8, 0x9, 0xc, 0xfffffffffffffffc}]}, &(0x7f0000002180)='GPL\x00', 0x7f, 0x3e, &(0x7f00000021c0)=""/62, 0x41000, 0x20, '\x00', r23, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002300)={0x0, 0xf, 0x10001, 0x2}, 0x10, r20, r24, 0x0, &(0x7f00000024c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r21, r25, r11, r26, 0x1, r27]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000002580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000025c0)='GPL\x00', 0x8, 0x1f, &(0x7f0000002600)=""/31, 0x40f00, 0xa, '\x00', r22, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000002680)={0x4, 0xd, 0x48e8, 0x3}, 0x10, 0xe542, r6, 0x0, &(0x7f0000002780)=[0xffffffffffffffff, r12, r13, r25, 0xffffffffffffffff, r25]}, 0x80) 09:16:45 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x8, 0x0, 0x0, 0x9, 0x3ff}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000001c0)=""/187, 0x28, 0xbb, 0x1}, 0x20) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x8, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, @generic={0x2, 0x2, 0x6, 0x2, 0x4}, @generic={0x2, 0xe, 0x8, 0x4, 0x7}], &(0x7f0000000040)='GPL\x00', 0x9, 0xfe, &(0x7f0000000080)=""/254, 0x40f00, 0x8, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000002c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x6, 0x8000}, 0x10, 0xffffffffffffffff, r1}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0x3, 0x9, 0x20, 0x5, 0x1, 0x3, '\x00', 0x0, r0, 0x5, 0x0, 0x1}, 0x48) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='pids.current\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x9, &(0x7f0000000400)=@raw=[@generic={0x1a, 0x6, 0xd, 0x2, 0x101}, @ldst={0x3, 0x3, 0x1, 0x3, 0xa, 0xfffffffffffffff4, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @generic={0x9, 0x8, 0x8, 0x100, 0xb7}], &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x2, r0, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xe, 0x401, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000900)=[r4, r5, 0x1, 0x1]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r2, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0)={r4}, 0x8) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)={&(0x7f0000000e00)='./file0\x00', 0x0, 0x10}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000e80)={r5}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x7, 0x80000000, 0x80000000, 0x880, r4, 0x1f, '\x00', 0x0, r0, 0x4, 0x3, 0x3, 0xb}, 0x48) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x7, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10001}, @alu={0x7, 0x1, 0x15, 0x4, 0x9, 0xffffffffffffffe0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xc, 0x6, 0x9, 0x4, 0x8}]}, &(0x7f0000000d00)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0xa, '\x00', r8, 0x0, r0, 0x8, &(0x7f0000000d40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0x10, 0x3f2956d2, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[r9, 0xffffffffffffffff, r10, r11, r5, r12, r5, r4]}, 0x80) (async, rerun: 32) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001000), 0xc) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x9, &(0x7f0000001040)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x6}, @ldst={0x0, 0x2, 0x2, 0x4, 0x4, 0xffffffffffffffe0, 0x1}, @exit, @jmp={0x5, 0x1, 0x3, 0x6, 0x3, 0x40, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0x1, 0x0, 0x1, 0x18, 0x8}], &(0x7f00000010c0)='GPL\x00', 0x0, 0xbc, &(0x7f0000001100)=""/188, 0x40f00, 0x7, '\x00', r8, 0x0, r9, 0x8, &(0x7f00000011c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x1, 0xf}, 0x10}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r13, 0x0, 0x9e, 0x68, &(0x7f00000012c0)="88c19d572fd6e7a9287344573b3760763245cd179243bc214b41166d8fa08457c834b7c63c52c7addf95990921a0247a4a399365959628fe3b41a9aca755d779e565b74cae4920a0f0560a8af4e30129e3d6af5f1afee13bc32c1930ef570b06ba54d35bcfe85deb426203a35078b03613c63715c0ae2983c08936a055a08e65f8c89ba6abf9715cfa28fd5398652c8cddbc100aea66ffb5fdca0a74f007", &(0x7f0000001380)=""/104, 0x5, 0x0, 0x85, 0x6d, &(0x7f0000001400)="271a7872b428f5de9b6a8603ccd29b67505cf7d089397037640531d32edc5574a8a303553d3455d97023f36beaf9cb73d42a000c63eec17ddb14db757b89586fd5778df0328c30bb86948dfa22814995fe47700bcb6a7391557c48e31bbaca86dd382c75c20b857790615e01a0b5fbb90824e7330d187a48d8c94a81a4c8058b59d6f0225b", &(0x7f00000014c0)="a7552161794d8462bd6837b94b9b81b03d84690a6af8f559adabac0e664f043ea8493114f0ea6d3d0addd4777488d8157b83197ab69474f67047a1ea72eaa0cc35ef79af5ab5496c007360962461345d9d677b8b83b6b1494ab11b05c910f717d6c3f7a7dcc72ce1a1de24806a", 0x1, 0x40}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r12, 0x58, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001800)={0x6, 0x0}, 0x8) (rerun: 64) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1b, 0x3, &(0x7f00000015c0)=@raw=[@exit, @generic={0x0, 0xd, 0x3, 0xdcfc, 0x9}, @generic={0x40, 0x7, 0x6, 0x5, 0x7}], &(0x7f0000001600)='syzkaller\x00', 0x3, 0x71, &(0x7f0000001640)=""/113, 0x41000, 0x11, '\x00', r16, 0x1b, r0, 0x8, &(0x7f0000001780)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x7, 0x20, 0xfffff024}, 0x10, r17, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r9]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r18, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001a00)=[0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001a80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) (async) r21 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d40)={r15, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xb, &(0x7f0000001900)=@raw=[@call={0x85, 0x0, 0x0, 0x22}, @ldst={0x0, 0x1, 0x1, 0x4, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @alu={0x4, 0x1, 0xa, 0x1, 0x3, 0xc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000001980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', r19, 0xb07eada1db9dbfde, r11, 0x8, &(0x7f0000001cc0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001d00)={0x5, 0xe, 0x4, 0x1}, 0x10, 0x0, r5, 0x0, &(0x7f0000001d80)=[r21, r12, r11, r4, r14, r14, r9]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002100)={r11, 0xe0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001e40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ec0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001f00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001f40), &(0x7f0000001f80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001fc0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002280)={r21, 0x58, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r24 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002340)={r7}, 0x4) r25 = bpf$ITER_CREATE(0x21, &(0x7f0000002380)={r9}, 0x8) (async) r26 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@bloom_filter={0x1e, 0x7a, 0x1, 0x2, 0x41, r9, 0x7, '\x00', r16, r0, 0x5, 0x5, 0x4, 0xc}, 0x48) (async) r27 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002480)={&(0x7f0000002440)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x18, 0x5, &(0x7f0000002140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x8, 0x8, 0x9, 0xc, 0xfffffffffffffffc}]}, &(0x7f0000002180)='GPL\x00', 0x7f, 0x3e, &(0x7f00000021c0)=""/62, 0x41000, 0x20, '\x00', r23, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000002300)={0x0, 0xf, 0x10001, 0x2}, 0x10, r20, r24, 0x0, &(0x7f00000024c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r21, r25, r11, r26, 0x1, r27]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000002580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000025c0)='GPL\x00', 0x8, 0x1f, &(0x7f0000002600)=""/31, 0x40f00, 0xa, '\x00', r22, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000002680)={0x4, 0xd, 0x48e8, 0x3}, 0x10, 0xe542, r6, 0x0, &(0x7f0000002780)=[0xffffffffffffffff, r12, r13, r25, 0xffffffffffffffff, r25]}, 0x80) [ 1407.505808][ T1375] FAULT_INJECTION: forcing a failure. [ 1407.505808][ T1375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1407.528019][ T1375] CPU: 0 PID: 1375 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1407.538006][ T1375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1407.547900][ T1375] Call Trace: [ 1407.551020][ T1375] [ 1407.553888][ T1375] dump_stack_lvl+0x151/0x1b7 [ 1407.558399][ T1375] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1407.563692][ T1375] ? irqentry_exit+0x30/0x40 [ 1407.568127][ T1375] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1407.574107][ T1375] dump_stack+0x15/0x17 [ 1407.578100][ T1375] should_fail+0x3c0/0x510 [ 1407.582353][ T1375] should_fail_alloc_page+0x58/0x70 [ 1407.587389][ T1375] __alloc_pages+0x1de/0x7c0 [ 1407.591814][ T1375] ? __count_vm_events+0x30/0x30 [ 1407.596599][ T1375] pte_alloc_one+0x73/0x1b0 [ 1407.600926][ T1375] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1407.605970][ T1375] ? preempt_schedule+0xd9/0xe0 [ 1407.610652][ T1375] __pte_alloc+0x86/0x350 [ 1407.614813][ T1375] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1407.620456][ T1375] ? free_pgtables+0x210/0x210 [ 1407.625065][ T1375] ? copy_pte_range+0xa2f/0x20b0 [ 1407.629832][ T1375] copy_pte_range+0x1b1f/0x20b0 [ 1407.634520][ T1375] ? __kunmap_atomic+0x80/0x80 [ 1407.639118][ T1375] ? irqentry_exit+0x30/0x40 [ 1407.643542][ T1375] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1407.649187][ T1375] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1407.655175][ T1375] copy_page_range+0xc1e/0x1090 [ 1407.659862][ T1375] ? pfn_valid+0x1e0/0x1e0 [ 1407.664113][ T1375] dup_mmap+0x99f/0xea0 [ 1407.668107][ T1375] ? __delayed_free_task+0x20/0x20 [ 1407.673060][ T1375] ? mm_init+0x807/0x960 [ 1407.677134][ T1375] dup_mm+0x91/0x330 [ 1407.680867][ T1375] copy_mm+0x108/0x1b0 [ 1407.684772][ T1375] copy_process+0x1295/0x3250 [ 1407.689286][ T1375] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1407.695275][ T1375] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1407.700222][ T1375] ? kasan_check_range+0x8a/0x2e0 [ 1407.705083][ T1375] kernel_clone+0x22d/0x990 [ 1407.709431][ T1375] ? irqentry_exit+0x30/0x40 [ 1407.713846][ T1375] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1407.719489][ T1375] ? create_io_thread+0x1e0/0x1e0 [ 1407.724350][ T1375] __x64_sys_clone+0x289/0x310 [ 1407.728949][ T1375] ? __do_sys_vfork+0x130/0x130 [ 1407.733642][ T1375] ? debug_smp_processor_id+0x17/0x20 [ 1407.738848][ T1375] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1407.744751][ T1375] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1407.750649][ T1375] do_syscall_64+0x44/0xd0 [ 1407.754989][ T1375] ? irqentry_exit+0x12/0x40 [ 1407.759430][ T1375] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1407.765150][ T1375] RIP: 0033:0x7f3bd36fc0a9 [ 1407.769396][ T1375] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1407.788933][ T1375] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1407.797175][ T1375] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 09:16:46 executing program 5: syz_clone(0x42000000, 0x0, 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x5b, 0x1, 0xbb, 0x0, 0xce, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x4}, 0x13358, 0xf, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) 09:16:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1407.804996][ T1375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1407.812799][ T1375] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1407.820609][ T1375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1407.828450][ T1375] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1407.836243][ T1375] [ 1407.879085][ T1392] FAULT_INJECTION: forcing a failure. [ 1407.879085][ T1392] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.891775][ T1392] CPU: 1 PID: 1392 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1407.901760][ T1392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1407.911822][ T1392] Call Trace: [ 1407.914991][ T1392] [ 1407.917726][ T1392] dump_stack_lvl+0x151/0x1b7 [ 1407.922238][ T1392] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1407.927536][ T1392] dump_stack+0x15/0x17 [ 1407.931518][ T1392] should_fail+0x3c0/0x510 [ 1407.935784][ T1392] __should_failslab+0x9f/0xe0 [ 1407.940380][ T1392] should_failslab+0x9/0x20 [ 1407.944710][ T1392] kmem_cache_alloc+0x4f/0x2f0 [ 1407.949311][ T1392] ? vm_area_dup+0x26/0x1d0 [ 1407.953652][ T1392] vm_area_dup+0x26/0x1d0 [ 1407.957820][ T1392] dup_mmap+0x6b8/0xea0 [ 1407.961813][ T1392] ? __delayed_free_task+0x20/0x20 [ 1407.966759][ T1392] ? mm_init+0x807/0x960 [ 1407.970838][ T1392] dup_mm+0x91/0x330 [ 1407.974571][ T1392] copy_mm+0x108/0x1b0 [ 1407.978478][ T1392] copy_process+0x1295/0x3250 [ 1407.982993][ T1392] ? timerqueue_add+0x25c/0x280 [ 1407.987675][ T1392] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1407.992624][ T1392] ? irqentry_exit+0x30/0x40 [ 1407.997045][ T1392] kernel_clone+0x22d/0x990 [ 1408.001385][ T1392] ? irqentry_exit+0x30/0x40 [ 1408.005811][ T1392] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1408.011462][ T1392] ? create_io_thread+0x1e0/0x1e0 [ 1408.016316][ T1392] __x64_sys_clone+0x289/0x310 [ 1408.020915][ T1392] ? __do_sys_vfork+0x130/0x130 [ 1408.025607][ T1392] ? debug_smp_processor_id+0x17/0x20 [ 1408.030809][ T1392] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1408.036711][ T1392] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1408.042612][ T1392] do_syscall_64+0x44/0xd0 [ 1408.046865][ T1392] ? irqentry_exit+0x12/0x40 [ 1408.051294][ T1392] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1408.057018][ T1392] RIP: 0033:0x7f3bd36fc0a9 [ 1408.061272][ T1392] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1408.080717][ T1392] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1408.088958][ T1392] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1408.096772][ T1392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1408.104601][ T1392] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1408.112394][ T1392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1408.120317][ T1392] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1408.128129][ T1392] 09:16:48 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = perf_event_open(&(0x7f00000015c0)={0x0, 0x80, 0x0, 0x0, 0xce, 0x40, 0x0, 0x5, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x2, @perf_config_ext={0x1}, 0x0, 0xfffffffffffffffa, 0xfff, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x80, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040)}, 0x4020, 0x37afbde8, 0x6b5bf913, 0x6, 0x7fffffffffffffff, 0x6, 0x6, 0x0, 0x401, 0x0, 0x3}, 0x0, 0xa, r1, 0x1) (async) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x4, 0x0, 0xc4, 0x8, 0x0, 0x40, 0x22818, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x4238}, 0x4c0, 0x8, 0x400, 0x7, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xa325}, 0x0, 0x7, 0xffffffffffffffff, 0x1) (async) syz_clone(0x40001400, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7f, 0x3, 0x4, 0x1, 0x0, 0xa4, 0x48224, 0xf, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x96c08, 0x100000000, 0x1f, 0x8, 0x0, 0x1, 0x7, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x2) 09:16:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:48 executing program 5: syz_clone(0x42000000, 0x0, 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x5b, 0x1, 0xbb, 0x0, 0xce, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x4}, 0x13358, 0xf, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) syz_clone(0x42000000, 0x0, 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x5b, 0x1, 0xbb, 0x0, 0xce, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x4}, 0x13358, 0xf, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) (async) [ 1409.997807][ T1403] FAULT_INJECTION: forcing a failure. [ 1409.997807][ T1403] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.010789][ T1403] CPU: 0 PID: 1403 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1410.020760][ T1403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1410.030665][ T1403] Call Trace: [ 1410.033784][ T1403] [ 1410.036548][ T1403] dump_stack_lvl+0x151/0x1b7 [ 1410.041063][ T1403] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1410.046360][ T1403] ? do_syscall_64+0x44/0xd0 [ 1410.050796][ T1403] dump_stack+0x15/0x17 [ 1410.054788][ T1403] should_fail+0x3c0/0x510 [ 1410.059030][ T1403] __should_failslab+0x9f/0xe0 [ 1410.063629][ T1403] should_failslab+0x9/0x20 [ 1410.067978][ T1403] kmem_cache_alloc+0x4f/0x2f0 [ 1410.072571][ T1403] ? anon_vma_clone+0xa1/0x4f0 [ 1410.077171][ T1403] anon_vma_clone+0xa1/0x4f0 [ 1410.081597][ T1403] anon_vma_fork+0x91/0x4f0 [ 1410.085935][ T1403] ? anon_vma_name+0x4c/0x70 [ 1410.090364][ T1403] dup_mmap+0x750/0xea0 [ 1410.094357][ T1403] ? __delayed_free_task+0x20/0x20 [ 1410.099306][ T1403] ? mm_init+0x807/0x960 [ 1410.103390][ T1403] dup_mm+0x91/0x330 [ 1410.107113][ T1403] copy_mm+0x108/0x1b0 [ 1410.111019][ T1403] copy_process+0x1295/0x3250 [ 1410.115558][ T1403] ? proc_fail_nth_write+0x213/0x290 [ 1410.120652][ T1403] ? proc_fail_nth_read+0x220/0x220 [ 1410.125689][ T1403] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1410.130646][ T1403] ? vfs_write+0x9af/0x1050 [ 1410.134986][ T1403] ? irqentry_exit+0x30/0x40 [ 1410.139400][ T1403] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1410.145041][ T1403] kernel_clone+0x22d/0x990 [ 1410.149383][ T1403] ? file_end_write+0x1b0/0x1b0 [ 1410.154069][ T1403] ? __kasan_check_write+0x14/0x20 [ 1410.159015][ T1403] ? create_io_thread+0x1e0/0x1e0 [ 1410.163877][ T1403] ? __mutex_lock_slowpath+0x10/0x10 [ 1410.168998][ T1403] __x64_sys_clone+0x289/0x310 [ 1410.173599][ T1403] ? __do_sys_vfork+0x130/0x130 [ 1410.178288][ T1403] ? debug_smp_processor_id+0x17/0x20 [ 1410.183494][ T1403] do_syscall_64+0x44/0xd0 [ 1410.187745][ T1403] ? irqentry_exit+0x12/0x40 [ 1410.192174][ T1403] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1410.197899][ T1403] RIP: 0033:0x7f3bd36fc0a9 [ 1410.202153][ T1403] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1410.221594][ T1403] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1410.229841][ T1403] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1410.237651][ T1403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1410.245466][ T1403] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1410.253274][ T1403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1410.261087][ T1403] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1410.268903][ T1403] 09:16:50 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xaf, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x4088, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x602, 0x85, 0xb, 0x0, 0x0, 0x3, 0x5, 0x0, 0x101, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='xen_mmu_flush_tlb_multi\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r4, &(0x7f0000000200)=0x3200000000000000, 0x43408) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 09:16:50 executing program 5: syz_clone(0x42000000, 0x0, 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x5b, 0x1, 0xbb, 0x0, 0xce, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x4}, 0x13358, 0xf, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) syz_clone(0x42000000, 0x0, 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x5b, 0x1, 0xbb, 0x0, 0xce, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x4}, 0x13358, 0xf, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) (async) 09:16:51 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000062d8ea927e31d1b3dc90acdc5d9200000000000000003b8100850000006d000000b0de36b4be00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 09:16:51 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) 09:16:51 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = perf_event_open(&(0x7f00000015c0)={0x0, 0x80, 0x0, 0x0, 0xce, 0x40, 0x0, 0x5, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x2, @perf_config_ext={0x1}, 0x0, 0xfffffffffffffffa, 0xfff, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x80, 0x0, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000040)}, 0x4020, 0x37afbde8, 0x6b5bf913, 0x6, 0x7fffffffffffffff, 0x6, 0x6, 0x0, 0x401, 0x0, 0x3}, 0x0, 0xa, r1, 0x1) (async) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x4, 0x0, 0xc4, 0x8, 0x0, 0x40, 0x22818, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x4238}, 0x4c0, 0x8, 0x400, 0x7, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xa325}, 0x0, 0x7, 0xffffffffffffffff, 0x1) syz_clone(0x40001400, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7f, 0x3, 0x4, 0x1, 0x0, 0xa4, 0x48224, 0xf, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x96c08, 0x100000000, 0x1f, 0x8, 0x0, 0x1, 0x7, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x2) 09:16:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:51 executing program 5: syz_clone(0x4420e100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x1, 0x7, 0x95, 0x0, 0x400, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, @perf_bp={&(0x7f0000000080)}, 0x9, 0x4, 0xfffffffd, 0x4, 0xcca6, 0x3, 0x687a, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) [ 1412.661965][ T1429] FAULT_INJECTION: forcing a failure. [ 1412.661965][ T1429] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.685107][ T1429] CPU: 1 PID: 1429 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1412.695094][ T1429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1412.704995][ T1429] Call Trace: [ 1412.708112][ T1429] [ 1412.710887][ T1429] dump_stack_lvl+0x151/0x1b7 [ 1412.715402][ T1429] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1412.720696][ T1429] ? do_syscall_64+0x44/0xd0 [ 1412.725124][ T1429] dump_stack+0x15/0x17 [ 1412.729114][ T1429] should_fail+0x3c0/0x510 [ 1412.733370][ T1429] __should_failslab+0x9f/0xe0 [ 1412.737971][ T1429] should_failslab+0x9/0x20 [ 1412.742304][ T1429] kmem_cache_alloc+0x4f/0x2f0 [ 1412.746902][ T1429] ? anon_vma_clone+0xa1/0x4f0 [ 1412.751508][ T1429] anon_vma_clone+0xa1/0x4f0 [ 1412.755929][ T1429] anon_vma_fork+0x91/0x4f0 [ 1412.760269][ T1429] ? anon_vma_name+0x4c/0x70 [ 1412.764695][ T1429] dup_mmap+0x750/0xea0 [ 1412.768688][ T1429] ? __delayed_free_task+0x20/0x20 [ 1412.773635][ T1429] ? mm_init+0x807/0x960 [ 1412.777714][ T1429] dup_mm+0x91/0x330 [ 1412.781446][ T1429] copy_mm+0x108/0x1b0 [ 1412.785355][ T1429] copy_process+0x1295/0x3250 [ 1412.789865][ T1429] ? proc_fail_nth_write+0x213/0x290 [ 1412.794990][ T1429] ? proc_fail_nth_read+0x220/0x220 [ 1412.800022][ T1429] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1412.804967][ T1429] ? vfs_write+0x9af/0x1050 [ 1412.809309][ T1429] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1412.815295][ T1429] kernel_clone+0x22d/0x990 [ 1412.819637][ T1429] ? irqentry_exit+0x30/0x40 [ 1412.824077][ T1429] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1412.829704][ T1429] ? create_io_thread+0x1e0/0x1e0 [ 1412.834565][ T1429] __x64_sys_clone+0x289/0x310 [ 1412.839165][ T1429] ? __do_sys_vfork+0x130/0x130 [ 1412.843851][ T1429] ? debug_smp_processor_id+0x17/0x20 [ 1412.849066][ T1429] do_syscall_64+0x44/0xd0 [ 1412.853318][ T1429] ? irqentry_exit+0x12/0x40 [ 1412.857740][ T1429] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1412.863466][ T1429] RIP: 0033:0x7f3bd36fc0a9 [ 1412.867721][ T1429] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1412.887164][ T1429] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1412.895412][ T1429] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1412.903216][ T1429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 09:16:51 executing program 5: syz_clone(0x4420e100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x1, 0x7, 0x95, 0x0, 0x400, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, @perf_bp={&(0x7f0000000080)}, 0x9, 0x4, 0xfffffffd, 0x4, 0xcca6, 0x3, 0x687a, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) (rerun: 32) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) [ 1412.911031][ T1429] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.918847][ T1429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1412.926652][ T1429] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1412.934469][ T1429] 09:16:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1413.005173][ T1445] FAULT_INJECTION: forcing a failure. [ 1413.005173][ T1445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1413.018344][ T1445] CPU: 1 PID: 1445 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1413.028303][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1413.038196][ T1445] Call Trace: [ 1413.041321][ T1445] [ 1413.044098][ T1445] dump_stack_lvl+0x151/0x1b7 [ 1413.048613][ T1445] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1413.053906][ T1445] dump_stack+0x15/0x17 [ 1413.057897][ T1445] should_fail+0x3c0/0x510 [ 1413.062154][ T1445] should_fail_alloc_page+0x58/0x70 [ 1413.067185][ T1445] __alloc_pages+0x1de/0x7c0 [ 1413.071611][ T1445] ? irqentry_exit+0x30/0x40 [ 1413.076038][ T1445] ? __count_vm_events+0x30/0x30 [ 1413.080814][ T1445] ? update_stack_state+0x472/0x580 [ 1413.085846][ T1445] pte_alloc_one+0x73/0x1b0 [ 1413.090185][ T1445] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1413.095222][ T1445] __pte_alloc+0x86/0x350 [ 1413.099386][ T1445] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1413.105374][ T1445] ? free_pgtables+0x210/0x210 [ 1413.109974][ T1445] ? copy_pte_range+0x4de/0x20b0 [ 1413.114746][ T1445] ? copy_pte_range+0x4ff/0x20b0 [ 1413.119529][ T1445] copy_pte_range+0x1b1f/0x20b0 [ 1413.124216][ T1445] ? __kunmap_atomic+0x80/0x80 [ 1413.128808][ T1445] ? __kasan_slab_alloc+0xc4/0xe0 [ 1413.133671][ T1445] ? __kasan_slab_alloc+0xb2/0xe0 [ 1413.138528][ T1445] ? kmem_cache_alloc+0x189/0x2f0 [ 1413.143391][ T1445] ? vm_area_dup+0x26/0x1d0 [ 1413.147733][ T1445] ? dup_mmap+0x6b8/0xea0 [ 1413.151895][ T1445] ? dup_mm+0x91/0x330 [ 1413.155803][ T1445] ? copy_mm+0x108/0x1b0 [ 1413.159881][ T1445] ? copy_process+0x1295/0x3250 [ 1413.164567][ T1445] ? kernel_clone+0x22d/0x990 [ 1413.169080][ T1445] ? __x64_sys_clone+0x289/0x310 [ 1413.173853][ T1445] ? do_syscall_64+0x44/0xd0 [ 1413.178281][ T1445] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1413.184184][ T1445] copy_page_range+0xc1e/0x1090 [ 1413.188878][ T1445] ? pfn_valid+0x1e0/0x1e0 [ 1413.193128][ T1445] dup_mmap+0x99f/0xea0 [ 1413.197116][ T1445] ? __delayed_free_task+0x20/0x20 [ 1413.202065][ T1445] ? mm_init+0x807/0x960 [ 1413.206142][ T1445] dup_mm+0x91/0x330 [ 1413.209874][ T1445] copy_mm+0x108/0x1b0 [ 1413.213784][ T1445] copy_process+0x1295/0x3250 [ 1413.218294][ T1445] ? proc_fail_nth_write+0x213/0x290 [ 1413.223414][ T1445] ? proc_fail_nth_read+0x220/0x220 [ 1413.228448][ T1445] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1413.233396][ T1445] ? vfs_write+0x9af/0x1050 [ 1413.237737][ T1445] kernel_clone+0x22d/0x990 [ 1413.242077][ T1445] ? file_end_write+0x1b0/0x1b0 [ 1413.246765][ T1445] ? __kasan_check_write+0x14/0x20 [ 1413.251713][ T1445] ? create_io_thread+0x1e0/0x1e0 [ 1413.256573][ T1445] ? __mutex_lock_slowpath+0x10/0x10 [ 1413.261692][ T1445] __x64_sys_clone+0x289/0x310 [ 1413.266307][ T1445] ? __do_sys_vfork+0x130/0x130 [ 1413.270979][ T1445] ? debug_smp_processor_id+0x17/0x20 [ 1413.276364][ T1445] do_syscall_64+0x44/0xd0 [ 1413.280611][ T1445] ? irqentry_exit+0x12/0x40 [ 1413.285041][ T1445] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1413.290766][ T1445] RIP: 0033:0x7f3bd36fc0a9 [ 1413.295021][ T1445] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1413.314462][ T1445] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1413.322707][ T1445] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1413.330522][ T1445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1413.338336][ T1445] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1413.346140][ T1445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:16:51 executing program 5: syz_clone(0x4420e100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x1, 0x7, 0x95, 0x0, 0x400, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, @perf_bp={&(0x7f0000000080)}, 0x9, 0x4, 0xfffffffd, 0x4, 0xcca6, 0x3, 0x687a, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 09:16:51 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1413.353959][ T1445] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1413.361766][ T1445] [ 1413.410022][ T1450] FAULT_INJECTION: forcing a failure. [ 1413.410022][ T1450] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.425830][ T1450] CPU: 0 PID: 1450 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1413.435797][ T1450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1413.445694][ T1450] Call Trace: [ 1413.448818][ T1450] [ 1413.451590][ T1450] dump_stack_lvl+0x151/0x1b7 [ 1413.456103][ T1450] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1413.461399][ T1450] ? dump_stack+0x9/0x17 [ 1413.465487][ T1450] dump_stack+0x15/0x17 [ 1413.469469][ T1450] should_fail+0x3c0/0x510 [ 1413.473722][ T1450] __should_failslab+0x9f/0xe0 [ 1413.478323][ T1450] should_failslab+0x9/0x20 [ 1413.482661][ T1450] kmem_cache_alloc+0x4f/0x2f0 [ 1413.487262][ T1450] ? vm_area_dup+0x26/0x1d0 [ 1413.491602][ T1450] vm_area_dup+0x26/0x1d0 [ 1413.495767][ T1450] dup_mmap+0x6b8/0xea0 [ 1413.499764][ T1450] ? __delayed_free_task+0x20/0x20 [ 1413.504713][ T1450] ? mm_init+0x807/0x960 09:16:52 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x10, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x5, 0x6, 0x8001, 0xc64, r2, 0x7, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x35, &(0x7f00000000c0)=""/53, 0x40f00, 0xd9e327c3af51bdae, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xc, 0x38000000, 0x921}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r1]}, 0x80) socketpair(0x1d, 0x2, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) socketpair(0x23, 0x2, 0xfff, &(0x7f00000005c0)) [ 1413.508787][ T1450] dup_mm+0x91/0x330 [ 1413.512518][ T1450] copy_mm+0x108/0x1b0 [ 1413.516425][ T1450] copy_process+0x1295/0x3250 [ 1413.521033][ T1450] ? timerqueue_add+0x25c/0x280 [ 1413.525723][ T1450] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1413.530661][ T1450] kernel_clone+0x22d/0x990 [ 1413.535001][ T1450] ? __kasan_check_write+0x14/0x20 [ 1413.539947][ T1450] ? create_io_thread+0x1e0/0x1e0 [ 1413.544806][ T1450] ? lapic_next_event+0x5f/0x70 [ 1413.549494][ T1450] ? clockevents_program_event+0x240/0x310 [ 1413.555146][ T1450] __x64_sys_clone+0x289/0x310 [ 1413.559745][ T1450] ? __do_sys_vfork+0x130/0x130 [ 1413.564431][ T1450] ? debug_smp_processor_id+0x17/0x20 [ 1413.569634][ T1450] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1413.575540][ T1450] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1413.581441][ T1450] do_syscall_64+0x44/0xd0 [ 1413.585692][ T1450] ? irqentry_exit+0x12/0x40 [ 1413.590120][ T1450] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1413.595845][ T1450] RIP: 0033:0x7f3bd36fc0a9 [ 1413.600097][ T1450] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1413.619537][ T1450] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1413.627781][ T1450] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1413.635592][ T1450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1413.643406][ T1450] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1413.651214][ T1450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1413.659034][ T1450] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1413.666842][ T1450] 09:16:55 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xaf, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x4088, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x602, 0x85, 0xb, 0x0, 0x0, 0x3, 0x5, 0x0, 0x101, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='xen_mmu_flush_tlb_multi\x00', r2}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_int(r0, 0x0, 0x2, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r4, &(0x7f0000000200)=0x3200000000000000, 0x43408) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 09:16:55 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async, rerun: 32) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x10, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x5, 0x6, 0x8001, 0xc64, r2, 0x7, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x35, &(0x7f00000000c0)=""/53, 0x40f00, 0xd9e327c3af51bdae, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xc, 0x38000000, 0x921}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r1]}, 0x80) socketpair(0x1d, 0x2, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) (async) socketpair(0x23, 0x2, 0xfff, &(0x7f00000005c0)) 09:16:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="91a0615f229c6019031a919455a50febf368379c97517493c8199bb33fcb145f6d01d337410ee7d66720b33323118600c27c16d6e54945e909f234cf0e3fde9cc91ec175cd97843bd260f9f3910a00002ac35be2810eda76f2b3c877f47068a384fb4369050000000000000000000000000000000000009a89f661f7dd37f4ab3f2011810dd1f214f4a54b275202a804921d64a3a03b60e505166e9fc484f6f4a4dea287e816753be09fc3de29427098beaa3d5cc67c01f852181a87d6f56b0ae553978336497f50be5a01c623c531ddd6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x8, 0x6, 0x81, 0x0, 0x0, 0x20004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x642e, 0x3ff}, 0x4502, 0x61c4, 0x1, 0x3, 0x7, 0x7, 0x200, 0x0, 0x4, 0x0, 0x100000000}, r0, 0xd, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x7f) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000240)=0x2) 09:16:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:16:56 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x950, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xff, 0x1, 0x20, 0x40, 0x0, 0x0, 0x8000, 0x10, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x3}, 0x240, 0x0, 0x3, 0x5, 0x0, 0x3, 0x6}, 0x0, 0x0, r0, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00'}, 0x10) r6 = syz_clone(0x51400, &(0x7f0000000080), 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000008c0)="d7b8520981d59344fdb776ae86effb11be06d4092ee5046f5ebdd15040251fa8b9c5d04fa394a34e159b0ab00184209611ba35a4e6f784ca3c69aa4c4bb09ed338f2a8de93240c862b2e16b814cc60f865351e2c79ade2ec2c11d3f29ec5096306c508295e8eaa11118b3d25b22fddcb62a7e79b0e5750bb93ebb07ba0f213554760436c055fbf16644c10aa4e61eddf679fcbd9ad06f4e8f73aa05e83b03aa8f3ad229fc348c64d43474ab985f093a63096a0991b6e1d524fc329959e5b616f919572508108e2d93646a3b36b51df8e8e6eb2f5607dd7cb6924b91770a14a8c1176eea7365f704b0b0a5939ec6b2345ed32903c6cfe") perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x4, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x4, 0x81, 0x8, 0x5, 0x7, 0x5, 0x8, 0x0, 0xfff, 0x0, 0xa7}, 0xffffffffffffffff, 0x6, r4, 0x1) r7 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) recvmsg(r7, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000180)=0x4) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x2, 0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x1, 0x515}, 0x8108, 0x3, 0x5, 0x4, 0x0, 0xfffffc00, 0xc, 0x0, 0x2}, r6, 0x0, r5, 0xb) r8 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0xfd, 0x2, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x101}, 0x8000, 0x101, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ffffffc, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x4, 0x4, 0x7, 0x0, 0x0, 0x9, 0x8800, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x0, 0x7}, 0x10000, 0x3, 0x8, 0x2, 0x378b3377, 0x9, 0x1, 0x0, 0xffffffe0, 0x0, 0x80000001}, r6, 0x2, r8, 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x7, 0x1f, 0x1, 0x0, 0x0, 0xbff, 0x8100, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe3, 0x1, @perf_config_ext={0x0, 0x954}, 0x820a0, 0x8, 0x0, 0x5, 0x2, 0x0, 0x8, 0x0, 0xe402, 0x0, 0x2}, r6, 0x7, r9, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r10, &(0x7f0000000000), 0x248800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x10) 09:16:56 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x10, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x5, 0x6, 0x8001, 0xc64, r2, 0x7, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xe}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x35, &(0x7f00000000c0)=""/53, 0x40f00, 0xd9e327c3af51bdae, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xc, 0x38000000, 0x921}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r1]}, 0x80) (async) socketpair(0x1d, 0x2, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) socketpair(0x23, 0x2, 0xfff, &(0x7f00000005c0)) 09:16:56 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 09:16:56 executing program 5: syz_clone(0x50000000, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xfd, 0xe1, 0xff, 0x3f, 0x0, 0x8, 0x12420, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x96}, 0x0, 0x2, 0xec71, 0x4, 0xc2, 0x8, 0x40, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0xbaec892eb86c58d) [ 1417.775910][ T1470] FAULT_INJECTION: forcing a failure. [ 1417.775910][ T1470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1417.795467][ T1470] CPU: 0 PID: 1470 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1417.805458][ T1470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1417.815354][ T1470] Call Trace: [ 1417.818475][ T1470] [ 1417.821255][ T1470] dump_stack_lvl+0x151/0x1b7 [ 1417.825771][ T1470] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1417.831060][ T1470] ? irqentry_exit+0x30/0x40 [ 1417.835491][ T1470] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1417.841481][ T1470] dump_stack+0x15/0x17 [ 1417.845472][ T1470] should_fail+0x3c0/0x510 [ 1417.849725][ T1470] should_fail_alloc_page+0x58/0x70 [ 1417.854759][ T1470] __alloc_pages+0x1de/0x7c0 [ 1417.859184][ T1470] ? __count_vm_events+0x30/0x30 [ 1417.863963][ T1470] ? __count_vm_events+0x30/0x30 [ 1417.868733][ T1470] ? __kasan_check_write+0x14/0x20 [ 1417.873694][ T1470] ? _raw_spin_lock+0xa3/0x1b0 [ 1417.878279][ T1470] __pmd_alloc+0xb1/0x550 [ 1417.882446][ T1470] ? kmem_cache_alloc+0x189/0x2f0 [ 1417.887304][ T1470] ? anon_vma_fork+0x1b9/0x4f0 [ 1417.891908][ T1470] ? __pud_alloc+0x260/0x260 [ 1417.896331][ T1470] ? __pud_alloc+0x218/0x260 [ 1417.900762][ T1470] ? do_handle_mm_fault+0x2370/0x2370 [ 1417.905975][ T1470] copy_page_range+0xd04/0x1090 [ 1417.910657][ T1470] ? pfn_valid+0x1e0/0x1e0 [ 1417.914912][ T1470] dup_mmap+0x99f/0xea0 [ 1417.918900][ T1470] ? __delayed_free_task+0x20/0x20 [ 1417.923847][ T1470] ? mm_init+0x807/0x960 [ 1417.927923][ T1470] dup_mm+0x91/0x330 [ 1417.931656][ T1470] copy_mm+0x108/0x1b0 [ 1417.935565][ T1470] copy_process+0x1295/0x3250 [ 1417.940087][ T1470] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1417.945022][ T1470] ? kernel_clone+0x78/0x990 [ 1417.949449][ T1470] kernel_clone+0x22d/0x990 [ 1417.953791][ T1470] ? irqentry_exit+0x30/0x40 [ 1417.958218][ T1470] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1417.963857][ T1470] ? create_io_thread+0x1e0/0x1e0 [ 1417.968718][ T1470] __x64_sys_clone+0x289/0x310 [ 1417.973319][ T1470] ? __do_sys_vfork+0x130/0x130 [ 1417.978007][ T1470] ? debug_smp_processor_id+0x17/0x20 [ 1417.983211][ T1470] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1417.989116][ T1470] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1417.995017][ T1470] do_syscall_64+0x44/0xd0 [ 1417.999272][ T1470] ? irqentry_exit+0x12/0x40 [ 1418.003696][ T1470] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1418.009423][ T1470] RIP: 0033:0x7f3bd36fc0a9 [ 1418.013796][ T1470] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1418.033204][ T1470] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1418.041451][ T1470] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1418.049268][ T1470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1418.057077][ T1470] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1418.064888][ T1470] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:16:56 executing program 5: syz_clone(0x50000000, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xfd, 0xe1, 0xff, 0x3f, 0x0, 0x8, 0x12420, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x96}, 0x0, 0x2, 0xec71, 0x4, 0xc2, 0x8, 0x40, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0xbaec892eb86c58d) 09:16:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1418.072697][ T1470] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1418.080513][ T1470] [ 1418.116224][ T1485] FAULT_INJECTION: forcing a failure. 09:16:56 executing program 5: syz_clone(0x50000000, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xfd, 0xe1, 0xff, 0x3f, 0x0, 0x8, 0x12420, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x96}, 0x0, 0x2, 0xec71, 0x4, 0xc2, 0x8, 0x40, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0xbaec892eb86c58d) syz_clone(0x50000000, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xfd, 0xe1, 0xff, 0x3f, 0x0, 0x8, 0x12420, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x96}, 0x0, 0x2, 0xec71, 0x4, 0xc2, 0x8, 0x40, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0xbaec892eb86c58d) (async) [ 1418.116224][ T1485] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.146205][ T1485] CPU: 1 PID: 1485 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1418.156196][ T1485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1418.166090][ T1485] Call Trace: [ 1418.169209][ T1485] [ 1418.171988][ T1485] dump_stack_lvl+0x151/0x1b7 [ 1418.176501][ T1485] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1418.181802][ T1485] dump_stack+0x15/0x17 [ 1418.185791][ T1485] should_fail+0x3c0/0x510 [ 1418.190045][ T1485] __should_failslab+0x9f/0xe0 [ 1418.194648][ T1485] should_failslab+0x9/0x20 [ 1418.198982][ T1485] kmem_cache_alloc+0x4f/0x2f0 [ 1418.203584][ T1485] ? vm_area_dup+0x26/0x1d0 [ 1418.207928][ T1485] vm_area_dup+0x26/0x1d0 [ 1418.212090][ T1485] dup_mmap+0x6b8/0xea0 [ 1418.216083][ T1485] ? __delayed_free_task+0x20/0x20 [ 1418.221031][ T1485] ? mm_init+0x807/0x960 [ 1418.225110][ T1485] dup_mm+0x91/0x330 [ 1418.228840][ T1485] copy_mm+0x108/0x1b0 [ 1418.232748][ T1485] copy_process+0x1295/0x3250 [ 1418.237262][ T1485] ? proc_fail_nth_write+0x213/0x290 [ 1418.242380][ T1485] ? proc_fail_nth_read+0x220/0x220 [ 1418.247415][ T1485] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1418.252362][ T1485] ? vfs_write+0x9af/0x1050 [ 1418.256702][ T1485] ? irqentry_exit+0x30/0x40 [ 1418.261129][ T1485] kernel_clone+0x22d/0x990 [ 1418.265468][ T1485] ? file_end_write+0x1b0/0x1b0 [ 1418.270155][ T1485] ? __kasan_check_write+0x14/0x20 [ 1418.275101][ T1485] ? create_io_thread+0x1e0/0x1e0 [ 1418.279964][ T1485] ? __mutex_lock_slowpath+0x10/0x10 [ 1418.285084][ T1485] __x64_sys_clone+0x289/0x310 [ 1418.289875][ T1485] ? __do_sys_vfork+0x130/0x130 [ 1418.294554][ T1485] ? debug_smp_processor_id+0x17/0x20 [ 1418.299752][ T1485] do_syscall_64+0x44/0xd0 [ 1418.304007][ T1485] ? irqentry_exit+0x12/0x40 [ 1418.308435][ T1485] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1418.314159][ T1485] RIP: 0033:0x7f3bd36fc0a9 09:16:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f00000004c0)=@raw=[@exit, @func, @call={0x85, 0x0, 0x0, 0x13}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @ldst={0x0, 0x0, 0x6, 0x2}], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0x4c, &(0x7f0000000540)=""/76, 0x41100, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000680)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x6, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8100, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xb, 0x0, 0x1}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18520400000000003f0000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, r4, r5]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="6b12fe1c0800"], &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x3, 0x40000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r4]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f00000005c0)=0x1) [ 1418.318412][ T1485] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1418.337852][ T1485] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1418.346100][ T1485] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1418.353910][ T1485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1418.361725][ T1485] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1418.369541][ T1485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1418.377343][ T1485] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1418.385159][ T1485] 09:17:00 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xaf, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x4088, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x602, 0x85, 0xb, 0x0, 0x0, 0x3, 0x5, 0x0, 0x101, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='xen_mmu_flush_tlb_multi\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r4, &(0x7f0000000200)=0x3200000000000000, 0x43408) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 09:17:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1422.008507][ T1501] FAULT_INJECTION: forcing a failure. [ 1422.008507][ T1501] name failslab, interval 1, probability 0, space 0, times 0 [ 1422.021072][ T1501] CPU: 0 PID: 1501 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1422.031023][ T1501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1422.040927][ T1501] Call Trace: [ 1422.044042][ T1501] [ 1422.046819][ T1501] dump_stack_lvl+0x151/0x1b7 [ 1422.051332][ T1501] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1422.056737][ T1501] dump_stack+0x15/0x17 [ 1422.060720][ T1501] should_fail+0x3c0/0x510 [ 1422.065076][ T1501] __should_failslab+0x9f/0xe0 [ 1422.069660][ T1501] should_failslab+0x9/0x20 [ 1422.074011][ T1501] kmem_cache_alloc+0x4f/0x2f0 [ 1422.078604][ T1501] ? vm_area_dup+0x26/0x1d0 [ 1422.082945][ T1501] vm_area_dup+0x26/0x1d0 [ 1422.087105][ T1501] dup_mmap+0x6b8/0xea0 [ 1422.091101][ T1501] ? __delayed_free_task+0x20/0x20 [ 1422.096055][ T1501] ? mm_init+0x807/0x960 [ 1422.100124][ T1501] dup_mm+0x91/0x330 [ 1422.103856][ T1501] copy_mm+0x108/0x1b0 [ 1422.107765][ T1501] copy_process+0x1295/0x3250 [ 1422.112277][ T1501] ? proc_fail_nth_write+0x213/0x290 [ 1422.117396][ T1501] ? proc_fail_nth_read+0x220/0x220 [ 1422.122435][ T1501] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1422.127376][ T1501] ? vfs_write+0x9af/0x1050 [ 1422.131719][ T1501] kernel_clone+0x22d/0x990 [ 1422.136057][ T1501] ? create_io_thread+0x1e0/0x1e0 [ 1422.140932][ T1501] ? __mutex_lock_slowpath+0x10/0x10 [ 1422.146038][ T1501] __x64_sys_clone+0x289/0x310 [ 1422.150649][ T1501] ? __do_sys_vfork+0x130/0x130 [ 1422.155326][ T1501] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1422.161141][ T1501] do_syscall_64+0x44/0xd0 [ 1422.165403][ T1501] ? irqentry_exit+0x12/0x40 [ 1422.170339][ T1501] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1422.176069][ T1501] RIP: 0033:0x7f3bd36fc0a9 [ 1422.180321][ T1501] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1422.200285][ T1501] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1422.208531][ T1501] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1422.216340][ T1501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1422.224152][ T1501] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1422.231966][ T1501] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1422.239777][ T1501] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1422.247592][ T1501] 09:17:01 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="91a0615f229c6019031a919455a50febf368379c97517493c8199bb33fcb145f6d01d337410ee7d66720b33323118600c27c16d6e54945e909f234cf0e3fde9cc91ec175cd97843bd260f9f3910a00002ac35be2810eda76f2b3c877f47068a384fb4369050000000000000000000000000000000000009a89f661f7dd37f4ab3f2011810dd1f214f4a54b275202a804921d64a3a03b60e505166e9fc484f6f4a4dea287e816753be09fc3de29427098beaa3d5cc67c01f852181a87d6f56b0ae553978336497f50be5a01c623c531ddd6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x8, 0x6, 0x81, 0x0, 0x0, 0x20004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x642e, 0x3ff}, 0x4502, 0x61c4, 0x1, 0x3, 0x7, 0x7, 0x200, 0x0, 0x4, 0x0, 0x100000000}, r0, 0xd, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x7f) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000240)=0x2) 09:17:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f00000004c0)=@raw=[@exit, @func, @call={0x85, 0x0, 0x0, 0x13}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @ldst={0x0, 0x0, 0x6, 0x2}], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0x4c, &(0x7f0000000540)=""/76, 0x41100, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000680)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x6, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8100, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xb, 0x0, 0x1}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18520400000000003f0000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, r4, r5]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="6b12fe1c0800"], &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x3, 0x40000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r4]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f00000005c0)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f00000004c0)=@raw=[@exit, @func, @call={0x85, 0x0, 0x0, 0x13}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @ldst={0x0, 0x0, 0x6, 0x2}], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0x4c, &(0x7f0000000540)=""/76, 0x41100, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000680)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x6, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}, 0x80) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8100, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xb, 0x0, 0x1}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18520400000000003f0000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, r4, r5]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="6b12fe1c0800"], &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x3, 0x40000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r4]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f00000005c0)=0x1) (async) 09:17:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2839, 0xfffffffffffffffd, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0x3}, 0x2305, 0x7, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) gettid() r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000001500)='cpuset.mem_hardwall\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x9, &(0x7f0000001f80)=ANY=[@ANYRES8=r1, @ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x5, 0xa6, &(0x7f0000000ec0)=""/166, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000013c0)={0x4008, 0xb, 0xc8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, 0xffffffffffffffff, r1, r7, r5]}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000b80)=0x7, 0x12) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000001280)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x16\x1f\xd6\xa1\xbbh\xc8q|\x8c\v\x8c\x10E\xd4\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1c\x02\x00\x00\x00\x00\xd7\n\xf5{\xad\xc0Y\xa7\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x00') perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x91201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000003c0), 0x2}, 0x10084, 0x3f, 0x400, 0x0, 0x88, 0x800}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000a40)='ns/cgroup\x00') openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') recvmsg(r7, &(0x7f0000000300)={&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000980)=""/178, 0xb2}, {&(0x7f0000000c40)=""/229, 0xe5}, {&(0x7f00000011c0)=""/179, 0xb3}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000001400)=""/145, 0x91}], 0x8, &(0x7f0000000d40)=""/253, 0xfd}, 0x12062) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:01 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x950, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xff, 0x1, 0x20, 0x40, 0x0, 0x0, 0x8000, 0x10, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x3}, 0x240, 0x0, 0x3, 0x5, 0x0, 0x3, 0x6}, 0x0, 0x0, r0, 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rcu_utilization\x00'}, 0x10) r6 = syz_clone(0x51400, &(0x7f0000000080), 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000008c0)="d7b8520981d59344fdb776ae86effb11be06d4092ee5046f5ebdd15040251fa8b9c5d04fa394a34e159b0ab00184209611ba35a4e6f784ca3c69aa4c4bb09ed338f2a8de93240c862b2e16b814cc60f865351e2c79ade2ec2c11d3f29ec5096306c508295e8eaa11118b3d25b22fddcb62a7e79b0e5750bb93ebb07ba0f213554760436c055fbf16644c10aa4e61eddf679fcbd9ad06f4e8f73aa05e83b03aa8f3ad229fc348c64d43474ab985f093a63096a0991b6e1d524fc329959e5b616f919572508108e2d93646a3b36b51df8e8e6eb2f5607dd7cb6924b91770a14a8c1176eea7365f704b0b0a5939ec6b2345ed32903c6cfe") (async) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x4, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x4, 0x81, 0x8, 0x5, 0x7, 0x5, 0x8, 0x0, 0xfff, 0x0, 0xa7}, 0xffffffffffffffff, 0x6, r4, 0x1) r7 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) (async) recvmsg(r7, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000180)=0x4) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x2, 0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x1, 0x515}, 0x8108, 0x3, 0x5, 0x4, 0x0, 0xfffffc00, 0xc, 0x0, 0x2}, r6, 0x0, r5, 0xb) (async) r8 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0xfd, 0x2, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x101}, 0x8000, 0x101, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ffffffc, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x4, 0x4, 0x7, 0x0, 0x0, 0x9, 0x8800, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x0, 0x7}, 0x10000, 0x3, 0x8, 0x2, 0x378b3377, 0x9, 0x1, 0x0, 0xffffffe0, 0x0, 0x80000001}, r6, 0x2, r8, 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r9 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x7, 0x1f, 0x1, 0x0, 0x0, 0xbff, 0x8100, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe3, 0x1, @perf_config_ext={0x0, 0x954}, 0x820a0, 0x8, 0x0, 0x5, 0x2, 0x0, 0x8, 0x0, 0xe402, 0x0, 0x2}, r6, 0x7, r9, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r10, &(0x7f0000000000), 0x248800) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x10) [ 1422.917763][ T1512] FAULT_INJECTION: forcing a failure. [ 1422.917763][ T1512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1422.942266][ T1512] CPU: 0 PID: 1512 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1422.952252][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1422.962150][ T1512] Call Trace: [ 1422.965271][ T1512] [ 1422.968049][ T1512] dump_stack_lvl+0x151/0x1b7 [ 1422.972565][ T1512] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1422.977874][ T1512] dump_stack+0x15/0x17 [ 1422.981848][ T1512] should_fail+0x3c0/0x510 [ 1422.986104][ T1512] should_fail_alloc_page+0x58/0x70 [ 1422.991135][ T1512] __alloc_pages+0x1de/0x7c0 [ 1422.995569][ T1512] ? finish_task_switch+0x17b/0x710 [ 1423.000597][ T1512] ? __count_vm_events+0x30/0x30 [ 1423.005373][ T1512] pte_alloc_one+0x73/0x1b0 [ 1423.009707][ T1512] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1423.014745][ T1512] __pte_alloc+0x86/0x350 [ 1423.018909][ T1512] ? irqentry_exit+0x30/0x40 [ 1423.023335][ T1512] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1423.028978][ T1512] ? free_pgtables+0x210/0x210 [ 1423.033581][ T1512] copy_pte_range+0x1b1f/0x20b0 [ 1423.038266][ T1512] ? __kunmap_atomic+0x80/0x80 [ 1423.042862][ T1512] ? irqentry_exit+0x30/0x40 [ 1423.047289][ T1512] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1423.052928][ T1512] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1423.058922][ T1512] ? copy_pte_range+0x1a16/0x20b0 [ 1423.063778][ T1512] copy_page_range+0xc1e/0x1090 [ 1423.068471][ T1512] ? pfn_valid+0x1e0/0x1e0 [ 1423.072722][ T1512] dup_mmap+0x99f/0xea0 [ 1423.076713][ T1512] ? __delayed_free_task+0x20/0x20 [ 1423.081664][ T1512] ? mm_init+0x807/0x960 [ 1423.085739][ T1512] dup_mm+0x91/0x330 [ 1423.089472][ T1512] copy_mm+0x108/0x1b0 [ 1423.093379][ T1512] copy_process+0x1295/0x3250 [ 1423.097892][ T1512] ? timerqueue_add+0x25c/0x280 [ 1423.102576][ T1512] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1423.107523][ T1512] ? irqentry_exit+0x30/0x40 [ 1423.111952][ T1512] kernel_clone+0x22d/0x990 [ 1423.116288][ T1512] ? irqentry_exit+0x30/0x40 [ 1423.120716][ T1512] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1423.126358][ T1512] ? create_io_thread+0x1e0/0x1e0 [ 1423.131220][ T1512] __x64_sys_clone+0x289/0x310 [ 1423.135816][ T1512] ? __do_sys_vfork+0x130/0x130 [ 1423.140504][ T1512] ? debug_smp_processor_id+0x17/0x20 [ 1423.145713][ T1512] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1423.151614][ T1512] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1423.157519][ T1512] do_syscall_64+0x44/0xd0 [ 1423.161768][ T1512] ? irqentry_exit+0x12/0x40 [ 1423.166196][ T1512] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1423.171921][ T1512] RIP: 0033:0x7f3bd36fc0a9 [ 1423.176178][ T1512] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1423.195629][ T1512] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1423.203861][ T1512] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1423.211677][ T1512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 09:17:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f00000004c0)=@raw=[@exit, @func, @call={0x85, 0x0, 0x0, 0x13}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @ldst={0x0, 0x0, 0x6, 0x2}], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0x4c, &(0x7f0000000540)=""/76, 0x41100, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000680)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x6, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8100, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xb, 0x0, 0x1}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18520400000000003f0000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, r4, r5]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="6b12fe1c0800"], &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x3, 0x40000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r4]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f00000005c0)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f00000004c0)=@raw=[@exit, @func, @call={0x85, 0x0, 0x0, 0x13}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @ldst={0x0, 0x0, 0x6, 0x2}], &(0x7f0000000300)='GPL\x00', 0x7fffffff, 0x4c, &(0x7f0000000540)=""/76, 0x41100, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000680)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x6, 0x1000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}, 0x80) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8100, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0xb, 0x0, 0x1}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18520400000000003f0000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x41, &(0x7f00000004c0)=""/65, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r4, r4, r5]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="6b12fe1c0800"], &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x0, 0x3, 0x40000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r4]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, &(0x7f00000005c0)=0x1) (async) 09:17:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1423.219485][ T1512] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1423.227297][ T1512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1423.235111][ T1512] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1423.243194][ T1512] [ 1423.288836][ T1538] FAULT_INJECTION: forcing a failure. [ 1423.288836][ T1538] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.317787][ T1538] CPU: 0 PID: 1538 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1423.327774][ T1538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1423.337666][ T1538] Call Trace: [ 1423.340793][ T1538] [ 1423.343564][ T1538] dump_stack_lvl+0x151/0x1b7 [ 1423.348089][ T1538] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1423.353385][ T1538] ? dup_mmap+0x63b/0xea0 [ 1423.357555][ T1538] dump_stack+0x15/0x17 [ 1423.361534][ T1538] should_fail+0x3c0/0x510 [ 1423.365789][ T1538] __should_failslab+0x9f/0xe0 [ 1423.370385][ T1538] should_failslab+0x9/0x20 [ 1423.374726][ T1538] kmem_cache_alloc+0x4f/0x2f0 [ 1423.379325][ T1538] ? vm_area_dup+0x26/0x1d0 [ 1423.383664][ T1538] vm_area_dup+0x26/0x1d0 [ 1423.387828][ T1538] dup_mmap+0x6b8/0xea0 [ 1423.391826][ T1538] ? __delayed_free_task+0x20/0x20 [ 1423.396779][ T1538] ? mm_init+0x807/0x960 [ 1423.400849][ T1538] dup_mm+0x91/0x330 [ 1423.404582][ T1538] copy_mm+0x108/0x1b0 [ 1423.408486][ T1538] copy_process+0x1295/0x3250 [ 1423.413088][ T1538] ? proc_fail_nth_write+0x213/0x290 [ 1423.418208][ T1538] ? proc_fail_nth_read+0x220/0x220 [ 1423.423329][ T1538] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1423.428275][ T1538] ? vfs_write+0x9af/0x1050 [ 1423.432621][ T1538] kernel_clone+0x22d/0x990 [ 1423.436957][ T1538] ? file_end_write+0x1b0/0x1b0 [ 1423.441646][ T1538] ? __kasan_check_write+0x14/0x20 [ 1423.446589][ T1538] ? create_io_thread+0x1e0/0x1e0 [ 1423.451451][ T1538] ? __mutex_lock_slowpath+0x10/0x10 [ 1423.456568][ T1538] __x64_sys_clone+0x289/0x310 [ 1423.461171][ T1538] ? __do_sys_vfork+0x130/0x130 [ 1423.465858][ T1538] ? debug_smp_processor_id+0x17/0x20 [ 1423.471066][ T1538] do_syscall_64+0x44/0xd0 [ 1423.475317][ T1538] ? irqentry_exit+0x12/0x40 [ 1423.479741][ T1538] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1423.485469][ T1538] RIP: 0033:0x7f3bd36fc0a9 [ 1423.489724][ T1538] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1423.509253][ T1538] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1423.517498][ T1538] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1423.525311][ T1538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 09:17:02 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x1000, 0x18}, 0xc) 09:17:02 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x1000, 0x18}, 0xc) 09:17:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:02 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x1000, 0x18}, 0xc) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r2, 0x1000, 0x18}, 0xc) (async) [ 1423.533121][ T1538] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1423.540930][ T1538] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1423.548743][ T1538] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1423.556560][ T1538] [ 1423.604197][ T1569] FAULT_INJECTION: forcing a failure. [ 1423.604197][ T1569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1423.617463][ T1569] CPU: 1 PID: 1569 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1423.627413][ T1569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1423.637308][ T1569] Call Trace: [ 1423.640433][ T1569] [ 1423.643209][ T1569] dump_stack_lvl+0x151/0x1b7 [ 1423.647725][ T1569] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1423.653024][ T1569] dump_stack+0x15/0x17 [ 1423.657009][ T1569] should_fail+0x3c0/0x510 [ 1423.661264][ T1569] should_fail_alloc_page+0x58/0x70 [ 1423.666295][ T1569] __alloc_pages+0x1de/0x7c0 [ 1423.670725][ T1569] ? __count_vm_events+0x30/0x30 [ 1423.675496][ T1569] ? __this_cpu_preempt_check+0x13/0x20 [ 1423.680880][ T1569] pte_alloc_one+0x73/0x1b0 [ 1423.685218][ T1569] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1423.690260][ T1569] __pte_alloc+0x86/0x350 [ 1423.694417][ T1569] ? irqentry_exit+0x30/0x40 [ 1423.698843][ T1569] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1423.704488][ T1569] ? free_pgtables+0x210/0x210 [ 1423.709092][ T1569] copy_pte_range+0x1b1f/0x20b0 [ 1423.713782][ T1569] ? __kunmap_atomic+0x80/0x80 [ 1423.718374][ T1569] ? __kasan_slab_alloc+0xc4/0xe0 [ 1423.723232][ T1569] ? __kasan_slab_alloc+0xb2/0xe0 [ 1423.728095][ T1569] ? kmem_cache_alloc+0x189/0x2f0 [ 1423.732958][ T1569] ? vm_area_dup+0x26/0x1d0 [ 1423.737294][ T1569] ? dup_mmap+0x6b8/0xea0 [ 1423.741459][ T1569] ? dup_mm+0x91/0x330 [ 1423.745367][ T1569] ? copy_mm+0x108/0x1b0 [ 1423.749445][ T1569] ? copy_process+0x1295/0x3250 [ 1423.754131][ T1569] ? kernel_clone+0x22d/0x990 [ 1423.758645][ T1569] ? __x64_sys_clone+0x289/0x310 [ 1423.763419][ T1569] ? do_syscall_64+0x44/0xd0 [ 1423.767845][ T1569] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1423.773748][ T1569] copy_page_range+0xc1e/0x1090 [ 1423.778442][ T1569] ? pfn_valid+0x1e0/0x1e0 [ 1423.782691][ T1569] dup_mmap+0x99f/0xea0 [ 1423.786681][ T1569] ? __delayed_free_task+0x20/0x20 [ 1423.791627][ T1569] ? mm_init+0x807/0x960 [ 1423.795708][ T1569] dup_mm+0x91/0x330 [ 1423.799439][ T1569] copy_mm+0x108/0x1b0 [ 1423.803346][ T1569] copy_process+0x1295/0x3250 [ 1423.807863][ T1569] ? timerqueue_add+0x25c/0x280 [ 1423.812547][ T1569] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1423.817492][ T1569] kernel_clone+0x22d/0x990 [ 1423.821831][ T1569] ? __kasan_check_write+0x14/0x20 [ 1423.826779][ T1569] ? create_io_thread+0x1e0/0x1e0 [ 1423.831639][ T1569] ? lapic_next_event+0x5f/0x70 [ 1423.836326][ T1569] ? clockevents_program_event+0x240/0x310 [ 1423.841968][ T1569] __x64_sys_clone+0x289/0x310 [ 1423.846570][ T1569] ? __do_sys_vfork+0x130/0x130 [ 1423.851262][ T1569] ? debug_smp_processor_id+0x17/0x20 [ 1423.856463][ T1569] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1423.862366][ T1569] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1423.868268][ T1569] do_syscall_64+0x44/0xd0 [ 1423.872519][ T1569] ? irqentry_exit+0x12/0x40 [ 1423.876952][ T1569] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1423.882675][ T1569] RIP: 0033:0x7f3bd36fc0a9 [ 1423.886926][ T1569] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1423.906371][ T1569] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1423.914614][ T1569] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1423.922426][ T1569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1423.930241][ T1569] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1423.938049][ T1569] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1423.945861][ T1569] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1423.953676][ T1569] 09:17:02 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x1ff) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0xd002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRES16=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000, 0xfffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r3, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2abbaa02fe8cc23d}, 0x21, 0x46e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r2, 0x4, r3, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x27fff) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x20, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x4, @perf_config_ext={0x2a, 0x80000001}, 0xa, 0x9, 0x1, 0x6, 0x3, 0x5, 0x40, 0x0, 0xb89, 0x0, 0x4}, r2, 0xf, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r2, 0x10, r5, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0xea, 0x80, 0x6, 0x0, 0x20, 0x200, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0xb73}, 0xb402, 0x5, 0x1, 0x5, 0x89f, 0x4, 0xa20, 0x0, 0x9, 0x0, 0x2}, r2, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000540), 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0x748c202d00016800) 09:17:06 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) (async, rerun: 64) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="91a0615f229c6019031a919455a50febf368379c97517493c8199bb33fcb145f6d01d337410ee7d66720b33323118600c27c16d6e54945e909f234cf0e3fde9cc91ec175cd97843bd260f9f3910a00002ac35be2810eda76f2b3c877f47068a384fb4369050000000000000000000000000000000000009a89f661f7dd37f4ab3f2011810dd1f214f4a54b275202a804921d64a3a03b60e505166e9fc484f6f4a4dea287e816753be09fc3de29427098beaa3d5cc67c01f852181a87d6f56b0ae553978336497f50be5a01c623c531ddd6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x80) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x6, 0x8, 0x6, 0x81, 0x0, 0x0, 0x20004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x642e, 0x3ff}, 0x4502, 0x61c4, 0x1, 0x3, 0x7, 0x7, 0x200, 0x0, 0x4, 0x0, 0x100000000}, r0, 0xd, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x7f) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000240)=0x2) 09:17:06 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2839, 0xfffffffffffffffd, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0x3}, 0x2305, 0x7, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) gettid() r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000001500)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x9, &(0x7f0000001f80)=ANY=[@ANYRES8=r1, @ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x5, 0xa6, &(0x7f0000000ec0)=""/166, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000013c0)={0x4008, 0xb, 0xc8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, 0xffffffffffffffff, r1, r7, r5]}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000b80)=0x7, 0x12) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000001280)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x16\x1f\xd6\xa1\xbbh\xc8q|\x8c\v\x8c\x10E\xd4\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1c\x02\x00\x00\x00\x00\xd7\n\xf5{\xad\xc0Y\xa7\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x00') (async) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x91201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000003c0), 0x2}, 0x10084, 0x3f, 0x400, 0x0, 0x88, 0x800}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000a40)='ns/cgroup\x00') (async) openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') recvmsg(r7, &(0x7f0000000300)={&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000980)=""/178, 0xb2}, {&(0x7f0000000c40)=""/229, 0xe5}, {&(0x7f00000011c0)=""/179, 0xb3}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000001400)=""/145, 0x91}], 0x8, &(0x7f0000000d40)=""/253, 0xfd}, 0x12062) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 1427.968697][ T1578] dump_stack_lvl+0x151/0x1b7 [ 1427.973220][ T1578] ? bfq_pos_tree_add_move+0x43e/0x43e 09:17:06 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x1ff) (async) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0xd002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRES16=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000, 0xfffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r3, 0x0) (async) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2abbaa02fe8cc23d}, 0x21, 0x46e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r2, 0x4, r3, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x27fff) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x20, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x4, @perf_config_ext={0x2a, 0x80000001}, 0xa, 0x9, 0x1, 0x6, 0x3, 0x5, 0x40, 0x0, 0xb89, 0x0, 0x4}, r2, 0xf, r5, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r2, 0x10, r5, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0xea, 0x80, 0x6, 0x0, 0x20, 0x200, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0xb73}, 0xb402, 0x5, 0x1, 0x5, 0x89f, 0x4, 0xa20, 0x0, 0x9, 0x0, 0x2}, r2, 0xe, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000540), 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0x748c202d00016800) 09:17:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002bc0)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x800000}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc}]}, &(0x7f0000000940)='GPL\x00', 0x1, 0xf7, &(0x7f0000000980)=""/247, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:17:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002bc0)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x800000}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc}]}, &(0x7f0000000940)='GPL\x00', 0x1, 0xf7, &(0x7f0000000980)=""/247, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1427.978507][ T1578] dump_stack+0x15/0x17 [ 1427.982501][ T1578] should_fail+0x3c0/0x510 [ 1427.986754][ T1578] __should_failslab+0x9f/0xe0 [ 1427.991354][ T1578] should_failslab+0x9/0x20 [ 1427.995696][ T1578] kmem_cache_alloc+0x4f/0x2f0 [ 1428.000292][ T1578] ? vm_area_dup+0x26/0x1d0 [ 1428.004723][ T1578] vm_area_dup+0x26/0x1d0 [ 1428.008976][ T1578] dup_mmap+0x6b8/0xea0 [ 1428.012972][ T1578] ? __delayed_free_task+0x20/0x20 [ 1428.017922][ T1578] ? mm_init+0x807/0x960 [ 1428.021989][ T1578] dup_mm+0x91/0x330 [ 1428.025724][ T1578] copy_mm+0x108/0x1b0 09:17:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002bc0)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x800000}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc}]}, &(0x7f0000000940)='GPL\x00', 0x1, 0xf7, &(0x7f0000000980)=""/247, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002bc0)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x800000}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc}]}, &(0x7f0000000940)='GPL\x00', 0x1, 0xf7, &(0x7f0000000980)=""/247, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) 09:17:06 executing program 5: syz_clone(0x42200000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000}, 0x0, 0xffefffffffffffff, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r2, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2abbaa02fe8cc23d}, 0x21, 0x46e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r0, 0x4, r2, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x27fff) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x20, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x4, @perf_config_ext={0x2a, 0x80000001}, 0xa, 0x9, 0x1, 0x6, 0x3, 0x5, 0x40, 0x0, 0xb89, 0x0, 0x4}, r0, 0xf, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r0, 0x10, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x4, 0x1, 0x5, 0x0, 0x3, 0x90090, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x33, 0x0, 0x2, 0xffff, 0x3, 0x6, 0x0, 0x1000, 0x0, 0x7f}, r0, 0xa, r5, 0x8) [ 1428.029628][ T1578] copy_process+0x1295/0x3250 [ 1428.034148][ T1578] ? timerqueue_add+0x25c/0x280 [ 1428.038830][ T1578] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1428.043775][ T1578] ? irqentry_exit+0x30/0x40 [ 1428.048205][ T1578] kernel_clone+0x22d/0x990 [ 1428.052542][ T1578] ? __kasan_check_write+0x14/0x20 [ 1428.057489][ T1578] ? create_io_thread+0x1e0/0x1e0 [ 1428.062350][ T1578] ? lapic_next_event+0x5f/0x70 [ 1428.067039][ T1578] ? clockevents_program_event+0x240/0x310 [ 1428.073039][ T1578] __x64_sys_clone+0x289/0x310 09:17:06 executing program 5: syz_clone(0x42200000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000}, 0x0, 0xffefffffffffffff, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r2, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2abbaa02fe8cc23d}, 0x21, 0x46e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r0, 0x4, r2, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x27fff) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x20, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x4, @perf_config_ext={0x2a, 0x80000001}, 0xa, 0x9, 0x1, 0x6, 0x3, 0x5, 0x40, 0x0, 0xb89, 0x0, 0x4}, r0, 0xf, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r0, 0x10, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x4, 0x1, 0x5, 0x0, 0x3, 0x90090, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x33, 0x0, 0x2, 0xffff, 0x3, 0x6, 0x0, 0x1000, 0x0, 0x7f}, r0, 0xa, r5, 0x8) syz_clone(0x42200000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) gettid() (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000}, 0x0, 0xffefffffffffffff, r1, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r2, 0x0) (async) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2abbaa02fe8cc23d}, 0x21, 0x46e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r0, 0x4, r2, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x27fff) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) (async) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x20, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x4, @perf_config_ext={0x2a, 0x80000001}, 0xa, 0x9, 0x1, 0x6, 0x3, 0x5, 0x40, 0x0, 0xb89, 0x0, 0x4}, r0, 0xf, r4, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r0, 0x10, r4, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) close(r5) (async) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x4, 0x1, 0x5, 0x0, 0x3, 0x90090, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x33, 0x0, 0x2, 0xffff, 0x3, 0x6, 0x0, 0x1000, 0x0, 0x7f}, r0, 0xa, r5, 0x8) (async) [ 1428.077654][ T1578] ? __do_sys_vfork+0x130/0x130 [ 1428.082327][ T1578] ? debug_smp_processor_id+0x17/0x20 [ 1428.087528][ T1578] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1428.093431][ T1578] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1428.099338][ T1578] do_syscall_64+0x44/0xd0 [ 1428.103588][ T1578] ? irqentry_exit+0x12/0x40 [ 1428.108034][ T1578] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1428.113740][ T1578] RIP: 0033:0x7f3bd36fc0a9 [ 1428.118010][ T1578] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1428.137443][ T1578] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1428.145680][ T1578] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1428.153505][ T1578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1428.161307][ T1578] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.169120][ T1578] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1428.176928][ T1578] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1428.184744][ T1578] 09:17:12 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x33100) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 09:17:12 executing program 5: syz_clone(0x42200000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000}, 0x0, 0xffefffffffffffff, r1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r2, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0xb7, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x2abbaa02fe8cc23d}, 0x21, 0x46e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r0, 0x4, r2, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x27fff) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x20, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x4, @perf_config_ext={0x2a, 0x80000001}, 0xa, 0x9, 0x1, 0x6, 0x3, 0x5, 0x40, 0x0, 0xb89, 0x0, 0x4}, r0, 0xf, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r0, 0x10, r4, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x4, 0x1, 0x5, 0x0, 0x3, 0x90090, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x81, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x33, 0x0, 0x2, 0xffff, 0x3, 0x6, 0x0, 0x1000, 0x0, 0x7f}, r0, 0xa, r5, 0x8) 09:17:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2839, 0xfffffffffffffffd, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (rerun: 32) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0x3}, 0x2305, 0x7, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) gettid() (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000001500)='cpuset.mem_hardwall\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000014c0)='memory.stat\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x9, &(0x7f0000001f80)=ANY=[@ANYRES8=r1, @ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x5, 0xa6, &(0x7f0000000ec0)=""/166, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000013c0)={0x4008, 0xb, 0xc8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, 0xffffffffffffffff, r1, r7, r5]}, 0x80) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000b80)=0x7, 0x12) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000001280)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x16\x1f\xd6\xa1\xbbh\xc8q|\x8c\v\x8c\x10E\xd4\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1c\x02\x00\x00\x00\x00\xd7\n\xf5{\xad\xc0Y\xa7\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x00') (async) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x91201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000003c0), 0x2}, 0x10084, 0x3f, 0x400, 0x0, 0x88, 0x800}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000a40)='ns/cgroup\x00') openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') (async) recvmsg(r7, &(0x7f0000000300)={&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/62, 0x3e}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f0000000980)=""/178, 0xb2}, {&(0x7f0000000c40)=""/229, 0xe5}, {&(0x7f00000011c0)=""/179, 0xb3}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000001400)=""/145, 0x91}], 0x8, &(0x7f0000000d40)=""/253, 0xfd}, 0x12062) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:12 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700060800000000000000008500000075000000070000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6af9cbe379120189, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x4, 0x4, 0x0, 0xfffffffffffffffc, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x80, 0x47, &(0x7f0000000240)=""/71, 0x41000, 0x10, '\x00', 0x0, 0xe, r1, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x6, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0x1, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mm_lru_insertion\x00', r0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) [ 1434.144227][ T1652] FAULT_INJECTION: forcing a failure. [ 1434.144227][ T1652] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.170601][ T1652] CPU: 1 PID: 1652 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1434.180592][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1434.190481][ T1652] Call Trace: [ 1434.193960][ T1652] [ 1434.196728][ T1652] dump_stack_lvl+0x151/0x1b7 [ 1434.201243][ T1652] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1434.206546][ T1652] dump_stack+0x15/0x17 [ 1434.210530][ T1652] should_fail+0x3c0/0x510 [ 1434.214782][ T1652] __should_failslab+0x9f/0xe0 [ 1434.219380][ T1652] should_failslab+0x9/0x20 [ 1434.223723][ T1652] kmem_cache_alloc+0x4f/0x2f0 [ 1434.228324][ T1652] ? vm_area_dup+0x26/0x1d0 [ 1434.232662][ T1652] vm_area_dup+0x26/0x1d0 [ 1434.236857][ T1652] dup_mmap+0x6b8/0xea0 [ 1434.240837][ T1652] ? __delayed_free_task+0x20/0x20 [ 1434.245766][ T1652] ? mm_init+0x807/0x960 [ 1434.249846][ T1652] dup_mm+0x91/0x330 [ 1434.253579][ T1652] copy_mm+0x108/0x1b0 [ 1434.257485][ T1652] copy_process+0x1295/0x3250 [ 1434.262005][ T1652] ? proc_fail_nth_write+0x213/0x290 [ 1434.267116][ T1652] ? proc_fail_nth_read+0x220/0x220 [ 1434.272156][ T1652] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1434.277098][ T1652] ? vfs_write+0x9af/0x1050 [ 1434.281446][ T1652] kernel_clone+0x22d/0x990 [ 1434.285780][ T1652] ? file_end_write+0x1b0/0x1b0 [ 1434.290464][ T1652] ? create_io_thread+0x1e0/0x1e0 [ 1434.295327][ T1652] ? __mutex_lock_slowpath+0x10/0x10 [ 1434.300449][ T1652] __x64_sys_clone+0x289/0x310 [ 1434.305049][ T1652] ? __do_sys_vfork+0x130/0x130 [ 1434.309737][ T1652] ? debug_smp_processor_id+0x17/0x20 [ 1434.314942][ T1652] do_syscall_64+0x44/0xd0 [ 1434.319196][ T1652] ? irqentry_exit+0x12/0x40 [ 1434.323623][ T1652] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1434.329349][ T1652] RIP: 0033:0x7f3bd36fc0a9 [ 1434.333604][ T1652] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1434.353045][ T1652] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1434.361287][ T1652] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1434.369099][ T1652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1434.376911][ T1652] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1434.384735][ T1652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:17:12 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700060800000000000000008500000075000000070000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6af9cbe379120189, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x4, 0x4, 0x0, 0xfffffffffffffffc, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x80, 0x47, &(0x7f0000000240)=""/71, 0x41000, 0x10, '\x00', 0x0, 0xe, r1, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x6, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0x1, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mm_lru_insertion\x00', r0}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) 09:17:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1434.392535][ T1652] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1434.400440][ T1652] 09:17:12 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700060800000000000000008500000075000000070000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6af9cbe379120189, 0x1, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x4, 0x4, 0x0, 0xfffffffffffffffc, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x80, 0x47, &(0x7f0000000240)=""/71, 0x41000, 0x10, '\x00', 0x0, 0xe, r1, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x6, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0x1, r2]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mm_lru_insertion\x00', r0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x7bc03) (async) openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) [ 1434.444310][ T1663] FAULT_INJECTION: forcing a failure. [ 1434.444310][ T1663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1434.458327][ T1663] CPU: 0 PID: 1663 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1434.468311][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1434.478212][ T1663] Call Trace: [ 1434.481324][ T1663] [ 1434.484101][ T1663] dump_stack_lvl+0x151/0x1b7 [ 1434.488619][ T1663] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1434.494256][ T1663] dump_stack+0x15/0x17 [ 1434.498246][ T1663] should_fail+0x3c0/0x510 [ 1434.502500][ T1663] should_fail_alloc_page+0x58/0x70 [ 1434.507534][ T1663] __alloc_pages+0x1de/0x7c0 [ 1434.511963][ T1663] ? __count_vm_events+0x30/0x30 [ 1434.516743][ T1663] ? irqentry_exit+0x30/0x40 [ 1434.521160][ T1663] pte_alloc_one+0x73/0x1b0 [ 1434.525500][ T1663] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1434.530536][ T1663] __pte_alloc+0x86/0x350 [ 1434.534700][ T1663] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1434.540342][ T1663] ? free_pgtables+0x210/0x210 [ 1434.544943][ T1663] ? copy_pte_range+0xbc5/0x20b0 [ 1434.549714][ T1663] ? copy_pte_range+0xba5/0x20b0 [ 1434.554491][ T1663] copy_pte_range+0x1b1f/0x20b0 [ 1434.559188][ T1663] ? __kunmap_atomic+0x80/0x80 [ 1434.563776][ T1663] ? __kasan_slab_alloc+0xc4/0xe0 [ 1434.568641][ T1663] ? __kasan_slab_alloc+0xb2/0xe0 [ 1434.573499][ T1663] ? kmem_cache_alloc+0x189/0x2f0 [ 1434.578357][ T1663] ? vm_area_dup+0x26/0x1d0 [ 1434.582699][ T1663] ? dup_mmap+0x6b8/0xea0 [ 1434.586863][ T1663] ? dup_mm+0x91/0x330 [ 1434.590769][ T1663] ? copy_mm+0x108/0x1b0 [ 1434.595194][ T1663] ? copy_process+0x1295/0x3250 [ 1434.599883][ T1663] ? kernel_clone+0x22d/0x990 [ 1434.604397][ T1663] ? __x64_sys_clone+0x289/0x310 [ 1434.609168][ T1663] ? do_syscall_64+0x44/0xd0 [ 1434.613620][ T1663] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1434.619501][ T1663] copy_page_range+0xc1e/0x1090 [ 1434.624193][ T1663] ? pfn_valid+0x1e0/0x1e0 [ 1434.628450][ T1663] dup_mmap+0x99f/0xea0 [ 1434.632432][ T1663] ? __delayed_free_task+0x20/0x20 [ 1434.637379][ T1663] ? mm_init+0x807/0x960 [ 1434.641464][ T1663] dup_mm+0x91/0x330 [ 1434.645191][ T1663] copy_mm+0x108/0x1b0 [ 1434.649101][ T1663] copy_process+0x1295/0x3250 [ 1434.653616][ T1663] ? timerqueue_add+0x25c/0x280 [ 1434.658297][ T1663] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1434.663243][ T1663] ? do_handle_mm_fault+0x1673/0x2370 [ 1434.668455][ T1663] kernel_clone+0x22d/0x990 [ 1434.672794][ T1663] ? irqentry_exit+0x30/0x40 [ 1434.677224][ T1663] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1434.682860][ T1663] ? create_io_thread+0x1e0/0x1e0 [ 1434.687722][ T1663] __x64_sys_clone+0x289/0x310 [ 1434.692321][ T1663] ? __do_sys_vfork+0x130/0x130 [ 1434.697008][ T1663] ? debug_smp_processor_id+0x17/0x20 [ 1434.702214][ T1663] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1434.708117][ T1663] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1434.714018][ T1663] do_syscall_64+0x44/0xd0 [ 1434.718272][ T1663] ? irqentry_exit+0x12/0x40 [ 1434.722703][ T1663] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1434.728428][ T1663] RIP: 0033:0x7f3bd36fc0a9 [ 1434.732861][ T1663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1434.752295][ T1663] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1434.760542][ T1663] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1434.768350][ T1663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1434.776162][ T1663] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1434.783972][ T1663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:17:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 09:17:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 09:17:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1434.791792][ T1663] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1434.799602][ T1663] [ 1434.850187][ T1676] FAULT_INJECTION: forcing a failure. [ 1434.850187][ T1676] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.863284][ T1676] CPU: 0 PID: 1676 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1434.873257][ T1676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1434.883145][ T1676] Call Trace: [ 1434.886271][ T1676] [ 1434.889048][ T1676] dump_stack_lvl+0x151/0x1b7 [ 1434.893565][ T1676] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1434.898870][ T1676] dump_stack+0x15/0x17 [ 1434.902847][ T1676] should_fail+0x3c0/0x510 [ 1434.907100][ T1676] __should_failslab+0x9f/0xe0 [ 1434.911703][ T1676] should_failslab+0x9/0x20 [ 1434.916039][ T1676] kmem_cache_alloc+0x4f/0x2f0 [ 1434.920640][ T1676] ? vm_area_dup+0x26/0x1d0 [ 1434.924980][ T1676] vm_area_dup+0x26/0x1d0 [ 1434.929146][ T1676] dup_mmap+0x6b8/0xea0 [ 1434.933140][ T1676] ? __delayed_free_task+0x20/0x20 [ 1434.938089][ T1676] ? mm_init+0x807/0x960 [ 1434.942165][ T1676] dup_mm+0x91/0x330 [ 1434.945897][ T1676] copy_mm+0x108/0x1b0 [ 1434.949803][ T1676] copy_process+0x1295/0x3250 [ 1434.954318][ T1676] ? timerqueue_add+0x25c/0x280 [ 1434.959003][ T1676] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1434.963951][ T1676] kernel_clone+0x22d/0x990 [ 1434.968296][ T1676] ? __kasan_check_write+0x14/0x20 [ 1434.973237][ T1676] ? create_io_thread+0x1e0/0x1e0 [ 1434.978098][ T1676] ? lapic_next_event+0x5f/0x70 [ 1434.982785][ T1676] ? clockevents_program_event+0x240/0x310 [ 1434.988430][ T1676] __x64_sys_clone+0x289/0x310 [ 1434.993028][ T1676] ? __do_sys_vfork+0x130/0x130 [ 1434.997716][ T1676] ? debug_smp_processor_id+0x17/0x20 [ 1435.002920][ T1676] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1435.008823][ T1676] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1435.014736][ T1676] do_syscall_64+0x44/0xd0 [ 1435.018977][ T1676] ? irqentry_exit+0x12/0x40 [ 1435.023404][ T1676] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1435.029132][ T1676] RIP: 0033:0x7f3bd36fc0a9 [ 1435.033387][ T1676] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1435.052827][ T1676] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1435.061072][ T1676] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1435.068885][ T1676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1435.076697][ T1676] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1435.084510][ T1676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1435.092322][ T1676] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1435.100133][ T1676] 09:17:17 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x33100) (async, rerun: 64) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) (rerun: 64) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 09:17:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 09:17:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:17 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xe, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x41}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @ldst={0x2, 0x2, 0x6, 0x8, 0x1, 0xfffffffffffffff8, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x9, 0xb, 0x18, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x20}], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xed, &(0x7f0000000300)=""/237, 0x41100, 0x6, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x4, 0x5}, 0x10, 0x724, r0, 0x0, &(0x7f0000000480)=[0x1]}, 0x80) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67401fa694b61b7, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0x6, 0x7f}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1]}, 0x80) 09:17:17 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd}, 0x0, 0xbfffffffffffffff, r1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x660c, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x1200f, 0x3, 0x0, 0x9, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/cgroup\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) r5 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x0, 0x0, 0x1b9, 0x1, 0x4, 0x800000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r6, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x80, 0x88, 0x9, 0x6, 0x0, 0x80000001, 0x400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000003c0), 0xc}, 0x21, 0x446e41a9b, 0x3, 0x1, 0x0, 0x200, 0x401, 0x0, 0xe390}, r3, 0x4, r6, 0x8) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r7) (async) write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1) (async) write$cgroup_int(r7, &(0x7f0000000280)=0x8000000000000001, 0x12) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x27fff) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r8}, 0x8) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x2, 0x20, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1490, 0x4, @perf_config_ext={0x2a, 0x80000001}, 0xa, 0x9, 0x1, 0x6, 0x3, 0x5, 0x40, 0x0, 0xb89, 0x0, 0x4}, r5, 0xf, r9, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x1, 0x1f, 0x0, 0x5, 0x11, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x93, 0x5}, 0x200e, 0x3, 0x0, 0x0, 0x6, 0x900, 0x9, 0x0, 0x100, 0x0, 0x1ff}, r5, 0x10, r9, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x9, 0x1f, 0x20, 0x6, 0x0, 0x8, 0x100c4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x800, 0x7, 0x401, 0x4, 0x1, 0x8, 0x401, 0x0, 0x9, 0x0, 0x100000001}, r2, 0x4, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7, 0x80, 0x1, 0xc9, 0x0, 0xb3, 0x94002, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x8818, 0x8, 0xffffffff, 0x6, 0x2, 0x400006, 0x401, 0x0, 0xffffff2a, 0x0, 0x4}, r5, 0xe, r4, 0x0) 09:17:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) syz_clone(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 09:17:17 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x8}, 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000001800000850000006c00000018000000bae8000000000000000100009500000000000000850000006a0000001854000002000000000a000000000000cd01500000000000186900000b0000000000000006000000185200000b0000000000000000000000185200000600000000000000f50000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x32, 0xf3, &(0x7f0000000180)=""/243, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x4, 0x3ff, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r2, r3]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x2, 0x1ff8, 0x40, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, r0, 0x0, 0x3}, 0x48) [ 1439.235388][ T1690] FAULT_INJECTION: forcing a failure. [ 1439.235388][ T1690] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.254838][ T1690] CPU: 0 PID: 1690 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1439.264826][ T1690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1439.274720][ T1690] Call Trace: [ 1439.277843][ T1690] [ 1439.280623][ T1690] dump_stack_lvl+0x151/0x1b7 [ 1439.285133][ T1690] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1439.290431][ T1690] dump_stack+0x15/0x17 [ 1439.294420][ T1690] should_fail+0x3c0/0x510 [ 1439.298675][ T1690] __should_failslab+0x9f/0xe0 [ 1439.303275][ T1690] should_failslab+0x9/0x20 [ 1439.307614][ T1690] kmem_cache_alloc+0x4f/0x2f0 [ 1439.312230][ T1690] ? vm_area_dup+0x26/0x1d0 [ 1439.316554][ T1690] vm_area_dup+0x26/0x1d0 [ 1439.320724][ T1690] dup_mmap+0x6b8/0xea0 [ 1439.324713][ T1690] ? __delayed_free_task+0x20/0x20 [ 1439.329660][ T1690] ? mm_init+0x807/0x960 [ 1439.333737][ T1690] dup_mm+0x91/0x330 [ 1439.337470][ T1690] copy_mm+0x108/0x1b0 [ 1439.341378][ T1690] copy_process+0x1295/0x3250 [ 1439.345892][ T1690] ? timerqueue_add+0x25c/0x280 [ 1439.350579][ T1690] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1439.355525][ T1690] kernel_clone+0x22d/0x990 [ 1439.359862][ T1690] ? __kasan_check_write+0x14/0x20 [ 1439.364812][ T1690] ? create_io_thread+0x1e0/0x1e0 [ 1439.369671][ T1690] ? lapic_next_event+0x5f/0x70 [ 1439.374357][ T1690] ? clockevents_program_event+0x240/0x310 [ 1439.380001][ T1690] __x64_sys_clone+0x289/0x310 [ 1439.384600][ T1690] ? __do_sys_vfork+0x130/0x130 [ 1439.389289][ T1690] ? debug_smp_processor_id+0x17/0x20 [ 1439.394496][ T1690] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1439.400395][ T1690] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1439.406304][ T1690] do_syscall_64+0x44/0xd0 [ 1439.410550][ T1690] ? irqentry_exit+0x12/0x40 [ 1439.414977][ T1690] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1439.420707][ T1690] RIP: 0033:0x7f3bd36fc0a9 [ 1439.424959][ T1690] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1439.444405][ T1690] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1439.452645][ T1690] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1439.460459][ T1690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1439.468269][ T1690] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1439.476083][ T1690] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:17:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:17 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x8}, 0xc) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000001800000850000006c00000018000000bae8000000000000000100009500000000000000850000006a0000001854000002000000000a000000000000cd01500000000000186900000b0000000000000006000000185200000b0000000000000000000000185200000600000000000000f50000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x32, 0xf3, &(0x7f0000000180)=""/243, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x4, 0x3ff, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r2, r3]}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x2, 0x1ff8, 0x40, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, r0, 0x0, 0x3}, 0x48) [ 1439.483892][ T1690] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1439.491711][ T1690] [ 1439.526751][ T1701] FAULT_INJECTION: forcing a failure. [ 1439.526751][ T1701] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.539910][ T1701] CPU: 1 PID: 1701 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1439.549863][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1439.559758][ T1701] Call Trace: [ 1439.562880][ T1701] [ 1439.565661][ T1701] dump_stack_lvl+0x151/0x1b7 [ 1439.570172][ T1701] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1439.575467][ T1701] dump_stack+0x15/0x17 [ 1439.579464][ T1701] should_fail+0x3c0/0x510 [ 1439.583711][ T1701] __should_failslab+0x9f/0xe0 [ 1439.588318][ T1701] should_failslab+0x9/0x20 [ 1439.592651][ T1701] kmem_cache_alloc+0x4f/0x2f0 [ 1439.597262][ T1701] ? anon_vma_clone+0xa1/0x4f0 [ 1439.601854][ T1701] anon_vma_clone+0xa1/0x4f0 [ 1439.606281][ T1701] anon_vma_fork+0x91/0x4f0 [ 1439.610616][ T1701] ? anon_vma_name+0x43/0x70 [ 1439.615045][ T1701] dup_mmap+0x750/0xea0 [ 1439.619038][ T1701] ? __delayed_free_task+0x20/0x20 [ 1439.623983][ T1701] ? mm_init+0x807/0x960 [ 1439.628066][ T1701] dup_mm+0x91/0x330 [ 1439.631795][ T1701] copy_mm+0x108/0x1b0 [ 1439.635701][ T1701] copy_process+0x1295/0x3250 [ 1439.640215][ T1701] ? proc_fail_nth_write+0x213/0x290 [ 1439.645334][ T1701] ? proc_fail_nth_read+0x220/0x220 [ 1439.650370][ T1701] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1439.655321][ T1701] ? vfs_write+0x9af/0x1050 [ 1439.659657][ T1701] ? vmacache_update+0xb7/0x120 [ 1439.664346][ T1701] kernel_clone+0x22d/0x990 [ 1439.668684][ T1701] ? create_io_thread+0x1e0/0x1e0 [ 1439.673547][ T1701] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1439.679533][ T1701] __x64_sys_clone+0x289/0x310 [ 1439.684134][ T1701] ? __do_sys_vfork+0x130/0x130 [ 1439.688820][ T1701] ? debug_smp_processor_id+0x17/0x20 [ 1439.694029][ T1701] do_syscall_64+0x44/0xd0 [ 1439.698280][ T1701] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1439.704007][ T1701] RIP: 0033:0x7f3bd36fc0a9 [ 1439.708263][ T1701] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1439.727704][ T1701] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 09:17:18 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x8}, 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000001800000850000006c00000018000000bae8000000000000000100009500000000000000850000006a0000001854000002000000000a000000000000cd01500000000000186900000b0000000000000006000000185200000b0000000000000000000000185200000600000000000000f50000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x32, 0xf3, &(0x7f0000000180)=""/243, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x4, 0x3ff, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r2, r3]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x2, 0x1ff8, 0x40, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, r0, 0x0, 0x3}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) close(r1) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x8}, 0xc) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00'}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000001800000850000006c00000018000000bae8000000000000000100009500000000000000850000006a0000001854000002000000000a000000000000cd01500000000000186900000b0000000000000006000000185200000b0000000000000000000000185200000600000000000000f50000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x32, 0xf3, &(0x7f0000000180)=""/243, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x4, 0x3ff, 0x28}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r2, r3]}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x2, 0x1ff8, 0x40, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, r0, 0x0, 0x3}, 0x48) (async) [ 1439.735951][ T1701] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1439.743761][ T1701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1439.751571][ T1701] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1439.759384][ T1701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1439.767195][ T1701] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1439.775011][ T1701] 09:17:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:18 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) [ 1439.841141][ T1713] FAULT_INJECTION: forcing a failure. [ 1439.841141][ T1713] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.853987][ T1713] CPU: 0 PID: 1713 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1439.863962][ T1713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1439.873860][ T1713] Call Trace: [ 1439.876984][ T1713] [ 1439.879762][ T1713] dump_stack_lvl+0x151/0x1b7 [ 1439.884275][ T1713] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1439.889570][ T1713] dump_stack+0x15/0x17 [ 1439.893562][ T1713] should_fail+0x3c0/0x510 [ 1439.897811][ T1713] __should_failslab+0x9f/0xe0 [ 1439.902412][ T1713] should_failslab+0x9/0x20 [ 1439.906747][ T1713] kmem_cache_alloc+0x4f/0x2f0 [ 1439.911349][ T1713] ? anon_vma_clone+0xa1/0x4f0 [ 1439.915952][ T1713] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 1439.922198][ T1713] anon_vma_clone+0xa1/0x4f0 [ 1439.926624][ T1713] anon_vma_fork+0x91/0x4f0 [ 1439.930964][ T1713] ? anon_vma_name+0x43/0x70 [ 1439.935391][ T1713] dup_mmap+0x750/0xea0 [ 1439.939384][ T1713] ? __delayed_free_task+0x20/0x20 [ 1439.944341][ T1713] ? mm_init+0x807/0x960 [ 1439.948417][ T1713] dup_mm+0x91/0x330 [ 1439.952143][ T1713] copy_mm+0x108/0x1b0 [ 1439.956051][ T1713] copy_process+0x1295/0x3250 [ 1439.960561][ T1713] ? proc_fail_nth_write+0x213/0x290 [ 1439.965682][ T1713] ? proc_fail_nth_read+0x220/0x220 [ 1439.970716][ T1713] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1439.975662][ T1713] ? vfs_write+0x9af/0x1050 [ 1439.980000][ T1713] ? vmacache_update+0xb7/0x120 [ 1439.984688][ T1713] kernel_clone+0x22d/0x990 [ 1439.989030][ T1713] ? file_end_write+0x1b0/0x1b0 [ 1439.993714][ T1713] ? __kasan_check_write+0x14/0x20 [ 1439.998662][ T1713] ? create_io_thread+0x1e0/0x1e0 [ 1440.003523][ T1713] ? __mutex_lock_slowpath+0x10/0x10 [ 1440.008645][ T1713] __x64_sys_clone+0x289/0x310 [ 1440.013246][ T1713] ? __do_sys_vfork+0x130/0x130 [ 1440.017933][ T1713] ? debug_smp_processor_id+0x17/0x20 [ 1440.023141][ T1713] do_syscall_64+0x44/0xd0 [ 1440.027391][ T1713] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1440.033121][ T1713] RIP: 0033:0x7f3bd36fc0a9 [ 1440.037374][ T1713] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1440.056815][ T1713] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1440.065061][ T1713] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1440.072873][ T1713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1440.080683][ T1713] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1440.088521][ T1713] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1440.096307][ T1713] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1440.104123][ T1713] 09:17:22 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x33100) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 09:17:22 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) (async) 09:17:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:22 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xe, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0x41}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @ldst={0x2, 0x2, 0x6, 0x8, 0x1, 0xfffffffffffffff8, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0xc, 0x9, 0xb, 0x18, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x20}], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xed, &(0x7f0000000300)=""/237, 0x41100, 0x6, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x4, 0x5}, 0x10, 0x724, r0, 0x0, &(0x7f0000000480)=[0x1]}, 0x80) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67401fa694b61b7, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xf, 0x6, 0x7f}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1]}, 0x80) 09:17:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x3200000000000000, 0x43408) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x7, 0x5, 0xaa57, 0x7fffffff, 0x5, 0x0, 0x8000}, 0x0, 0xd, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0xffffff00, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ff0700000000000001000080400000030000000000a216bd"], &(0x7f0000000580)='GPL\x00', 0x344, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xb, 0x9, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)={&(0x7f0000000700)='./file0\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="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"/3412], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r5, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000004000000000000000295"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xa0, &(0x7f00000001c0)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001340)={r5, r8}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x7, 0x6c22, 0x2a, 0x1, 0x0, '\x00', r8, r9, 0x4, 0x4, 0x3, 0x4}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001340), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x8, 0x5, &(0x7f0000001300)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r4}, @jmp={0x5, 0x1, 0x5, 0x5, 0x6, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x6, 0x6, 0x8, 0x80, 0x4}], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x6e, &(0x7f0000001400)=""/110, 0x41100, 0x4, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x0, 0x5, 0x6, 0xfffffe00}, 0x10, r6, r1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000200000080000000000001000000600000018100000", @ANYRES32=r10, @ANYBLOB="007c0000000000004500000000000000180000000000000000f30c00000000009500000000000000955eb91e4e9f500b"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x45}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) gettid() r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, r3, 0x2, r11, 0x0) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 1444.271451][ T1737] FAULT_INJECTION: forcing a failure. [ 1444.271451][ T1737] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.285748][ T1737] CPU: 0 PID: 1737 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1444.295704][ T1737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1444.305598][ T1737] Call Trace: [ 1444.308722][ T1737] [ 1444.311501][ T1737] dump_stack_lvl+0x151/0x1b7 [ 1444.316020][ T1737] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1444.321308][ T1737] ? vma_interval_tree_augment_rotate+0x210/0x210 [ 1444.327557][ T1737] dump_stack+0x15/0x17 [ 1444.331548][ T1737] should_fail+0x3c0/0x510 [ 1444.335809][ T1737] __should_failslab+0x9f/0xe0 [ 1444.340405][ T1737] should_failslab+0x9/0x20 [ 1444.344744][ T1737] kmem_cache_alloc+0x4f/0x2f0 [ 1444.349345][ T1737] ? anon_vma_fork+0xf7/0x4f0 [ 1444.353856][ T1737] anon_vma_fork+0xf7/0x4f0 [ 1444.358194][ T1737] ? anon_vma_name+0x43/0x70 [ 1444.362619][ T1737] dup_mmap+0x750/0xea0 [ 1444.366612][ T1737] ? __delayed_free_task+0x20/0x20 [ 1444.371570][ T1737] ? mm_init+0x807/0x960 [ 1444.375640][ T1737] dup_mm+0x91/0x330 [ 1444.379460][ T1737] copy_mm+0x108/0x1b0 [ 1444.383366][ T1737] copy_process+0x1295/0x3250 [ 1444.387880][ T1737] ? timerqueue_add+0x25c/0x280 [ 1444.392564][ T1737] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1444.397513][ T1737] kernel_clone+0x22d/0x990 [ 1444.401864][ T1737] ? __kasan_check_write+0x14/0x20 [ 1444.406800][ T1737] ? create_io_thread+0x1e0/0x1e0 [ 1444.411657][ T1737] ? lapic_next_event+0x5f/0x70 [ 1444.416346][ T1737] ? clockevents_program_event+0x240/0x310 [ 1444.421997][ T1737] __x64_sys_clone+0x289/0x310 [ 1444.426589][ T1737] ? __do_sys_vfork+0x130/0x130 [ 1444.431348][ T1737] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1444.437177][ T1737] do_syscall_64+0x44/0xd0 [ 1444.441427][ T1737] ? irqentry_exit+0x12/0x40 [ 1444.445856][ T1737] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1444.451585][ T1737] RIP: 0033:0x7f3bd36fc0a9 [ 1444.455842][ T1737] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1444.475285][ T1737] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1444.483532][ T1737] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1444.491343][ T1737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1444.499236][ T1737] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.507047][ T1737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1444.514858][ T1737] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 09:17:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async, rerun: 32) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) (rerun: 32) syz_clone(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 09:17:23 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000000), 0xffe000) (async) 09:17:23 executing program 5: syz_clone(0xc40a3400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) [ 1444.522675][ T1737] 09:17:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:23 executing program 5: syz_clone(0xc40a3400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0xc40a3400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) [ 1444.588830][ T1754] FAULT_INJECTION: forcing a failure. [ 1444.588830][ T1754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1444.604636][ T1754] CPU: 1 PID: 1754 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1444.614626][ T1754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1444.624524][ T1754] Call Trace: [ 1444.627647][ T1754] [ 1444.630423][ T1754] dump_stack_lvl+0x151/0x1b7 [ 1444.634944][ T1754] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1444.640236][ T1754] dump_stack+0x15/0x17 [ 1444.644233][ T1754] should_fail+0x3c0/0x510 [ 1444.648481][ T1754] should_fail_alloc_page+0x58/0x70 [ 1444.653511][ T1754] __alloc_pages+0x1de/0x7c0 [ 1444.657942][ T1754] ? __count_vm_events+0x30/0x30 [ 1444.662711][ T1754] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1444.668701][ T1754] pte_alloc_one+0x73/0x1b0 [ 1444.673038][ T1754] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1444.678079][ T1754] ? irqentry_exit+0x30/0x40 [ 1444.682500][ T1754] __pte_alloc+0x86/0x350 [ 1444.686663][ T1754] ? irqentry_exit+0x30/0x40 [ 1444.691091][ T1754] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1444.696741][ T1754] ? free_pgtables+0x210/0x210 [ 1444.701339][ T1754] copy_pte_range+0x1b1f/0x20b0 [ 1444.706027][ T1754] ? __kunmap_atomic+0x80/0x80 [ 1444.710622][ T1754] ? __kasan_slab_alloc+0xc4/0xe0 [ 1444.715481][ T1754] ? __kasan_slab_alloc+0xb2/0xe0 [ 1444.720342][ T1754] ? kmem_cache_alloc+0x189/0x2f0 [ 1444.725204][ T1754] ? vm_area_dup+0x26/0x1d0 [ 1444.729548][ T1754] ? dup_mmap+0x6b8/0xea0 [ 1444.733707][ T1754] ? dup_mm+0x91/0x330 [ 1444.737614][ T1754] ? copy_mm+0x108/0x1b0 [ 1444.741691][ T1754] ? copy_process+0x1295/0x3250 [ 1444.746377][ T1754] ? kernel_clone+0x22d/0x990 [ 1444.750905][ T1754] ? __x64_sys_clone+0x289/0x310 [ 1444.755667][ T1754] ? do_syscall_64+0x44/0xd0 [ 1444.760092][ T1754] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1444.766006][ T1754] copy_page_range+0xc1e/0x1090 [ 1444.770686][ T1754] ? pfn_valid+0x1e0/0x1e0 [ 1444.774938][ T1754] dup_mmap+0x99f/0xea0 [ 1444.778931][ T1754] ? __delayed_free_task+0x20/0x20 [ 1444.783887][ T1754] ? mm_init+0x807/0x960 09:17:23 executing program 5: syz_clone(0xc40a3400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 09:17:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8001, 0xc3, 0x7, 0x248, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x9}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x2, 0x6699b9af, 0xfffffffb, 0x1000, r0, 0x7ff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xa}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x3ff}, 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x71600000}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000400)=""/249, 0x1f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x2, 0x4, 0xfb58}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, r3, 0x1, r4, 0x1]}, 0x80) [ 1444.787954][ T1754] dup_mm+0x91/0x330 [ 1444.791684][ T1754] copy_mm+0x108/0x1b0 [ 1444.795594][ T1754] copy_process+0x1295/0x3250 [ 1444.800112][ T1754] ? proc_fail_nth_write+0x213/0x290 [ 1444.805226][ T1754] ? proc_fail_nth_read+0x220/0x220 [ 1444.810261][ T1754] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1444.815207][ T1754] ? vfs_write+0x9af/0x1050 [ 1444.819548][ T1754] kernel_clone+0x22d/0x990 [ 1444.823887][ T1754] ? irqentry_exit+0x30/0x40 [ 1444.828311][ T1754] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1444.833960][ T1754] ? create_io_thread+0x1e0/0x1e0 [ 1444.838824][ T1754] __x64_sys_clone+0x289/0x310 [ 1444.843418][ T1754] ? __do_sys_vfork+0x130/0x130 [ 1444.848120][ T1754] ? debug_smp_processor_id+0x17/0x20 [ 1444.853312][ T1754] do_syscall_64+0x44/0xd0 [ 1444.857566][ T1754] ? irqentry_exit+0x12/0x40 [ 1444.861989][ T1754] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1444.867718][ T1754] RIP: 0033:0x7f3bd36fc0a9 [ 1444.872064][ T1754] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1444.891502][ T1754] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1444.899744][ T1754] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1444.907555][ T1754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1444.915368][ T1754] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.923179][ T1754] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1444.930990][ T1754] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1444.938897][ T1754] 09:17:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) syz_clone(0x68000200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) write$cgroup_int(r1, &(0x7f00000000c0)=0x6, 0x12) 09:17:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8001, 0xc3, 0x7, 0x248, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x9}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x2, 0x6699b9af, 0xfffffffb, 0x1000, r0, 0x7ff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xa}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x3ff}, 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x71600000}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000400)=""/249, 0x1f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x2, 0x4, 0xfb58}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, r3, 0x1, r4, 0x1]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8001, 0xc3, 0x7, 0x248, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x9}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x2, 0x6699b9af, 0xfffffffb, 0x1000, r0, 0x7ff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xa}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x3ff}, 0xc) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x71600000}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000400)=""/249, 0x1f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x2, 0x4, 0xfb58}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, r3, 0x1, r4, 0x1]}, 0x80) (async) 09:17:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:27 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r2, 0x0, r1, 0x2) r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3, 0x6, 0x0, 0x7, 0x0, 0x8, 0xc601, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4c38fe12, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x859a0, 0x101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x1}, r2, 0x4, r0, 0x8) r4 = perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0x3, 0x0, 0x81, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0x5}, 0x0, 0xffff, 0x3, 0x0, 0x7, 0x3ff, 0x8}, 0xffffffffffffffff, 0x9, r5, 0x3) r6 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x86, 0xfa, 0x5, 0x0, 0x81, 0x90000, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x2, 0x1, 0x9, 0x8, 0x0, 0x1f, 0x0, 0x101, 0x0, 0x3}, r2, 0x10, r3, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000001c0)=0x9) perf_event_open$cgroup(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x3, 0x6b, 0x20, 0x0, 0x7fff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff8000, 0x9a0}, 0x0, 0x1f, 0x1c, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r4, 0x6f5aba8637fc5e50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)) 09:17:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x3200000000000000, 0x43408) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x7, 0x5, 0xaa57, 0x7fffffff, 0x5, 0x0, 0x8000}, 0x0, 0xd, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async, rerun: 64) r3 = getpid() (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0xffffff00, 0x2, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ff0700000000000001000080400000030000000000a216bd"], &(0x7f0000000580)='GPL\x00', 0x344, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xb, 0x9, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)={&(0x7f0000000700)='./file0\x00'}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="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"/3412], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r5, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000004000000000000000295"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xa0, &(0x7f00000001c0)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001340)={r5, r8}, 0x10) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x7, 0x6c22, 0x2a, 0x1, 0x0, '\x00', r8, r9, 0x4, 0x4, 0x3, 0x4}, 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001340), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x8, 0x5, &(0x7f0000001300)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r4}, @jmp={0x5, 0x1, 0x5, 0x5, 0x6, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x6, 0x6, 0x8, 0x80, 0x4}], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x6e, &(0x7f0000001400)=""/110, 0x41100, 0x4, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x0, 0x5, 0x6, 0xfffffe00}, 0x10, r6, r1}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000200000080000000000001000000600000018100000", @ANYRES32=r10, @ANYBLOB="007c0000000000004500000000000000180000000000000000f30c00000000009500000000000000955eb91e4e9f500b"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x45}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) gettid() (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, r3, 0x2, r11, 0x0) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 1449.298182][ T1777] FAULT_INJECTION: forcing a failure. [ 1449.298182][ T1777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1449.312533][ T1777] CPU: 1 PID: 1777 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1449.322506][ T1777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1449.332399][ T1777] Call Trace: [ 1449.335523][ T1777] [ 1449.338302][ T1777] dump_stack_lvl+0x151/0x1b7 [ 1449.342814][ T1777] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1449.348109][ T1777] dump_stack+0x15/0x17 [ 1449.352100][ T1777] should_fail+0x3c0/0x510 [ 1449.356354][ T1777] should_fail_alloc_page+0x58/0x70 [ 1449.361387][ T1777] __alloc_pages+0x1de/0x7c0 [ 1449.365814][ T1777] ? __count_vm_events+0x30/0x30 [ 1449.370615][ T1777] pte_alloc_one+0x73/0x1b0 [ 1449.374929][ T1777] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1449.379962][ T1777] __pte_alloc+0x86/0x350 [ 1449.384126][ T1777] ? free_pgtables+0x210/0x210 [ 1449.388728][ T1777] ? __kernel_text_address+0x9a/0x110 [ 1449.394023][ T1777] ? unwind_get_return_address+0x4c/0x90 [ 1449.399494][ T1777] copy_pte_range+0x1b1f/0x20b0 [ 1449.404179][ T1777] ? stack_trace_save+0x12d/0x1f0 [ 1449.409038][ T1777] ? anon_vma_clone+0xa1/0x4f0 [ 1449.413639][ T1777] ? __kunmap_atomic+0x80/0x80 [ 1449.418254][ T1777] ? irqentry_exit+0x30/0x40 [ 1449.422666][ T1777] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1449.428304][ T1777] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1449.434295][ T1777] ? copy_page_range+0x988/0x1090 [ 1449.439154][ T1777] copy_page_range+0xc1e/0x1090 [ 1449.443846][ T1777] ? pfn_valid+0x1e0/0x1e0 [ 1449.448096][ T1777] dup_mmap+0x99f/0xea0 [ 1449.452089][ T1777] ? __delayed_free_task+0x20/0x20 [ 1449.457035][ T1777] ? mm_init+0x807/0x960 [ 1449.461115][ T1777] dup_mm+0x91/0x330 [ 1449.464846][ T1777] copy_mm+0x108/0x1b0 [ 1449.468753][ T1777] copy_process+0x1295/0x3250 [ 1449.473269][ T1777] ? proc_fail_nth_write+0x213/0x290 [ 1449.478387][ T1777] ? proc_fail_nth_read+0x220/0x220 [ 1449.483421][ T1777] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1449.488367][ T1777] ? vfs_write+0x9af/0x1050 [ 1449.492706][ T1777] ? irqentry_exit+0x30/0x40 [ 1449.497133][ T1777] kernel_clone+0x22d/0x990 [ 1449.501473][ T1777] ? file_end_write+0x1b0/0x1b0 [ 1449.506166][ T1777] ? __kasan_check_write+0x14/0x20 [ 1449.511109][ T1777] ? create_io_thread+0x1e0/0x1e0 [ 1449.515979][ T1777] ? __mutex_lock_slowpath+0x10/0x10 [ 1449.521090][ T1777] __x64_sys_clone+0x289/0x310 [ 1449.525691][ T1777] ? __do_sys_vfork+0x130/0x130 [ 1449.530377][ T1777] do_syscall_64+0x44/0xd0 [ 1449.535411][ T1777] ? irqentry_exit+0x12/0x40 [ 1449.539840][ T1777] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1449.545567][ T1777] RIP: 0033:0x7f3bd36fc0a9 [ 1449.549822][ T1777] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1449.569260][ T1777] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1449.577503][ T1777] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1449.585320][ T1777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1449.593127][ T1777] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1449.600939][ T1777] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1449.608756][ T1777] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1449.616582][ T1777] 09:17:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) syz_clone(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) close(r0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) (async) syz_clone(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) (async) 09:17:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8001, 0xc3, 0x7, 0x248, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x9}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x2, 0x6699b9af, 0xfffffffb, 0x1000, r0, 0x7ff, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xa}, 0x48) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x3ff}, 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x71600000}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000400)=""/249, 0x1f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x2, 0x4, 0xfb58}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, r3, 0x1, r4, 0x1]}, 0x80) 09:17:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba4e, 0x0, 0x0, 0x0, 0xfff}, [@map_idx={0x18, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f0000000b40)='syzkaller\x00', 0x8d, 0x8c, &(0x7f0000000c00)=""/140, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x4, 0x3}, 0x10, 0x0, r0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0xed, &(0x7f0000000240)=""/237, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r3]}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x383, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000230e00000000000081000000183800000400000000000000000000004000030002000000654606000400000095000000000000008a3b6ac86795a747d040ba27d7b78e6999ac3da21823e4ce2351408a0efe3f028f1cccfff8adcd3df705365dfcf9ff0e0c4de15bb0875345b46db2e233ba07f15582ff4c9fbbde9ae9d766016b324a24570d8558d2d19b0eb2d7"], &(0x7f0000000040)='GPL\x00', 0x8d, 0x7d, &(0x7f0000000080)=""/125, 0x41000, 0x8, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x7, 0x8, 0x80000000}, 0x10}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x4, 0x4, &(0x7f0000000dc0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x412f}, @alu={0x7, 0x0, 0x6, 0x5, 0xb, 0x1}, @generic={0x40, 0x5, 0x1, 0x6, 0x38}], &(0x7f0000000e00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x8, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2]}, 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000ec0), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/83, 0x53}, {&(0x7f0000000fc0)=""/253, 0xfd}, {&(0x7f00000010c0)=""/127, 0x7f}], 0x4, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0xbd1) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40)={r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1449.727975][ T1801] FAULT_INJECTION: forcing a failure. [ 1449.727975][ T1801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1449.741594][ T1801] CPU: 0 PID: 1801 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1449.751561][ T1801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1449.761466][ T1801] Call Trace: [ 1449.764616][ T1801] [ 1449.767356][ T1801] dump_stack_lvl+0x151/0x1b7 [ 1449.771871][ T1801] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1449.777166][ T1801] ? should_fail+0x32c/0x510 [ 1449.781592][ T1801] dump_stack+0x15/0x17 [ 1449.785591][ T1801] should_fail+0x3c0/0x510 [ 1449.789841][ T1801] should_fail_alloc_page+0x58/0x70 [ 1449.794872][ T1801] __alloc_pages+0x1de/0x7c0 [ 1449.799307][ T1801] ? irqentry_exit+0x30/0x40 [ 1449.803727][ T1801] ? __count_vm_events+0x30/0x30 [ 1449.808497][ T1801] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1449.814487][ T1801] ? irqentry_exit+0x30/0x40 [ 1449.818913][ T1801] pte_alloc_one+0x73/0x1b0 [ 1449.823251][ T1801] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1449.828293][ T1801] __pte_alloc+0x86/0x350 [ 1449.832452][ T1801] ? irqentry_exit+0x30/0x40 [ 1449.836878][ T1801] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1449.842525][ T1801] ? free_pgtables+0x210/0x210 [ 1449.847125][ T1801] copy_pte_range+0x1b1f/0x20b0 [ 1449.851813][ T1801] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1449.857802][ T1801] ? __kunmap_atomic+0x80/0x80 [ 1449.862402][ T1801] ? irqentry_exit+0x30/0x40 [ 1449.866825][ T1801] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1449.872466][ T1801] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1449.878457][ T1801] copy_page_range+0xc1e/0x1090 [ 1449.883146][ T1801] ? pfn_valid+0x1e0/0x1e0 [ 1449.887394][ T1801] dup_mmap+0x99f/0xea0 [ 1449.891394][ T1801] ? __delayed_free_task+0x20/0x20 [ 1449.896333][ T1801] ? mm_init+0x807/0x960 [ 1449.900416][ T1801] dup_mm+0x91/0x330 [ 1449.904144][ T1801] copy_mm+0x108/0x1b0 [ 1449.908049][ T1801] copy_process+0x1295/0x3250 [ 1449.912566][ T1801] ? timerqueue_add+0x25c/0x280 [ 1449.917257][ T1801] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1449.922199][ T1801] kernel_clone+0x22d/0x990 [ 1449.926544][ T1801] ? irqentry_exit+0x30/0x40 [ 1449.930963][ T1801] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1449.936606][ T1801] ? create_io_thread+0x1e0/0x1e0 [ 1449.941467][ T1801] __x64_sys_clone+0x289/0x310 [ 1449.946065][ T1801] ? __do_sys_vfork+0x130/0x130 [ 1449.950756][ T1801] ? debug_smp_processor_id+0x17/0x20 [ 1449.955957][ T1801] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1449.961860][ T1801] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1449.967764][ T1801] do_syscall_64+0x44/0xd0 [ 1449.972279][ T1801] ? irqentry_exit+0x12/0x40 [ 1449.976701][ T1801] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1449.982530][ T1801] RIP: 0033:0x7f3bd36fc0a9 [ 1449.986770][ T1801] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1450.006210][ T1801] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1450.014457][ T1801] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 09:17:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)) (async, rerun: 64) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba4e, 0x0, 0x0, 0x0, 0xfff}, [@map_idx={0x18, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f0000000b40)='syzkaller\x00', 0x8d, 0x8c, &(0x7f0000000c00)=""/140, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x4, 0x3}, 0x10, 0x0, r0}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0xed, &(0x7f0000000240)=""/237, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r3]}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x383, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000230e00000000000081000000183800000400000000000000000000004000030002000000654606000400000095000000000000008a3b6ac86795a747d040ba27d7b78e6999ac3da21823e4ce2351408a0efe3f028f1cccfff8adcd3df705365dfcf9ff0e0c4de15bb0875345b46db2e233ba07f15582ff4c9fbbde9ae9d766016b324a24570d8558d2d19b0eb2d7"], &(0x7f0000000040)='GPL\x00', 0x8d, 0x7d, &(0x7f0000000080)=""/125, 0x41000, 0x8, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x7, 0x8, 0x80000000}, 0x10}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x4, 0x4, &(0x7f0000000dc0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x412f}, @alu={0x7, 0x0, 0x6, 0x5, 0xb, 0x1}, @generic={0x40, 0x5, 0x1, 0x6, 0x38}], &(0x7f0000000e00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x8, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2]}, 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) gettid() (async, rerun: 64) r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000ec0), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/83, 0x53}, {&(0x7f0000000fc0)=""/253, 0xfd}, {&(0x7f00000010c0)=""/127, 0x7f}], 0x4, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0xbd1) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40)={r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) 09:17:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000bc0)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba4e, 0x0, 0x0, 0x0, 0xfff}, [@map_idx={0x18, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffe0, 0x10}]}, &(0x7f0000000b40)='syzkaller\x00', 0x8d, 0x8c, &(0x7f0000000c00)=""/140, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x4, 0x3}, 0x10, 0x0, r0}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0xed, &(0x7f0000000240)=""/237, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r3]}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x383, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000230e00000000000081000000183800000400000000000000000000004000030002000000654606000400000095000000000000008a3b6ac86795a747d040ba27d7b78e6999ac3da21823e4ce2351408a0efe3f028f1cccfff8adcd3df705365dfcf9ff0e0c4de15bb0875345b46db2e233ba07f15582ff4c9fbbde9ae9d766016b324a24570d8558d2d19b0eb2d7"], &(0x7f0000000040)='GPL\x00', 0x8d, 0x7d, &(0x7f0000000080)=""/125, 0x41000, 0x8, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x7, 0x8, 0x80000000}, 0x10}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x4, 0x4, &(0x7f0000000dc0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x412f}, @alu={0x7, 0x0, 0x6, 0x5, 0xb, 0x1}, @generic={0x40, 0x5, 0x1, 0x6, 0x38}], &(0x7f0000000e00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x8, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2]}, 0x80) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() (async) r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000ec0), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/83, 0x53}, {&(0x7f0000000fc0)=""/253, 0xfd}, {&(0x7f00000010c0)=""/127, 0x7f}], 0x4, &(0x7f0000001140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0xbd1) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40)={r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1450.022266][ T1801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1450.030078][ T1801] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1450.037891][ T1801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1450.045701][ T1801] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1450.053603][ T1801] [ 1450.100935][ T1807] FAULT_INJECTION: forcing a failure. [ 1450.100935][ T1807] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.115263][ T1807] CPU: 1 PID: 1807 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1450.125253][ T1807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1450.135137][ T1807] Call Trace: [ 1450.138264][ T1807] [ 1450.141039][ T1807] dump_stack_lvl+0x151/0x1b7 [ 1450.145553][ T1807] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1450.150845][ T1807] ? do_syscall_64+0x44/0xd0 [ 1450.155273][ T1807] dump_stack+0x15/0x17 [ 1450.159265][ T1807] should_fail+0x3c0/0x510 [ 1450.163521][ T1807] __should_failslab+0x9f/0xe0 [ 1450.168128][ T1807] should_failslab+0x9/0x20 [ 1450.172460][ T1807] kmem_cache_alloc+0x4f/0x2f0 [ 1450.177059][ T1807] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1450.183047][ T1807] ? anon_vma_clone+0xa1/0x4f0 [ 1450.187647][ T1807] anon_vma_clone+0xa1/0x4f0 [ 1450.192075][ T1807] anon_vma_fork+0x91/0x4f0 [ 1450.196412][ T1807] ? anon_vma_name+0x43/0x70 [ 1450.200842][ T1807] dup_mmap+0x750/0xea0 [ 1450.204835][ T1807] ? __delayed_free_task+0x20/0x20 [ 1450.209781][ T1807] ? mm_init+0x807/0x960 [ 1450.213860][ T1807] dup_mm+0x91/0x330 [ 1450.217590][ T1807] copy_mm+0x108/0x1b0 [ 1450.221502][ T1807] copy_process+0x1295/0x3250 [ 1450.226013][ T1807] ? timerqueue_add+0x25c/0x280 [ 1450.230705][ T1807] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1450.235730][ T1807] ? do_user_addr_fault+0xb08/0x1220 [ 1450.240854][ T1807] kernel_clone+0x22d/0x990 [ 1450.245190][ T1807] ? irqentry_exit+0x30/0x40 [ 1450.249619][ T1807] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1450.255258][ T1807] ? create_io_thread+0x1e0/0x1e0 [ 1450.260122][ T1807] __x64_sys_clone+0x289/0x310 [ 1450.264718][ T1807] ? __do_sys_vfork+0x130/0x130 [ 1450.269408][ T1807] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1450.275221][ T1807] do_syscall_64+0x44/0xd0 [ 1450.279473][ T1807] ? irqentry_exit+0x12/0x40 [ 1450.283901][ T1807] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1450.289628][ T1807] RIP: 0033:0x7f3bd36fc0a9 [ 1450.293883][ T1807] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1450.313330][ T1807] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1450.321569][ T1807] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1450.329383][ T1807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1450.337193][ T1807] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1450.345003][ T1807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1450.352813][ T1807] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1450.360629][ T1807] 09:17:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) syz_clone(0x68000200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) write$cgroup_int(r1, &(0x7f00000000c0)=0x6, 0x12) 09:17:32 executing program 5: socketpair(0xc, 0x20000000000001, 0x3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8990, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:32 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = gettid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(0x0, r2, 0x0, r1, 0x2) (rerun: 32) r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3, 0x6, 0x0, 0x7, 0x0, 0x8, 0xc601, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4c38fe12, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x859a0, 0x101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x1}, r2, 0x4, r0, 0x8) r4 = perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0x3, 0x0, 0x81, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0x5}, 0x0, 0xffff, 0x3, 0x0, 0x7, 0x3ff, 0x8}, 0xffffffffffffffff, 0x9, r5, 0x3) (async) r6 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x86, 0xfa, 0x5, 0x0, 0x81, 0x90000, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x2, 0x1, 0x9, 0x8, 0x0, 0x1f, 0x0, 0x101, 0x0, 0x3}, r2, 0x10, r3, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000001c0)=0x9) (async, rerun: 64) perf_event_open$cgroup(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x3, 0x6b, 0x20, 0x0, 0x7fff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff8000, 0x9a0}, 0x0, 0x1f, 0x1c, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r4, 0x6f5aba8637fc5e50) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)) 09:17:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200)=0x3200000000000000, 0x43408) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x7, 0x5, 0xaa57, 0x7fffffff, 0x5, 0x0, 0x8000}, 0x0, 0xd, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000020000000002000ea20850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r3 = getpid() (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0xffffff00, 0x2, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ff0700000000000001000080400000030000000000a216bd"], &(0x7f0000000580)='GPL\x00', 0x344, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xb, 0x9, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff]}, 0x80) (async, rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)={&(0x7f0000000700)='./file0\x00'}, 0x10) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="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"/3412], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r5, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000004000000000000000295"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xa0, &(0x7f00000001c0)=""/160, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001340)={r5, r8}, 0x10) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x7, 0x6c22, 0x2a, 0x1, 0x0, '\x00', r8, r9, 0x4, 0x4, 0x3, 0x4}, 0x48) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001340), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x8, 0x5, &(0x7f0000001300)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r4}, @jmp={0x5, 0x1, 0x5, 0x5, 0x6, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x6, 0x6, 0x8, 0x80, 0x4}], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x6e, &(0x7f0000001400)=""/110, 0x41100, 0x4, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000014c0)={0x0, 0x5, 0x6, 0xfffffe00}, 0x10, r6, r1}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000200000080000000000001000000600000018100000", @ANYRES32=r10, @ANYBLOB="007c0000000000004500000000000000180000000000000000f30c00000000009500000000000000955eb91e4e9f500b"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x20000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x45}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) gettid() (async, rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, r3, 0x2, r11, 0x0) (async) syz_clone(0x74809480, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 1454.321868][ T30] audit: type=1400 audit(1671959852.790:135): avc: denied { create } for pid=1830 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 1454.355867][ T1833] FAULT_INJECTION: forcing a failure. [ 1454.355867][ T1833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1454.369550][ T1833] CPU: 0 PID: 1833 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1454.379523][ T1833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1454.389411][ T1833] Call Trace: [ 1454.392534][ T1833] [ 1454.395314][ T1833] dump_stack_lvl+0x151/0x1b7 [ 1454.399826][ T1833] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1454.405121][ T1833] ? kasan_check_range+0x92/0x2e0 [ 1454.409981][ T1833] dump_stack+0x15/0x17 [ 1454.413973][ T1833] should_fail+0x3c0/0x510 [ 1454.418235][ T1833] should_fail_alloc_page+0x58/0x70 [ 1454.423262][ T1833] __alloc_pages+0x1de/0x7c0 [ 1454.427689][ T1833] ? __count_vm_events+0x30/0x30 [ 1454.432471][ T1833] pte_alloc_one+0x73/0x1b0 [ 1454.436804][ T1833] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1454.441836][ T1833] __pte_alloc+0x86/0x350 [ 1454.446000][ T1833] ? irqentry_exit+0x30/0x40 [ 1454.450430][ T1833] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1454.456070][ T1833] ? free_pgtables+0x210/0x210 [ 1454.460670][ T1833] copy_pte_range+0x1b1f/0x20b0 [ 1454.465364][ T1833] ? __kunmap_atomic+0x80/0x80 [ 1454.469956][ T1833] ? irqentry_exit+0x30/0x40 [ 1454.474384][ T1833] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1454.480024][ T1833] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1454.486015][ T1833] copy_page_range+0xc1e/0x1090 [ 1454.490705][ T1833] ? pfn_valid+0x1e0/0x1e0 [ 1454.494954][ T1833] dup_mmap+0x99f/0xea0 [ 1454.498948][ T1833] ? __delayed_free_task+0x20/0x20 [ 1454.503893][ T1833] ? mm_init+0x807/0x960 [ 1454.507975][ T1833] dup_mm+0x91/0x330 [ 1454.511703][ T1833] copy_mm+0x108/0x1b0 [ 1454.515610][ T1833] copy_process+0x1295/0x3250 [ 1454.520123][ T1833] ? proc_fail_nth_write+0x213/0x290 [ 1454.525244][ T1833] ? proc_fail_nth_read+0x220/0x220 [ 1454.530281][ T1833] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1454.535225][ T1833] ? vfs_write+0x9af/0x1050 [ 1454.539564][ T1833] ? irqentry_exit+0x30/0x40 [ 1454.544097][ T1833] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1454.549733][ T1833] kernel_clone+0x22d/0x990 [ 1454.554072][ T1833] ? file_end_write+0x1b0/0x1b0 [ 1454.558757][ T1833] ? __kasan_check_write+0x14/0x20 [ 1454.563706][ T1833] ? create_io_thread+0x1e0/0x1e0 [ 1454.568568][ T1833] ? __mutex_lock_slowpath+0x10/0x10 [ 1454.573693][ T1833] __x64_sys_clone+0x289/0x310 [ 1454.578289][ T1833] ? __do_sys_vfork+0x130/0x130 [ 1454.582989][ T1833] ? debug_smp_processor_id+0x17/0x20 [ 1454.588184][ T1833] do_syscall_64+0x44/0xd0 [ 1454.592435][ T1833] ? irqentry_exit+0x12/0x40 [ 1454.596864][ T1833] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1454.602594][ T1833] RIP: 0033:0x7f3bd36fc0a9 [ 1454.606843][ T1833] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1454.626285][ T1833] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1454.634531][ T1833] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1454.642342][ T1833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1454.650152][ T1833] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1454.657969][ T1833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1454.665774][ T1833] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1454.673588][ T1833] 09:17:33 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r0 = syz_clone(0x62800400, &(0x7f0000001b40), 0x0, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00)="4c188ab3276be49f5ca132abd030461d5adb4f4ce9e8a7ce7d98d3b31880d78340e1090627259f33b55159ced91cd1fb7f52d21090efb84d162c6de0ffc4f8a1aa47f92d6dbf8eae5243b0221c63f133137983de6ed5956fa43c0b8e3cb771e0d35793cac1b8e54446ce79369e7c4c14bd504750cb7df751ccc10165661f3d02959ae3a920fcde798c379bf8cb5f422c5c529da51330dc821691e323696c9c19cd07c26c427d5dfef4e9dc3acd3bd2af5b1bf3") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001d00)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001cc0)='\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="c80ce7e01347eec821cceae81fba9e5a3ad770a96547863a6253f6da66cfd64a0a5df517ed65161d4bf09fd5e8c57581db9f1883b433d8c3fb7a42c91e08efc748afac52daeca97d5c6df5a40e6201686c042f4c31cdaa7f1419c49fca26ccc25474d866be53b3a40f4eecb4b644c0cfe7aed3d0993841c6c4c47f23cedc9e7ace5d46839f3130488321e0523d4589294a0a5aeb60e184ffafb4056d82fb47b2faee37b9e7c1690d7bd83a2d0db8ac955a89b12d6162ffbff72ac87bf5de050c8ffca4dc3b9af2d44832", 0xca}, {&(0x7f0000000600)="a711c72b6b3ac02f9a1b3942c54b8dc7923f4d92b6ba90dffc745bbb45c10076eabe0f8cff2714ddb287370ed109bcfeed0dc9716fd123874faf493ea7612ac02a3a3714eb9fc6d56d311a9902d174de88e85d6c45a7739afffde45578c4762b32dc42b0702822b287b505dd993b9704a8403b9505c18ab3e51b4ea53627d5af780635c5cdc6aca14ad7ae6138d84f60fc3800a73570de132432357af63e2b406ef7fc6ca324bcc88c317871d97a337f245d47e9f40aef39ba6d1a08", 0xbc}], 0x2}, 0x4080) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b00)={0x0, 0x0, 0x20}, 0xc) r4 = perf_event_open(&(0x7f0000001dc0)={0x5b0178d30868cd97, 0x80, 0x7f, 0xae, 0x5, 0x40, 0x0, 0x9, 0x11000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x947b328f9de59ff5, @perf_bp={&(0x7f00000004c0), 0x2}, 0x808cb, 0x1, 0x0, 0xd, 0x4, 0x8, 0x0, 0x0, 0x100, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001d40)={0x2, 0x80, 0x40, 0x2, 0x6, 0x0, 0x0, 0x6, 0x84000, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0xe}, 0x2008, 0x2e, 0x7f, 0x5, 0x6, 0x9191, 0x7fff, 0x0, 0x800}, r0, 0xb, r4, 0x9) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000002fc0)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000001e40)="57ee0ed87e7c3c49d47779661b51716a5af8990088f74384a3f8192210cd7fd6fc4aa5da53c5baf15d55275acadc6f25f4ffae960de75973b11c15f666faaad71fef9f7f74639a662e8bfd62534846849a82c3e465c095d54e5d66045badf315da7a61d050b943ba3eb1ab24619f307df8072dd9717767b69f83bf9be096bfd91e3a9ee95759ae27aaed4eb9591256421d213abb9f2a1fa3281a066c776ef0ed1ad71db2eaac2ba9459e3a0a6ea1bc8f4077b01162a98c746e92832184af403e6eec5ceaa5b4a5b8ab6140e9c24dc15628a5adb8df912405b5319108d66368742e4ada21a9c34798425fb6953e025065998042fa687b5198b5c8821bb4d01f52fe71ead2436e4e7f9754042668528327eeaec9e3fffb831d13fb380bb797a98d93b4bc3c6a3cb994b43a1817552e339d22cf75df83913414a4445b8138432c7d17365c34d113c8ebde8e26ae285da4cd0f375eaf1b5e8c6ac8ecc895c1fcc870828b549d509887fa9d0611ec05362b134915e6f4d3da621142975beafa87351760b3ce5f81a3de826e6211ac6725741868805b03fb45533dae0eb484d10336a5bb09562a5d06b3d8384ae4d7e05f812b19dccc3cdf44a1398280b0ee862a8b58741ba479101fa125259da35e1be3243fd68435f4a7efdeef69ec1b0ea3931fae37018905831caf80a861456a8c3ca528a7d9f7d92f4935ca3ebf4903162d1669114ebea34032674135dbee7b463c30c13a2b53f43d769ef4c03a2f5155d7875d8ca4af72657c3a837fa4464212a7e8da630e3d679531ca865d0b623287b7052d4bd73b1ff6ad7e21cd89a4e51a59543f17d739ce57c953e58941d5b85397e4fbbc1d0fdc2b58a760e24152e4e6326622691b8bdc95931d2bf3b72921ba850c275eeef039b98dccbf6669f226c769ad2a170e4adc47da17909e835877a711fd94080800cf6796ac81c9ab7107cc1788d0277feebceaf3db02359f4f3f84d4745ca57aac1df522ffdfea2ea5118db7a8835fa2f516f178d540a8e53983f5dabc427a756d8d4e551788ddb7a57421f9d63cd071bd2830a3bfd79baecdbcd97d29bf00c58be1855af27a6878c9b8a4d3bd57e1c25f204dcda7d6d4b9fd722a877a9fae9715f8a8e32f4a560123f29e172eb0033a5c8f048982efb411ac1da67a1b16253e30e72adcc90ce613a0a135d71c9ead8ed2a49b484634ea50a558b63aac52b001aa7d3ca649eb398e683d0bd6bed2a985010fd7af76bb5b1b4d0a7b90c0f9d72658f6194e28d1650bce7e4fee232ff7d3ce73caeea27003c2eb2a6af4e6c46174431cf010c6f51ec53281d44bdf0ccb66b81c2ef301746d9140320495880a5b7c1c3e5472ee7909468c5476b0e7be728b6f7ff75734417745199f99c3ce08372e0176b9cffa43a3b992a0a96af325c3d57868d3a193c597913b7678579e9146279b1b2ee47bf8227f85ae1c5aa9439bcc016b26269375fb186750e2302b3173863b703feff2cc73771818554fc65123e48cbde887d29836720fc686bec565b28c40dfabb30a2a51f97b39594ba2c3f01c175f305fa608cb2f17b7ce4b412eec6b3213d7028a7c0fd8cbeb95e6fbe77d04f6e7f4db9b092569e0bd1493344b7659f8678b1132f65fa25e5fb1636b2408158ded27e3d586ddc83e5535551b6e0633f3c520490f70faa8a70684be33fd9b9b429be543f55037f37d8518b9469b2ada42e474d654e3b6c07527656ab7f125e659b1d2729ee131336847d982d845ad62c5280dc3179aab696ce10846ede617810a4951d15f99c7fb3139b2a6fefb2dc4a4e0fe7f225c710899088e0127c61034e3860e0ae7b09871bf0a8290b74ebd47e9f78e25067da4a12af4078bb38bd3699d2ce8152f9bb2acfb0df3129241c79072da130010af4fdce730c05cfa96d66fb470836a8ba5d81eb654b7830ba2887cfe9dba22da0f8195e8bb8b8ca323f04c8b80e07ed85f350c4bf6721085a97e93fd9fca2326f10a495c7fd442433886d3e8fdf00d01e7070cc004dacd7a906238fcb7c9f1f0bc9a7e69742d52f3c8fcd9d78e0e677df9c19f015e403011e4ff45187f412e2f2edf9f31895cd78cf0212be91993ea91b0ff04cbf0b826648f177ddd7300fa4303edffb1b835fcb1cf197cd58f17b0341b5d9793d6d5ef0a4f5a5a9dfa5918c77e5ef97d068491b3c961e6e0d3d3fff490eeb23b9d9d160b83432d7238f9fd83f1f624c535ba6a4f29da2cc7e14fc2667dc3bd40c3b7d693eab9d5df57fce359d254444da578e637551640f9457ba7c5a7408b535f885fed41bd728ae355fe63ad255ecdd2af60c6a66f8ae824c44e98d628e8e5caecb6bd16aa2cbccb6fd34b4bd64e25a1463961a98e0a50e6279dbb5c631a10e23d9aa8f6c4c6b394b1fb3852e18346194f7d906aac7a972c1770fabbecb13638c06e81e0342fecaf9098e38dd18c8b96443c178fe8f62d0d5bdc385498bf5d451c9123034a1a92752bc6e0f0535d637d54234a6da4a56b0456d68021cc2c55e70d506bb8020c41f6d926202ec4059d189509eda6eb9df5833e4e68fe72dc7f96bfcb2ddda4a3ca54a928e3ab5164d9a1085508316a9cdf44aa97dfb4245f6c9fb892b0fc8c9f55d4a5675d12e72f9e490aa5bcaa6cc31f31285c7c20ce867eff4b76e1651abb20f7c59e0437b0d993e160b026fe75a1f999ed3caefb1ee468506367af84ee5881764acacc3c7752dded569f42917f4759a5e09e6efef8d25c18b3d87a283900e464e6374d0b394a4ad03e38317e65783736fe3ca0107197d7fd9d5a2018e7ab17524ff27f7b50d46dc1c46392712cc0afcd2d69f8199a1c83fea6cae69522e695f73081ce429ef43f328860c9a9d6331783832dade8fc13623d4aceb3ada5a05d35f547931a9f35a0823901196892da9a505e571fe2cec563de48a6edecec031d37b26d7d479ea365dc6d4bbc4e098ebd5d3f3ad8e3af1c5592c76de420af470fe03eee9accb4d517a19c6a62c978612f6c85d982baa97b06743915f516050abe7849efdbdb194b8c0391ff40424bfa8ef4f7b92ff2e9eb7731f76c33692ce8d9f296712da520e41a23bab29189b1b53ad039b1488ffab81694c4e98afb665f9e55883971c3434577d4ffeb2e91683345600bacde8d978daad3302c79eef1f05c8c3462e9c66f3e6a875e63018fa2cfcfdba0e8c9a764369f5978827a3c9ee88b1ea079b5cf67c0bec938087474a073ccbd95ecde315caed67ccc30568e6f89c7c87fbb7f8e6b422db1bbda3860273dcd74a5f0027fcbd56e61f1bae24d977e8a2be941e4f16e5a5ba81a6036d6e319117813eac21507fbe9826e904e06689c03e823202b2b401399a9b511da88c51a4b66b7bf0f67f909bd25f2072365d6ba580893a60846c046939c7e26bce0b4fb8efdc7b2ee4db899e14bcebedce4e6154f371cdb658056c28c7f86009d9e060c2c8389752651048c83d2b56bae1d28078adf3796c32fbf9901203a8094f7bf8591c6b205593f49c145c34ae050484c892a0aff0fe38e672b6e0a83562bef8fea8a49c8e35d08aad78fcdef0de8efe824451aa56c2440fa4124f5f9ba13fa83f78d6bbc0f77ada1c4d871a2b331ae7484d7b3f4e2f7187ca77f14b5fdafbb07a7bfc60520ccf1254240ca0cdbf3200c3e8f1c67256c5354389633c4842c0e0d464cb894e15b7f0ef259027200f658bd791141fae22d600a462d72e2373a253980208715d008283ea250e37769bf7f29224f41ad4ad9ae9d9a8cf7260b6fb540710ab65fb288d70b2324dc426b13a8e4d132406b45fa8cf11d754f978b0ce672a3728f72f4be149cab5553ec6a204ce515ed6b712442da271c2d203c1835267f57730fb8ba516cabc60e3a362f979a027dfedab68de0738bd5c4d6c28a239b43db7d22c42e01cc7ade5c6676b6c057d768dd21bbf5887decc4fa497f809799a522f47ecbedfc1ff810d6e8df83b57959224d16a52ed2baf31898d75cd14499e1bae5e25fd3708fa5267aaf412feca1ac6333f428efe63c308fca9f2e0e6b95efdc192f0430ccd08af3910eb53fc0caf79964ed3149b0c33fccbc910ae67596cb8a36a72dd9148a0ee0c3faa238c5aaae01499f43955f736b6c540cbdb0cae6bdf697f532b0caa5840bfb7eb208590734ca9cf3f844a4f73167cb3f3c7942f6c2f549462b2d5b0288da9fe3e0e5917582768c96af9d20ff2735540a65c6f2e567317ca42a808b3ce4e44120275f7d0be1d76007b5c10111b33e628c61f20f4b95907bc58da4db980c6d2193959f6f09b193139afe29ae588f065ee2671455c66404ec6697e1478d097097b0b52e9dc0a02f012c158e1dbbb8fa311169747b74ffebe8ff1bff6d1c7c39dce2b8ad1a91230cc5e4f14362d8ba1431fe066c1f7c8b36adfbd785f79013bf5db9ac16fe53b935f6bf9c2971c712afe98ac8c83944c2850521fca9f75187183e5f443b94e91ba23d2a8925f190318ef578f852f4cc516ec74ebf108785b6ab3661e8b0d0d6254c13ff1a9e041edd1b3ec002de17674d808231d454c4b2e98b693e3f32d1006fd4364428598e6548b64c811b1a0bcbf6a3fea267b8c55ea27818cc7424461b08b7732aef042f28d671db682c9715bd7ceb8ec0b93d980c35d81aa5f8749bf41cc7d1e60b8731ccb682bcb81ea285e1ad2422868ebc3e4a03e45a4b4d87613adc51705d8ad9bc6fa93790d3c8ea551c18143fbae766fbc882c7356740000e7df2fdc59e8dfc73f9f240109e6ddb485d6da02e8a12f210dcb7167ba8b5c6c4f6e5685868f15f03e4550e09dd3a44afa376aeb4c1ad98496ad7e997c90e7e4293660f9baa4fcf64eb6a1ff09b3089d576a400849dfdfab496b7ac3d36a8e4f3a0308463f03da64cb715814a64705346bfb23f7c182fe76e8e126f29f4ffc2a90e01b16db47b8418047fa61c7425b4c99d8aa57b641d3ce39d450cb0efbae1c5b9cd3f424138c62b30caf784d67c3e0a0312a0aca5dab9a9b434d1ef8e70859e498818de87045e35ca740117571e3b6a5ee9660efd146689b9a756669d9eb017085839bad223aebc658058efbf11406dc86c58f69ade1616a154eb57b83346f536f4781bf57ce878ae07e453975a504ca30e6dc353436894806613d4a53ddde5faf0803a2cb3c14ba0e315f9e2bd0a8c28fbd1cfef4a39ed0c54ecbebe0bd7044fd378dbc950cb54026408fa003d89f2427e4f0fb7aabdebe0254602a8484a1bf8826ae576e15fd26faae9aa43a3c7617ed7dd803a7635366077723af77a6ea700f5a8fe1841a1ae813dfcfaf2bd39076b9406d36a5d72d69f1cbd0561afba9ee440c8cf058a0ecd152b3b84a941aead1628958e0252bf4ce2dc01596d874c152f4f259fc643dfd887cf7392f16c88edecc90a49b3dbc9101e55dd3f5789f03bd93320aa3756a3cbd26ff3d881b8a97c0dab56dc228ae90d5fde992463e4575c7580df83e59f0e3eec1330538350480472218238d53314f5ad8722894b0bf544686bdf54ceda74344b0223ccf347c3bf931e1307c9e9f20c4e843d6046691e44687a6b2e5ac907a89644e5c087a861f41c631332c2304b94d6c99a703b014c07e54044ee9cb31db6dd2135e5708491a88899b0f4f869f13c898526915f0967be46e72f46719a79198c6e804f743b2a111dafa96aacb18a0b856ad5c50871ffcc6d7b2fb12239c15e41bf0c5835eb843043e5c565cdff3fa485c169722d8e344fde9a8b85cba89e7761632765c9c0ce0cc76fcc3dcfaeb26eebf7f96791b41697ee", 0x1000}], 0x1, &(0x7f0000002e80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x25, 0x0, 0x9, [0xffffffff, 0x401, 0x20, 0x80000001, 0xf8]}, @cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "a674fd7286d6e7"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x1c, 0x1, 0x9, [{@local, 0x9}, {@rand_addr=0x64010101, 0x401}, {@empty, 0x2}, {@private=0xa010101, 0x3}, {@multicast1, 0xffffffff}, {@empty, 0x6}, {@multicast1, 0x40}]}, @lsrr={0x83, 0xb, 0x3d, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xffffffff}, {@broadcast, 0x9}]}, @noop, @ssrr={0x89, 0x23, 0xc1, [@multicast1, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast1, @empty, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x739f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x91}}], 0x140}, 0x20000000) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001840)={0xffffffffffffffff, &(0x7f0000000740)="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", &(0x7f0000001740)=""/231}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xe, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x1, 0xfb2fa7f1450a949, 0xa, 0x50, 0xa}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xfd, &(0x7f0000001880)=""/253, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000019c0)={0x3, 0x2, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r1, r3]}, 0x80) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000001ac0)=r6) 09:17:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1454.910363][ T1845] FAULT_INJECTION: forcing a failure. [ 1454.910363][ T1845] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.923817][ T1845] CPU: 1 PID: 1845 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1454.933792][ T1845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1454.943686][ T1845] Call Trace: [ 1454.946811][ T1845] [ 1454.949587][ T1845] dump_stack_lvl+0x151/0x1b7 [ 1454.954099][ T1845] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1454.959394][ T1845] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1454.965037][ T1845] dump_stack+0x15/0x17 [ 1454.969031][ T1845] should_fail+0x3c0/0x510 [ 1454.973283][ T1845] __should_failslab+0x9f/0xe0 [ 1454.977883][ T1845] should_failslab+0x9/0x20 [ 1454.982222][ T1845] kmem_cache_alloc+0x4f/0x2f0 [ 1454.986821][ T1845] ? vm_area_dup+0x26/0x1d0 [ 1454.991171][ T1845] vm_area_dup+0x26/0x1d0 [ 1454.995328][ T1845] dup_mmap+0x6b8/0xea0 [ 1454.999321][ T1845] ? __delayed_free_task+0x20/0x20 [ 1455.004267][ T1845] ? mm_init+0x807/0x960 [ 1455.008345][ T1845] dup_mm+0x91/0x330 [ 1455.012078][ T1845] copy_mm+0x108/0x1b0 [ 1455.015988][ T1845] copy_process+0x1295/0x3250 [ 1455.020500][ T1845] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1455.025446][ T1845] ? kernel_clone+0x78/0x990 [ 1455.029872][ T1845] kernel_clone+0x22d/0x990 [ 1455.034213][ T1845] ? __kasan_check_write+0x14/0x20 [ 1455.039159][ T1845] ? create_io_thread+0x1e0/0x1e0 [ 1455.044019][ T1845] ? lapic_next_event+0x5f/0x70 [ 1455.048705][ T1845] ? clockevents_program_event+0x240/0x310 [ 1455.054348][ T1845] __x64_sys_clone+0x289/0x310 [ 1455.058948][ T1845] ? __do_sys_vfork+0x130/0x130 [ 1455.063634][ T1845] ? debug_smp_processor_id+0x17/0x20 [ 1455.068841][ T1845] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1455.074747][ T1845] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1455.080647][ T1845] do_syscall_64+0x44/0xd0 [ 1455.084898][ T1845] ? irqentry_exit+0x12/0x40 [ 1455.089325][ T1845] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1455.095057][ T1845] RIP: 0033:0x7f3bd36fc0a9 [ 1455.099309][ T1845] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1455.118750][ T1845] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1455.126993][ T1845] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1455.134805][ T1845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1455.142616][ T1845] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.150428][ T1845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:17:33 executing program 5: socketpair(0xc, 0x20000000000001, 0x3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) (async) openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8990, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x100}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8990, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1455.158240][ T1845] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1455.166058][ T1845] [ 1455.211886][ T1862] FAULT_INJECTION: forcing a failure. [ 1455.211886][ T1862] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.224507][ T1862] CPU: 0 PID: 1862 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1455.234457][ T1862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1455.244352][ T1862] Call Trace: [ 1455.247479][ T1862] [ 1455.250251][ T1862] dump_stack_lvl+0x151/0x1b7 [ 1455.254765][ T1862] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1455.260061][ T1862] dump_stack+0x15/0x17 [ 1455.264052][ T1862] should_fail+0x3c0/0x510 [ 1455.268303][ T1862] __should_failslab+0x9f/0xe0 [ 1455.272905][ T1862] should_failslab+0x9/0x20 [ 1455.277244][ T1862] kmem_cache_alloc+0x4f/0x2f0 [ 1455.281843][ T1862] ? vm_area_dup+0x26/0x1d0 [ 1455.286186][ T1862] vm_area_dup+0x26/0x1d0 [ 1455.290349][ T1862] dup_mmap+0x6b8/0xea0 [ 1455.294347][ T1862] ? __delayed_free_task+0x20/0x20 [ 1455.299290][ T1862] ? mm_init+0x807/0x960 [ 1455.303370][ T1862] dup_mm+0x91/0x330 [ 1455.307099][ T1862] copy_mm+0x108/0x1b0 [ 1455.311007][ T1862] copy_process+0x1295/0x3250 [ 1455.315521][ T1862] ? proc_fail_nth_write+0x213/0x290 [ 1455.320641][ T1862] ? proc_fail_nth_read+0x220/0x220 [ 1455.325675][ T1862] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1455.330621][ T1862] ? vfs_write+0x9af/0x1050 [ 1455.334963][ T1862] ? vmacache_update+0xb7/0x120 [ 1455.339649][ T1862] kernel_clone+0x22d/0x990 [ 1455.343987][ T1862] ? file_end_write+0x1b0/0x1b0 [ 1455.348679][ T1862] ? __kasan_check_write+0x14/0x20 [ 1455.353623][ T1862] ? create_io_thread+0x1e0/0x1e0 [ 1455.358486][ T1862] ? __mutex_lock_slowpath+0x10/0x10 [ 1455.363604][ T1862] __x64_sys_clone+0x289/0x310 [ 1455.368207][ T1862] ? __do_sys_vfork+0x130/0x130 [ 1455.372892][ T1862] ? debug_smp_processor_id+0x17/0x20 [ 1455.378098][ T1862] do_syscall_64+0x44/0xd0 [ 1455.382352][ T1862] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1455.388080][ T1862] RIP: 0033:0x7f3bd36fc0a9 [ 1455.392335][ T1862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:17:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1455.411775][ T1862] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1455.420019][ T1862] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1455.427832][ T1862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1455.435642][ T1862] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.443457][ T1862] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1455.451265][ T1862] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1455.459083][ T1862] [ 1455.488765][ T1868] FAULT_INJECTION: forcing a failure. [ 1455.488765][ T1868] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.501468][ T1868] CPU: 0 PID: 1868 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1455.511420][ T1868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1455.521310][ T1868] Call Trace: [ 1455.524436][ T1868] [ 1455.527214][ T1868] dump_stack_lvl+0x151/0x1b7 [ 1455.531725][ T1868] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1455.537022][ T1868] dump_stack+0x15/0x17 [ 1455.541012][ T1868] should_fail+0x3c0/0x510 [ 1455.545266][ T1868] __should_failslab+0x9f/0xe0 [ 1455.549864][ T1868] should_failslab+0x9/0x20 [ 1455.554204][ T1868] kmem_cache_alloc+0x4f/0x2f0 [ 1455.558803][ T1868] ? vm_area_dup+0x26/0x1d0 [ 1455.563144][ T1868] ? __kasan_check_read+0x11/0x20 [ 1455.568004][ T1868] vm_area_dup+0x26/0x1d0 [ 1455.572172][ T1868] dup_mmap+0x6b8/0xea0 [ 1455.576165][ T1868] ? __delayed_free_task+0x20/0x20 [ 1455.581109][ T1868] ? mm_init+0x807/0x960 [ 1455.585190][ T1868] dup_mm+0x91/0x330 [ 1455.588926][ T1868] copy_mm+0x108/0x1b0 [ 1455.592835][ T1868] copy_process+0x1295/0x3250 [ 1455.597342][ T1868] ? timerqueue_add+0x25c/0x280 [ 1455.602028][ T1868] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1455.606975][ T1868] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1455.612617][ T1868] kernel_clone+0x22d/0x990 [ 1455.616957][ T1868] ? __kasan_check_write+0x14/0x20 [ 1455.621904][ T1868] ? create_io_thread+0x1e0/0x1e0 [ 1455.626765][ T1868] ? lapic_next_event+0x5f/0x70 [ 1455.631459][ T1868] ? clockevents_program_event+0x240/0x310 [ 1455.637094][ T1868] __x64_sys_clone+0x289/0x310 [ 1455.641693][ T1868] ? __do_sys_vfork+0x130/0x130 [ 1455.646382][ T1868] ? debug_smp_processor_id+0x17/0x20 [ 1455.651587][ T1868] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1455.657489][ T1868] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1455.663392][ T1868] do_syscall_64+0x44/0xd0 [ 1455.667644][ T1868] ? irqentry_exit+0x12/0x40 [ 1455.672071][ T1868] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1455.677799][ T1868] RIP: 0033:0x7f3bd36fc0a9 [ 1455.682051][ T1868] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1455.701493][ T1868] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1455.709737][ T1868] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1455.717550][ T1868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1455.725360][ T1868] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 09:17:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1455.733174][ T1868] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1455.740983][ T1868] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1455.748799][ T1868] [ 1455.783360][ T1872] FAULT_INJECTION: forcing a failure. [ 1455.783360][ T1872] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.795924][ T1872] CPU: 0 PID: 1872 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1455.805874][ T1872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1455.815771][ T1872] Call Trace: [ 1455.818894][ T1872] [ 1455.821671][ T1872] dump_stack_lvl+0x151/0x1b7 [ 1455.826188][ T1872] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1455.831479][ T1872] dump_stack+0x15/0x17 [ 1455.835471][ T1872] should_fail+0x3c0/0x510 [ 1455.839724][ T1872] __should_failslab+0x9f/0xe0 [ 1455.844325][ T1872] should_failslab+0x9/0x20 [ 1455.848663][ T1872] kmem_cache_alloc+0x4f/0x2f0 [ 1455.853265][ T1872] ? anon_vma_clone+0xa1/0x4f0 [ 1455.857864][ T1872] anon_vma_clone+0xa1/0x4f0 [ 1455.862298][ T1872] anon_vma_fork+0x91/0x4f0 [ 1455.866632][ T1872] ? anon_vma_name+0x43/0x70 [ 1455.871056][ T1872] dup_mmap+0x750/0xea0 [ 1455.875052][ T1872] ? __delayed_free_task+0x20/0x20 [ 1455.879999][ T1872] ? mm_init+0x807/0x960 [ 1455.884078][ T1872] dup_mm+0x91/0x330 [ 1455.887809][ T1872] copy_mm+0x108/0x1b0 [ 1455.891712][ T1872] copy_process+0x1295/0x3250 [ 1455.896229][ T1872] ? timerqueue_add+0x25c/0x280 [ 1455.900915][ T1872] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1455.905860][ T1872] ? irqentry_exit+0x30/0x40 [ 1455.910288][ T1872] kernel_clone+0x22d/0x990 [ 1455.914626][ T1872] ? __kasan_check_write+0x14/0x20 [ 1455.919574][ T1872] ? create_io_thread+0x1e0/0x1e0 [ 1455.924434][ T1872] ? lapic_next_event+0x5f/0x70 [ 1455.929126][ T1872] ? clockevents_program_event+0x240/0x310 [ 1455.934763][ T1872] __x64_sys_clone+0x289/0x310 [ 1455.939363][ T1872] ? __do_sys_vfork+0x130/0x130 [ 1455.944050][ T1872] ? debug_smp_processor_id+0x17/0x20 [ 1455.949257][ T1872] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1455.955162][ T1872] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1455.961061][ T1872] do_syscall_64+0x44/0xd0 [ 1455.965315][ T1872] ? irqentry_exit+0x12/0x40 [ 1455.969740][ T1872] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1455.975469][ T1872] RIP: 0033:0x7f3bd36fc0a9 [ 1455.979723][ T1872] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1455.999166][ T1872] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1456.007412][ T1872] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1456.015221][ T1872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1456.023036][ T1872] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1456.030851][ T1872] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1456.038662][ T1872] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1456.046474][ T1872] 09:17:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) syz_clone(0x68000200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) write$cgroup_int(r1, &(0x7f00000000c0)=0x6, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) close(r0) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) (async) syz_clone(0x68000200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) (async) close(r1) (async) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) (async) write$cgroup_int(r1, &(0x7f00000000c0)=0x6, 0x12) (async) 09:17:37 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x111400, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='\x00') 09:17:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1459.380049][ T1883] FAULT_INJECTION: forcing a failure. [ 1459.380049][ T1883] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.392562][ T1883] CPU: 1 PID: 1883 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1459.402544][ T1883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1459.412436][ T1883] Call Trace: [ 1459.415561][ T1883] [ 1459.418337][ T1883] dump_stack_lvl+0x151/0x1b7 [ 1459.422847][ T1883] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1459.428145][ T1883] dump_stack+0x15/0x17 [ 1459.432135][ T1883] should_fail+0x3c0/0x510 [ 1459.436389][ T1883] __should_failslab+0x9f/0xe0 [ 1459.440991][ T1883] should_failslab+0x9/0x20 [ 1459.445328][ T1883] kmem_cache_alloc+0x4f/0x2f0 [ 1459.449929][ T1883] ? anon_vma_clone+0xa1/0x4f0 [ 1459.454531][ T1883] anon_vma_clone+0xa1/0x4f0 [ 1459.458960][ T1883] anon_vma_fork+0x91/0x4f0 [ 1459.463301][ T1883] ? anon_vma_name+0x43/0x70 [ 1459.467722][ T1883] dup_mmap+0x750/0xea0 [ 1459.471714][ T1883] ? __delayed_free_task+0x20/0x20 [ 1459.476664][ T1883] ? mm_init+0x807/0x960 [ 1459.480741][ T1883] dup_mm+0x91/0x330 [ 1459.484473][ T1883] copy_mm+0x108/0x1b0 [ 1459.488379][ T1883] copy_process+0x1295/0x3250 [ 1459.492895][ T1883] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1459.497839][ T1883] ? kernel_clone+0x145/0x990 [ 1459.502351][ T1883] ? kernel_clone+0x1b3/0x990 [ 1459.506866][ T1883] kernel_clone+0x22d/0x990 [ 1459.511205][ T1883] ? __kasan_check_write+0x14/0x20 [ 1459.516154][ T1883] ? create_io_thread+0x1e0/0x1e0 [ 1459.521019][ T1883] ? lapic_next_event+0x5f/0x70 [ 1459.525701][ T1883] ? clockevents_program_event+0x240/0x310 [ 1459.531343][ T1883] __x64_sys_clone+0x289/0x310 [ 1459.535950][ T1883] ? __do_sys_vfork+0x130/0x130 [ 1459.540633][ T1883] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1459.546450][ T1883] do_syscall_64+0x44/0xd0 [ 1459.550698][ T1883] ? irqentry_exit+0x12/0x40 [ 1459.555123][ T1883] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1459.560850][ T1883] RIP: 0033:0x7f3bd36fc0a9 [ 1459.565109][ T1883] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1459.584545][ T1883] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1459.592792][ T1883] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1459.600603][ T1883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1459.608416][ T1883] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.616229][ T1883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 09:17:38 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = gettid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r2, 0x0, r1, 0x2) (async) r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3, 0x6, 0x0, 0x7, 0x0, 0x8, 0xc601, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4c38fe12, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x859a0, 0x101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x1}, r2, 0x4, r0, 0x8) r4 = perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0x3, 0x0, 0x81, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0x5}, 0x0, 0xffff, 0x3, 0x0, 0x7, 0x3ff, 0x8}, 0xffffffffffffffff, 0x9, r5, 0x3) r6 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x86, 0xfa, 0x5, 0x0, 0x81, 0x90000, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x2, 0x1, 0x9, 0x8, 0x0, 0x1f, 0x0, 0x101, 0x0, 0x3}, r2, 0x10, r3, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000001c0)=0x9) (async) perf_event_open$cgroup(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x3, 0x6b, 0x20, 0x0, 0x7fff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffff8000, 0x9a0}, 0x0, 0x1f, 0x1c, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r4, 0x6f5aba8637fc5e50) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2d2, &(0x7f0000000540)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90\xdd[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde\x9a[\xe2(\x88\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93\xd2\x00\x00\x00\x00\x00\x00\x00\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x832Z\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x007q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xe4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.\xa2\xd8\x18`\x1b\xbex\xc9BFK\xc6^\x13\xce68\xe4\x83\xfd?\x87\x94\v\xb4x\xf4|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xee>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8d\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xdde\xe8p29\v\x02\xa2b\x13R\xef\xffA\f\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x1e\x00_^9\xb1\b\x87\xc6\xb4\xf0\'f\xba\xbd\xfe\x11\xf8\xc8W\x81s^\xd9\x03\x00\x00\x00\x00\x00\x00\x00\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2\x1fA\x00\xdc\xdd\x11x\x90\x97QJ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00&\xd8\xb3S\xe0\x1e\xa7\xc3`~U\x91\xfa\x92\x1e\xccdfFz\xa8\t\xe4+\x83\xac\x94'}, 0x30) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)) 09:17:38 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async) r0 = syz_clone(0x62800400, &(0x7f0000001b40), 0x0, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00)="4c188ab3276be49f5ca132abd030461d5adb4f4ce9e8a7ce7d98d3b31880d78340e1090627259f33b55159ced91cd1fb7f52d21090efb84d162c6de0ffc4f8a1aa47f92d6dbf8eae5243b0221c63f133137983de6ed5956fa43c0b8e3cb771e0d35793cac1b8e54446ce79369e7c4c14bd504750cb7df751ccc10165661f3d02959ae3a920fcde798c379bf8cb5f422c5c529da51330dc821691e323696c9c19cd07c26c427d5dfef4e9dc3acd3bd2af5b1bf3") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001d00)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001cc0)='\x00'}, 0x30) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="c80ce7e01347eec821cceae81fba9e5a3ad770a96547863a6253f6da66cfd64a0a5df517ed65161d4bf09fd5e8c57581db9f1883b433d8c3fb7a42c91e08efc748afac52daeca97d5c6df5a40e6201686c042f4c31cdaa7f1419c49fca26ccc25474d866be53b3a40f4eecb4b644c0cfe7aed3d0993841c6c4c47f23cedc9e7ace5d46839f3130488321e0523d4589294a0a5aeb60e184ffafb4056d82fb47b2faee37b9e7c1690d7bd83a2d0db8ac955a89b12d6162ffbff72ac87bf5de050c8ffca4dc3b9af2d44832", 0xca}, {&(0x7f0000000600)="a711c72b6b3ac02f9a1b3942c54b8dc7923f4d92b6ba90dffc745bbb45c10076eabe0f8cff2714ddb287370ed109bcfeed0dc9716fd123874faf493ea7612ac02a3a3714eb9fc6d56d311a9902d174de88e85d6c45a7739afffde45578c4762b32dc42b0702822b287b505dd993b9704a8403b9505c18ab3e51b4ea53627d5af780635c5cdc6aca14ad7ae6138d84f60fc3800a73570de132432357af63e2b406ef7fc6ca324bcc88c317871d97a337f245d47e9f40aef39ba6d1a08", 0xbc}], 0x2}, 0x4080) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b00)={0x0, 0x0, 0x20}, 0xc) (async, rerun: 64) r4 = perf_event_open(&(0x7f0000001dc0)={0x5b0178d30868cd97, 0x80, 0x7f, 0xae, 0x5, 0x40, 0x0, 0x9, 0x11000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x947b328f9de59ff5, @perf_bp={&(0x7f00000004c0), 0x2}, 0x808cb, 0x1, 0x0, 0xd, 0x4, 0x8, 0x0, 0x0, 0x100, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001d40)={0x2, 0x80, 0x40, 0x2, 0x6, 0x0, 0x0, 0x6, 0x84000, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0xe}, 0x2008, 0x2e, 0x7f, 0x5, 0x6, 0x9191, 0x7fff, 0x0, 0x800}, r0, 0xb, r4, 0x9) (async) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) (async) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) (async) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000002fc0)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000001e40)="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", 0x1000}], 0x1, &(0x7f0000002e80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x25, 0x0, 0x9, [0xffffffff, 0x401, 0x20, 0x80000001, 0xf8]}, @cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "a674fd7286d6e7"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x1c, 0x1, 0x9, [{@local, 0x9}, {@rand_addr=0x64010101, 0x401}, {@empty, 0x2}, {@private=0xa010101, 0x3}, {@multicast1, 0xffffffff}, {@empty, 0x6}, {@multicast1, 0x40}]}, @lsrr={0x83, 0xb, 0x3d, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xffffffff}, {@broadcast, 0x9}]}, @noop, @ssrr={0x89, 0x23, 0xc1, [@multicast1, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast1, @empty, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x739f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x91}}], 0x140}, 0x20000000) (async, rerun: 32) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001840)={0xffffffffffffffff, &(0x7f0000000740)="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", &(0x7f0000001740)=""/231}, 0x20) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xe, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x1, 0xfb2fa7f1450a949, 0xa, 0x50, 0xa}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xfd, &(0x7f0000001880)=""/253, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000019c0)={0x3, 0x2, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r1, r3]}, 0x80) (rerun: 32) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000001ac0)=r6) 09:17:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000001"], 0x128}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000340)={&(0x7f0000000100), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000280)=""/55, 0x37}], 0x4, &(0x7f0000000300)}, 0x40000020) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002140)={0x0}, 0x10) syz_clone(0x9000200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='\t') 09:17:38 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x111400, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='\x00') [ 1459.624036][ T1883] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1459.631851][ T1883] 09:17:38 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x111400, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x111400, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='\x00') (async) 09:17:38 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:38 executing program 5: bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x700, 0xfffffffffffffffc}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r4) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x5, 0x2, 0xcd, 0xfa, 0x0, 0x6, 0x30440, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000006c0), 0x6}, 0x80401, 0xffffffffffffffff, 0x4, 0x1, 0x7fffffff, 0x1ff, 0xfffd, 0x0, 0x400, 0x0, 0x2}, 0x0, 0xc, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0xffffff3d, 0x80, 0x0, 0x1418, r1, 0x7, '\x00', r2, r0, 0x5, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[r1, r3, r5, r0]}, 0x80) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x10}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x5, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x90391, 0xa7cfc9a53487124f, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0xb}, 0x82100, 0x7fffffffffffffff, 0x0, 0x5, 0x0, 0x6, 0x1, 0x0, 0x20, 0x0, 0x1}, r6, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x3, 0x1, 0x8, 0x2, 0x0, 0x1ff, 0x5a541, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040), 0xb}, 0x3020, 0x8, 0x80000000, 0x1, 0x7ff, 0x3c74048d, 0x1, 0x0, 0x1f, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r7, 0x8) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x181440, 0x0) [ 1459.740675][ T1901] FAULT_INJECTION: forcing a failure. [ 1459.740675][ T1901] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.753607][ T1901] CPU: 0 PID: 1901 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1459.763573][ T1901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1459.773467][ T1901] Call Trace: [ 1459.776590][ T1901] [ 1459.779367][ T1901] dump_stack_lvl+0x151/0x1b7 [ 1459.783884][ T1901] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1459.789178][ T1901] ? anon_vma_fork+0x9c/0x4f0 [ 1459.793693][ T1901] dump_stack+0x15/0x17 [ 1459.797685][ T1901] should_fail+0x3c0/0x510 [ 1459.801938][ T1901] __should_failslab+0x9f/0xe0 [ 1459.806535][ T1901] should_failslab+0x9/0x20 [ 1459.810876][ T1901] kmem_cache_alloc+0x4f/0x2f0 [ 1459.815477][ T1901] ? anon_vma_fork+0xf7/0x4f0 [ 1459.819990][ T1901] anon_vma_fork+0xf7/0x4f0 [ 1459.824328][ T1901] ? anon_vma_name+0x43/0x70 [ 1459.828757][ T1901] dup_mmap+0x750/0xea0 [ 1459.832749][ T1901] ? __delayed_free_task+0x20/0x20 [ 1459.837693][ T1901] ? mm_init+0x807/0x960 [ 1459.841772][ T1901] dup_mm+0x91/0x330 [ 1459.845509][ T1901] copy_mm+0x108/0x1b0 [ 1459.849411][ T1901] copy_process+0x1295/0x3250 [ 1459.853928][ T1901] ? timerqueue_add+0x25c/0x280 [ 1459.858612][ T1901] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1459.863559][ T1901] ? irqentry_exit+0x30/0x40 [ 1459.867990][ T1901] kernel_clone+0x22d/0x990 [ 1459.872328][ T1901] ? __kasan_check_write+0x14/0x20 [ 1459.877273][ T1901] ? create_io_thread+0x1e0/0x1e0 [ 1459.882133][ T1901] ? lapic_next_event+0x5f/0x70 09:17:38 executing program 5: bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x700, 0xfffffffffffffffc}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x700, 0xfffffffffffffffc}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r4) (async) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) (async) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x5, 0x2, 0xcd, 0xfa, 0x0, 0x6, 0x30440, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000006c0), 0x6}, 0x80401, 0xffffffffffffffff, 0x4, 0x1, 0x7fffffff, 0x1ff, 0xfffd, 0x0, 0x400, 0x0, 0x2}, 0x0, 0xc, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0xffffff3d, 0x80, 0x0, 0x1418, r1, 0x7, '\x00', r2, r0, 0x5, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[r1, r3, r5, r0]}, 0x80) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x10}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x5, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x90391, 0xa7cfc9a53487124f, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0xb}, 0x82100, 0x7fffffffffffffff, 0x0, 0x5, 0x0, 0x6, 0x1, 0x0, 0x20, 0x0, 0x1}, r6, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x3, 0x1, 0x8, 0x2, 0x0, 0x1ff, 0x5a541, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040), 0xb}, 0x3020, 0x8, 0x80000000, 0x1, 0x7ff, 0x3c74048d, 0x1, 0x0, 0x1f, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r7, 0x8) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480), 0x4) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x181440, 0x0) [ 1459.886818][ T1901] ? clockevents_program_event+0x240/0x310 [ 1459.892462][ T1901] __x64_sys_clone+0x289/0x310 [ 1459.897065][ T1901] ? __do_sys_vfork+0x130/0x130 [ 1459.901750][ T1901] ? __x64_sys_clone+0x6/0x310 [ 1459.906349][ T1901] do_syscall_64+0x44/0xd0 [ 1459.910605][ T1901] ? irqentry_exit+0x12/0x40 [ 1459.915027][ T1901] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1459.920760][ T1901] RIP: 0033:0x7f3bd36fc0a9 [ 1459.925012][ T1901] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1459.944452][ T1901] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1459.952697][ T1901] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1459.960509][ T1901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1459.968321][ T1901] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.976132][ T1901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1459.983944][ T1901] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1459.991761][ T1901] [ 1460.000379][ T1901] ================================================================== [ 1460.008263][ T1901] BUG: KASAN: use-after-free in vm_area_free+0x7e/0x230 [ 1460.015028][ T1901] Write of size 4 at addr ffff888111cff180 by task syz-executor.1/1901 [ 1460.023099][ T1901] [ 1460.025269][ T1901] CPU: 1 PID: 1901 Comm: syz-executor.1 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1460.035250][ T1901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1460.045144][ T1901] Call Trace: [ 1460.048269][ T1901] [ 1460.051048][ T1901] dump_stack_lvl+0x151/0x1b7 [ 1460.055560][ T1901] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1460.060853][ T1901] ? panic+0x727/0x727 [ 1460.064759][ T1901] ? slab_free_freelist_hook+0xc9/0x1a0 [ 1460.070141][ T1901] print_address_description+0x87/0x3d0 [ 1460.075526][ T1901] kasan_report+0x1a6/0x1f0 [ 1460.079861][ T1901] ? vm_area_free+0x7e/0x230 [ 1460.084289][ T1901] ? vm_area_free+0x7e/0x230 [ 1460.088718][ T1901] kasan_check_range+0x2aa/0x2e0 [ 1460.093490][ T1901] __kasan_check_write+0x14/0x20 [ 1460.098431][ T1901] vm_area_free+0x7e/0x230 [ 1460.102677][ T1901] dup_mmap+0xbcd/0xea0 [ 1460.106677][ T1901] ? __delayed_free_task+0x20/0x20 [ 1460.111623][ T1901] ? mm_init+0x807/0x960 [ 1460.115697][ T1901] dup_mm+0x91/0x330 [ 1460.119453][ T1901] copy_mm+0x108/0x1b0 [ 1460.123333][ T1901] copy_process+0x1295/0x3250 [ 1460.127935][ T1901] ? timerqueue_add+0x25c/0x280 [ 1460.132622][ T1901] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1460.137567][ T1901] ? irqentry_exit+0x30/0x40 [ 1460.141993][ T1901] kernel_clone+0x22d/0x990 [ 1460.146333][ T1901] ? __kasan_check_write+0x14/0x20 [ 1460.151279][ T1901] ? create_io_thread+0x1e0/0x1e0 [ 1460.156140][ T1901] ? lapic_next_event+0x5f/0x70 [ 1460.160828][ T1901] ? clockevents_program_event+0x240/0x310 [ 1460.166469][ T1901] __x64_sys_clone+0x289/0x310 [ 1460.171074][ T1901] ? __do_sys_vfork+0x130/0x130 [ 1460.175756][ T1901] ? __x64_sys_clone+0x6/0x310 [ 1460.180354][ T1901] do_syscall_64+0x44/0xd0 [ 1460.184612][ T1901] ? irqentry_exit+0x12/0x40 [ 1460.189037][ T1901] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1460.194765][ T1901] RIP: 0033:0x7f3bd36fc0a9 [ 1460.199020][ T1901] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1460.218457][ T1901] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1460.226709][ T1901] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1460.234516][ T1901] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1460.242326][ T1901] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1460.250143][ T1901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1460.257948][ T1901] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1460.265777][ T1901] [ 1460.268623][ T1901] [ 1460.270793][ T1901] Allocated by task 1883: [ 1460.274973][ T1901] __kasan_slab_alloc+0xb2/0xe0 [ 1460.279648][ T1901] kmem_cache_alloc+0x189/0x2f0 [ 1460.284333][ T1901] vm_area_dup+0x26/0x1d0 [ 1460.288500][ T1901] dup_mmap+0x6b8/0xea0 [ 1460.292495][ T1901] dup_mm+0x91/0x330 [ 1460.296224][ T1901] copy_mm+0x108/0x1b0 [ 1460.300131][ T1901] copy_process+0x1295/0x3250 [ 1460.304647][ T1901] kernel_clone+0x22d/0x990 [ 1460.309014][ T1901] __x64_sys_clone+0x289/0x310 [ 1460.313584][ T1901] do_syscall_64+0x44/0xd0 [ 1460.317838][ T1901] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1460.323564][ T1901] [ 1460.325737][ T1901] Freed by task 1893: [ 1460.329553][ T1901] kasan_set_track+0x4c/0x70 [ 1460.333981][ T1901] kasan_set_free_info+0x23/0x40 [ 1460.338761][ T1901] ____kasan_slab_free+0x126/0x160 [ 1460.343701][ T1901] __kasan_slab_free+0x11/0x20 [ 1460.348300][ T1901] slab_free_freelist_hook+0xc9/0x1a0 [ 1460.353508][ T1901] kmem_cache_free+0x11a/0x2e0 [ 1460.358109][ T1901] vm_area_free+0x1ae/0x230 [ 1460.362449][ T1901] exit_mmap+0x5dd/0x7a0 [ 1460.366549][ T1901] __mmput+0x95/0x300 [ 1460.370349][ T1901] mmput+0x50/0x60 [ 1460.373908][ T1901] exit_mm+0x50d/0x760 [ 1460.377952][ T1901] do_exit+0x63c/0x24d0 [ 1460.381948][ T1901] __ia32_sys_exit+0x0/0x40 [ 1460.386279][ T1901] do_syscall_64+0x44/0xd0 [ 1460.390538][ T1901] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1460.396262][ T1901] [ 1460.398438][ T1901] The buggy address belongs to the object at ffff888111cff128 [ 1460.398438][ T1901] which belongs to the cache vm_area_struct of size 232 [ 1460.412578][ T1901] The buggy address is located 88 bytes inside of [ 1460.412578][ T1901] 232-byte region [ffff888111cff128, ffff888111cff210) [ 1460.425596][ T1901] The buggy address belongs to the page: [ 1460.431148][ T1901] page:ffffea0004473fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111cff [ 1460.441138][ T1901] flags: 0x4000000000000200(slab|zone=1) [ 1460.446615][ T1901] raw: 4000000000000200 ffffea000456a5c0 0000000500000005 ffff888100274300 [ 1460.455023][ T1901] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 1460.463447][ T1901] page dumped because: kasan: bad access detected [ 1460.469702][ T1901] page_owner tracks the page as allocated [ 1460.475243][ T1901] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 31322, ts 1063841461416, free_ts 1063836537375 [ 1460.491474][ T1901] post_alloc_hook+0x1ab/0x1b0 [ 1460.496072][ T1901] get_page_from_freelist+0x38b/0x400 [ 1460.501280][ T1901] __alloc_pages+0x3a8/0x7c0 [ 1460.505708][ T1901] allocate_slab+0x62/0x580 [ 1460.510045][ T1901] ___slab_alloc+0x2e2/0x6f0 [ 1460.514473][ T1901] __slab_alloc+0x4a/0x90 [ 1460.518641][ T1901] kmem_cache_alloc+0x205/0x2f0 [ 1460.523325][ T1901] vm_area_alloc+0x24/0x130 [ 1460.527665][ T1901] mmap_region+0xb80/0x1af0 [ 1460.532005][ T1901] do_mmap+0x785/0xe40 [ 1460.535911][ T1901] vm_mmap_pgoff+0x1d4/0x420 [ 1460.540336][ T1901] ksys_mmap_pgoff+0xed/0x1e0 [ 1460.544852][ T1901] __x64_sys_mmap+0x103/0x120 [ 1460.549364][ T1901] do_syscall_64+0x44/0xd0 [ 1460.553618][ T1901] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1460.559358][ T1901] page last free stack trace: [ 1460.563861][ T1901] free_pcp_prepare+0x448/0x450 [ 1460.568547][ T1901] free_unref_page_list+0x16a/0xad0 [ 1460.573579][ T1901] release_pages+0xf3e/0xf90 [ 1460.578007][ T1901] free_pages_and_swap_cache+0x97/0xb0 [ 1460.583301][ T1901] tlb_flush_mmu+0x860/0xa00 [ 1460.587728][ T1901] tlb_finish_mmu+0xd2/0x1f0 [ 1460.592157][ T1901] exit_mmap+0x46e/0x7a0 [ 1460.596235][ T1901] __mmput+0x95/0x300 [ 1460.600053][ T1901] mmput+0x50/0x60 [ 1460.603610][ T1901] exit_mm+0x50d/0x760 [ 1460.607518][ T1901] do_exit+0x63c/0x24d0 [ 1460.611509][ T1901] do_group_exit+0x13a/0x300 [ 1460.615935][ T1901] get_signal+0x77e/0x1600 [ 1460.620187][ T1901] arch_do_signal_or_restart+0x9f/0x670 [ 1460.625573][ T1901] exit_to_user_mode_loop+0xd4/0x110 [ 1460.630691][ T1901] exit_to_user_mode_prepare+0x3b/0x40 [ 1460.635986][ T1901] [ 1460.638161][ T1901] Memory state around the buggy address: [ 1460.643630][ T1901] ffff888111cff080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 1460.651524][ T1901] ffff888111cff100: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb [ 1460.659421][ T1901] >ffff888111cff180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1460.667317][ T1901] ^ [ 1460.671224][ T1901] ffff888111cff200: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 1460.679124][ T1901] ffff888111cff280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1460.687021][ T1901] ================================================================== 09:17:39 executing program 5: bpf$LINK_DETACH(0x22, 0x0, 0x0) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async, rerun: 64) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) (async, rerun: 64) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x700, 0xfffffffffffffffc}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r4) (async) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) (async) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x5, 0x2, 0xcd, 0xfa, 0x0, 0x6, 0x30440, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000006c0), 0x6}, 0x80401, 0xffffffffffffffff, 0x4, 0x1, 0x7fffffff, 0x1ff, 0xfffd, 0x0, 0x400, 0x0, 0x2}, 0x0, 0xc, r4, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0xffffff3d, 0x80, 0x0, 0x1418, r1, 0x7, '\x00', r2, r0, 0x5, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0xd, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[r1, r3, r5, r0]}, 0x80) (async) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x10}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x5, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x90391, 0xa7cfc9a53487124f, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0xb}, 0x82100, 0x7fffffffffffffff, 0x0, 0x5, 0x0, 0x6, 0x1, 0x0, 0x20, 0x0, 0x1}, r6, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x3, 0x1, 0x8, 0x2, 0x0, 0x1ff, 0x5a541, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040), 0xb}, 0x3020, 0x8, 0x80000000, 0x1, 0x7ff, 0x3c74048d, 0x1, 0x0, 0x1f, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r7, 0x8) (async) syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async, rerun: 32) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480), 0x4) (rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x181440, 0x0) [ 1460.694920][ T1901] Disabling lock debugging due to kernel taint 09:17:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0xfffffeff, 0x1, 0xccce, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x1, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x4102}) 09:17:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x2b0f83b1bcf77c30}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xe8034000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001880)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) [ 1464.424293][ T1932] FAULT_INJECTION: forcing a failure. [ 1464.424293][ T1932] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.436835][ T1932] CPU: 0 PID: 1932 Comm: syz-executor.1 Tainted: G B 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1464.448089][ T1932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1464.457983][ T1932] Call Trace: [ 1464.461107][ T1932] [ 1464.463886][ T1932] dump_stack_lvl+0x151/0x1b7 [ 1464.468407][ T1932] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1464.473697][ T1932] dump_stack+0x15/0x17 [ 1464.477687][ T1932] should_fail+0x3c0/0x510 [ 1464.481949][ T1932] __should_failslab+0x9f/0xe0 [ 1464.486627][ T1932] should_failslab+0x9/0x20 [ 1464.490968][ T1932] kmem_cache_alloc+0x4f/0x2f0 [ 1464.495565][ T1932] ? anon_vma_fork+0x1b9/0x4f0 [ 1464.500163][ T1932] anon_vma_fork+0x1b9/0x4f0 [ 1464.504591][ T1932] dup_mmap+0x750/0xea0 [ 1464.508586][ T1932] ? __delayed_free_task+0x20/0x20 [ 1464.513531][ T1932] ? mm_init+0x807/0x960 [ 1464.517609][ T1932] dup_mm+0x91/0x330 [ 1464.521862][ T1932] copy_mm+0x108/0x1b0 [ 1464.525771][ T1932] copy_process+0x1295/0x3250 [ 1464.530546][ T1932] ? timerqueue_add+0x25c/0x280 [ 1464.535232][ T1932] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1464.540176][ T1932] kernel_clone+0x22d/0x990 [ 1464.544606][ T1932] ? irqentry_exit+0x30/0x40 [ 1464.549028][ T1932] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1464.554671][ T1932] ? create_io_thread+0x1e0/0x1e0 [ 1464.559532][ T1932] __x64_sys_clone+0x289/0x310 [ 1464.564141][ T1932] ? __do_sys_vfork+0x130/0x130 [ 1464.568821][ T1932] ? debug_smp_processor_id+0x17/0x20 [ 1464.574027][ T1932] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1464.579927][ T1932] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 1464.585831][ T1932] do_syscall_64+0x44/0xd0 [ 1464.590083][ T1932] ? irqentry_exit+0x12/0x40 [ 1464.594511][ T1932] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1464.600239][ T1932] RIP: 0033:0x7f3bd36fc0a9 [ 1464.604494][ T1932] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1464.623933][ T1932] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1464.632177][ T1932] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1464.639998][ T1932] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1464.647810][ T1932] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.655613][ T1932] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1464.663425][ T1932] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1464.671239][ T1932] 09:17:43 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2cffdf28, 0x8dc8, 0x3, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0xfff, 0x3c94, 0x4ce, r2, 0x5, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad45be550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000081ffff080000000000"], 0x0, 0x0, 0x26, &(0x7f0000000500)=""/38, 0x0, 0x6, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x2, 0x6, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0800400, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0) 09:17:43 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async) r0 = syz_clone(0x62800400, &(0x7f0000001b40), 0x0, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00)="4c188ab3276be49f5ca132abd030461d5adb4f4ce9e8a7ce7d98d3b31880d78340e1090627259f33b55159ced91cd1fb7f52d21090efb84d162c6de0ffc4f8a1aa47f92d6dbf8eae5243b0221c63f133137983de6ed5956fa43c0b8e3cb771e0d35793cac1b8e54446ce79369e7c4c14bd504750cb7df751ccc10165661f3d02959ae3a920fcde798c379bf8cb5f422c5c529da51330dc821691e323696c9c19cd07c26c427d5dfef4e9dc3acd3bd2af5b1bf3") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001d00)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001cc0)='\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="c80ce7e01347eec821cceae81fba9e5a3ad770a96547863a6253f6da66cfd64a0a5df517ed65161d4bf09fd5e8c57581db9f1883b433d8c3fb7a42c91e08efc748afac52daeca97d5c6df5a40e6201686c042f4c31cdaa7f1419c49fca26ccc25474d866be53b3a40f4eecb4b644c0cfe7aed3d0993841c6c4c47f23cedc9e7ace5d46839f3130488321e0523d4589294a0a5aeb60e184ffafb4056d82fb47b2faee37b9e7c1690d7bd83a2d0db8ac955a89b12d6162ffbff72ac87bf5de050c8ffca4dc3b9af2d44832", 0xca}, {&(0x7f0000000600)="a711c72b6b3ac02f9a1b3942c54b8dc7923f4d92b6ba90dffc745bbb45c10076eabe0f8cff2714ddb287370ed109bcfeed0dc9716fd123874faf493ea7612ac02a3a3714eb9fc6d56d311a9902d174de88e85d6c45a7739afffde45578c4762b32dc42b0702822b287b505dd993b9704a8403b9505c18ab3e51b4ea53627d5af780635c5cdc6aca14ad7ae6138d84f60fc3800a73570de132432357af63e2b406ef7fc6ca324bcc88c317871d97a337f245d47e9f40aef39ba6d1a08", 0xbc}], 0x2}, 0x4080) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b00)={0x0, 0x0, 0x20}, 0xc) r4 = perf_event_open(&(0x7f0000001dc0)={0x5b0178d30868cd97, 0x80, 0x7f, 0xae, 0x5, 0x40, 0x0, 0x9, 0x11000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x947b328f9de59ff5, @perf_bp={&(0x7f00000004c0), 0x2}, 0x808cb, 0x1, 0x0, 0xd, 0x4, 0x8, 0x0, 0x0, 0x100, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001d40)={0x2, 0x80, 0x40, 0x2, 0x6, 0x0, 0x0, 0x6, 0x84000, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0xe}, 0x2008, 0x2e, 0x7f, 0x5, 0x6, 0x9191, 0x7fff, 0x0, 0x800}, r0, 0xb, r4, 0x9) (async) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r5) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000002fc0)={&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000001e40)="57ee0ed87e7c3c49d47779661b51716a5af8990088f74384a3f8192210cd7fd6fc4aa5da53c5baf15d55275acadc6f25f4ffae960de75973b11c15f666faaad71fef9f7f74639a662e8bfd62534846849a82c3e465c095d54e5d66045badf315da7a61d050b943ba3eb1ab24619f307df8072dd9717767b69f83bf9be096bfd91e3a9ee95759ae27aaed4eb9591256421d213abb9f2a1fa3281a066c776ef0ed1ad71db2eaac2ba9459e3a0a6ea1bc8f4077b01162a98c746e92832184af403e6eec5ceaa5b4a5b8ab6140e9c24dc15628a5adb8df912405b5319108d66368742e4ada21a9c34798425fb6953e025065998042fa687b5198b5c8821bb4d01f52fe71ead2436e4e7f9754042668528327eeaec9e3fffb831d13fb380bb797a98d93b4bc3c6a3cb994b43a1817552e339d22cf75df83913414a4445b8138432c7d17365c34d113c8ebde8e26ae285da4cd0f375eaf1b5e8c6ac8ecc895c1fcc870828b549d509887fa9d0611ec05362b134915e6f4d3da621142975beafa87351760b3ce5f81a3de826e6211ac6725741868805b03fb45533dae0eb484d10336a5bb09562a5d06b3d8384ae4d7e05f812b19dccc3cdf44a1398280b0ee862a8b58741ba479101fa125259da35e1be3243fd68435f4a7efdeef69ec1b0ea3931fae37018905831caf80a861456a8c3ca528a7d9f7d92f4935ca3ebf4903162d1669114ebea34032674135dbee7b463c30c13a2b53f43d769ef4c03a2f5155d7875d8ca4af72657c3a837fa4464212a7e8da630e3d679531ca865d0b623287b7052d4bd73b1ff6ad7e21cd89a4e51a59543f17d739ce57c953e58941d5b85397e4fbbc1d0fdc2b58a760e24152e4e6326622691b8bdc95931d2bf3b72921ba850c275eeef039b98dccbf6669f226c769ad2a170e4adc47da17909e835877a711fd94080800cf6796ac81c9ab7107cc1788d0277feebceaf3db02359f4f3f84d4745ca57aac1df522ffdfea2ea5118db7a8835fa2f516f178d540a8e53983f5dabc427a756d8d4e551788ddb7a57421f9d63cd071bd2830a3bfd79baecdbcd97d29bf00c58be1855af27a6878c9b8a4d3bd57e1c25f204dcda7d6d4b9fd722a877a9fae9715f8a8e32f4a560123f29e172eb0033a5c8f048982efb411ac1da67a1b16253e30e72adcc90ce613a0a135d71c9ead8ed2a49b484634ea50a558b63aac52b001aa7d3ca649eb398e683d0bd6bed2a985010fd7af76bb5b1b4d0a7b90c0f9d72658f6194e28d1650bce7e4fee232ff7d3ce73caeea27003c2eb2a6af4e6c46174431cf010c6f51ec53281d44bdf0ccb66b81c2ef301746d9140320495880a5b7c1c3e5472ee7909468c5476b0e7be728b6f7ff75734417745199f99c3ce08372e0176b9cffa43a3b992a0a96af325c3d57868d3a193c597913b7678579e9146279b1b2ee47bf8227f85ae1c5aa9439bcc016b26269375fb186750e2302b3173863b703feff2cc73771818554fc65123e48cbde887d29836720fc686bec565b28c40dfabb30a2a51f97b39594ba2c3f01c175f305fa608cb2f17b7ce4b412eec6b3213d7028a7c0fd8cbeb95e6fbe77d04f6e7f4db9b092569e0bd1493344b7659f8678b1132f65fa25e5fb1636b2408158ded27e3d586ddc83e5535551b6e0633f3c520490f70faa8a70684be33fd9b9b429be543f55037f37d8518b9469b2ada42e474d654e3b6c07527656ab7f125e659b1d2729ee131336847d982d845ad62c5280dc3179aab696ce10846ede617810a4951d15f99c7fb3139b2a6fefb2dc4a4e0fe7f225c710899088e0127c61034e3860e0ae7b09871bf0a8290b74ebd47e9f78e25067da4a12af4078bb38bd3699d2ce8152f9bb2acfb0df3129241c79072da130010af4fdce730c05cfa96d66fb470836a8ba5d81eb654b7830ba2887cfe9dba22da0f8195e8bb8b8ca323f04c8b80e07ed85f350c4bf6721085a97e93fd9fca2326f10a495c7fd442433886d3e8fdf00d01e7070cc004dacd7a906238fcb7c9f1f0bc9a7e69742d52f3c8fcd9d78e0e677df9c19f015e403011e4ff45187f412e2f2edf9f31895cd78cf0212be91993ea91b0ff04cbf0b826648f177ddd7300fa4303edffb1b835fcb1cf197cd58f17b0341b5d9793d6d5ef0a4f5a5a9dfa5918c77e5ef97d068491b3c961e6e0d3d3fff490eeb23b9d9d160b83432d7238f9fd83f1f624c535ba6a4f29da2cc7e14fc2667dc3bd40c3b7d693eab9d5df57fce359d254444da578e637551640f9457ba7c5a7408b535f885fed41bd728ae355fe63ad255ecdd2af60c6a66f8ae824c44e98d628e8e5caecb6bd16aa2cbccb6fd34b4bd64e25a1463961a98e0a50e6279dbb5c631a10e23d9aa8f6c4c6b394b1fb3852e18346194f7d906aac7a972c1770fabbecb13638c06e81e0342fecaf9098e38dd18c8b96443c178fe8f62d0d5bdc385498bf5d451c9123034a1a92752bc6e0f0535d637d54234a6da4a56b0456d68021cc2c55e70d506bb8020c41f6d926202ec4059d189509eda6eb9df5833e4e68fe72dc7f96bfcb2ddda4a3ca54a928e3ab5164d9a1085508316a9cdf44aa97dfb4245f6c9fb892b0fc8c9f55d4a5675d12e72f9e490aa5bcaa6cc31f31285c7c20ce867eff4b76e1651abb20f7c59e0437b0d993e160b026fe75a1f999ed3caefb1ee468506367af84ee5881764acacc3c7752dded569f42917f4759a5e09e6efef8d25c18b3d87a283900e464e6374d0b394a4ad03e38317e65783736fe3ca0107197d7fd9d5a2018e7ab17524ff27f7b50d46dc1c46392712cc0afcd2d69f8199a1c83fea6cae69522e695f73081ce429ef43f328860c9a9d6331783832dade8fc13623d4aceb3ada5a05d35f547931a9f35a0823901196892da9a505e571fe2cec563de48a6edecec031d37b26d7d479ea365dc6d4bbc4e098ebd5d3f3ad8e3af1c5592c76de420af470fe03eee9accb4d517a19c6a62c978612f6c85d982baa97b06743915f516050abe7849efdbdb194b8c0391ff40424bfa8ef4f7b92ff2e9eb7731f76c33692ce8d9f296712da520e41a23bab29189b1b53ad039b1488ffab81694c4e98afb665f9e55883971c3434577d4ffeb2e91683345600bacde8d978daad3302c79eef1f05c8c3462e9c66f3e6a875e63018fa2cfcfdba0e8c9a764369f5978827a3c9ee88b1ea079b5cf67c0bec938087474a073ccbd95ecde315caed67ccc30568e6f89c7c87fbb7f8e6b422db1bbda3860273dcd74a5f0027fcbd56e61f1bae24d977e8a2be941e4f16e5a5ba81a6036d6e319117813eac21507fbe9826e904e06689c03e823202b2b401399a9b511da88c51a4b66b7bf0f67f909bd25f2072365d6ba580893a60846c046939c7e26bce0b4fb8efdc7b2ee4db899e14bcebedce4e6154f371cdb658056c28c7f86009d9e060c2c8389752651048c83d2b56bae1d28078adf3796c32fbf9901203a8094f7bf8591c6b205593f49c145c34ae050484c892a0aff0fe38e672b6e0a83562bef8fea8a49c8e35d08aad78fcdef0de8efe824451aa56c2440fa4124f5f9ba13fa83f78d6bbc0f77ada1c4d871a2b331ae7484d7b3f4e2f7187ca77f14b5fdafbb07a7bfc60520ccf1254240ca0cdbf3200c3e8f1c67256c5354389633c4842c0e0d464cb894e15b7f0ef259027200f658bd791141fae22d600a462d72e2373a253980208715d008283ea250e37769bf7f29224f41ad4ad9ae9d9a8cf7260b6fb540710ab65fb288d70b2324dc426b13a8e4d132406b45fa8cf11d754f978b0ce672a3728f72f4be149cab5553ec6a204ce515ed6b712442da271c2d203c1835267f57730fb8ba516cabc60e3a362f979a027dfedab68de0738bd5c4d6c28a239b43db7d22c42e01cc7ade5c6676b6c057d768dd21bbf5887decc4fa497f809799a522f47ecbedfc1ff810d6e8df83b57959224d16a52ed2baf31898d75cd14499e1bae5e25fd3708fa5267aaf412feca1ac6333f428efe63c308fca9f2e0e6b95efdc192f0430ccd08af3910eb53fc0caf79964ed3149b0c33fccbc910ae67596cb8a36a72dd9148a0ee0c3faa238c5aaae01499f43955f736b6c540cbdb0cae6bdf697f532b0caa5840bfb7eb208590734ca9cf3f844a4f73167cb3f3c7942f6c2f549462b2d5b0288da9fe3e0e5917582768c96af9d20ff2735540a65c6f2e567317ca42a808b3ce4e44120275f7d0be1d76007b5c10111b33e628c61f20f4b95907bc58da4db980c6d2193959f6f09b193139afe29ae588f065ee2671455c66404ec6697e1478d097097b0b52e9dc0a02f012c158e1dbbb8fa311169747b74ffebe8ff1bff6d1c7c39dce2b8ad1a91230cc5e4f14362d8ba1431fe066c1f7c8b36adfbd785f79013bf5db9ac16fe53b935f6bf9c2971c712afe98ac8c83944c2850521fca9f75187183e5f443b94e91ba23d2a8925f190318ef578f852f4cc516ec74ebf108785b6ab3661e8b0d0d6254c13ff1a9e041edd1b3ec002de17674d808231d454c4b2e98b693e3f32d1006fd4364428598e6548b64c811b1a0bcbf6a3fea267b8c55ea27818cc7424461b08b7732aef042f28d671db682c9715bd7ceb8ec0b93d980c35d81aa5f8749bf41cc7d1e60b8731ccb682bcb81ea285e1ad2422868ebc3e4a03e45a4b4d87613adc51705d8ad9bc6fa93790d3c8ea551c18143fbae766fbc882c7356740000e7df2fdc59e8dfc73f9f240109e6ddb485d6da02e8a12f210dcb7167ba8b5c6c4f6e5685868f15f03e4550e09dd3a44afa376aeb4c1ad98496ad7e997c90e7e4293660f9baa4fcf64eb6a1ff09b3089d576a400849dfdfab496b7ac3d36a8e4f3a0308463f03da64cb715814a64705346bfb23f7c182fe76e8e126f29f4ffc2a90e01b16db47b8418047fa61c7425b4c99d8aa57b641d3ce39d450cb0efbae1c5b9cd3f424138c62b30caf784d67c3e0a0312a0aca5dab9a9b434d1ef8e70859e498818de87045e35ca740117571e3b6a5ee9660efd146689b9a756669d9eb017085839bad223aebc658058efbf11406dc86c58f69ade1616a154eb57b83346f536f4781bf57ce878ae07e453975a504ca30e6dc353436894806613d4a53ddde5faf0803a2cb3c14ba0e315f9e2bd0a8c28fbd1cfef4a39ed0c54ecbebe0bd7044fd378dbc950cb54026408fa003d89f2427e4f0fb7aabdebe0254602a8484a1bf8826ae576e15fd26faae9aa43a3c7617ed7dd803a7635366077723af77a6ea700f5a8fe1841a1ae813dfcfaf2bd39076b9406d36a5d72d69f1cbd0561afba9ee440c8cf058a0ecd152b3b84a941aead1628958e0252bf4ce2dc01596d874c152f4f259fc643dfd887cf7392f16c88edecc90a49b3dbc9101e55dd3f5789f03bd93320aa3756a3cbd26ff3d881b8a97c0dab56dc228ae90d5fde992463e4575c7580df83e59f0e3eec1330538350480472218238d53314f5ad8722894b0bf544686bdf54ceda74344b0223ccf347c3bf931e1307c9e9f20c4e843d6046691e44687a6b2e5ac907a89644e5c087a861f41c631332c2304b94d6c99a703b014c07e54044ee9cb31db6dd2135e5708491a88899b0f4f869f13c898526915f0967be46e72f46719a79198c6e804f743b2a111dafa96aacb18a0b856ad5c50871ffcc6d7b2fb12239c15e41bf0c5835eb843043e5c565cdff3fa485c169722d8e344fde9a8b85cba89e7761632765c9c0ce0cc76fcc3dcfaeb26eebf7f96791b41697ee", 0x1000}], 0x1, &(0x7f0000002e80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x25, 0x0, 0x9, [0xffffffff, 0x401, 0x20, 0x80000001, 0xf8]}, @cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "a674fd7286d6e7"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x1c, 0x1, 0x9, [{@local, 0x9}, {@rand_addr=0x64010101, 0x401}, {@empty, 0x2}, {@private=0xa010101, 0x3}, {@multicast1, 0xffffffff}, {@empty, 0x6}, {@multicast1, 0x40}]}, @lsrr={0x83, 0xb, 0x3d, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x3e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010101, 0xffffffff}, {@broadcast, 0x9}]}, @noop, @ssrr={0x89, 0x23, 0xc1, [@multicast1, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @multicast1, @empty, @empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x739f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x91}}], 0x140}, 0x20000000) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001840)={0xffffffffffffffff, &(0x7f0000000740)="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", &(0x7f0000001740)=""/231}, 0x20) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0xe, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x1, 0xfb2fa7f1450a949, 0xa, 0x50, 0xa}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xfd, &(0x7f0000001880)=""/253, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000019c0)={0x3, 0x2, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r1, r3]}, 0x80) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000001ac0)=r6) 09:17:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x2b0f83b1bcf77c30}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xe8034000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001880)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x2b0f83b1bcf77c30}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xe8034000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001880)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) 09:17:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000001"], 0x128}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000340)={&(0x7f0000000100), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000280)=""/55, 0x37}], 0x4, &(0x7f0000000300)}, 0x40000020) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002140)={0x0}, 0x10) syz_clone(0x9000200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='\t') 09:17:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x2b0f83b1bcf77c30}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xe8034000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001880)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x2b0f83b1bcf77c30}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xe8034000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001880)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) 09:17:43 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_alloc_ptpage\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 09:17:43 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_alloc_ptpage\x00'}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1464.758402][ T1943] FAULT_INJECTION: forcing a failure. [ 1464.758402][ T1943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1464.781056][ T1943] CPU: 0 PID: 1943 Comm: syz-executor.1 Tainted: G B 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1464.792426][ T1943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1464.802410][ T1943] Call Trace: [ 1464.805528][ T1943] [ 1464.808306][ T1943] dump_stack_lvl+0x151/0x1b7 [ 1464.812819][ T1943] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1464.818115][ T1943] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1464.823754][ T1943] dump_stack+0x15/0x17 [ 1464.827747][ T1943] should_fail+0x3c0/0x510 [ 1464.832000][ T1943] should_fail_alloc_page+0x58/0x70 [ 1464.837034][ T1943] __alloc_pages+0x1de/0x7c0 [ 1464.841463][ T1943] ? __count_vm_events+0x30/0x30 [ 1464.846236][ T1943] pte_alloc_one+0x73/0x1b0 [ 1464.850573][ T1943] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1464.855608][ T1943] __pte_alloc+0x86/0x350 [ 1464.859774][ T1943] ? free_pgtables+0x210/0x210 [ 1464.864375][ T1943] ? __kernel_text_address+0x9a/0x110 [ 1464.869583][ T1943] ? unwind_get_return_address+0x4c/0x90 [ 1464.875049][ T1943] copy_pte_range+0x1b1f/0x20b0 [ 1464.879738][ T1943] ? stack_trace_save+0x12d/0x1f0 [ 1464.884598][ T1943] ? anon_vma_clone+0xa1/0x4f0 [ 1464.889200][ T1943] ? __kunmap_atomic+0x80/0x80 [ 1464.893797][ T1943] ? dup_mmap+0x750/0xea0 [ 1464.897964][ T1943] ? dup_mm+0x91/0x330 [ 1464.901867][ T1943] ? copy_mm+0x108/0x1b0 [ 1464.905948][ T1943] ? copy_process+0x1295/0x3250 [ 1464.910635][ T1943] ? kernel_clone+0x22d/0x990 [ 1464.915149][ T1943] ? __x64_sys_clone+0x289/0x310 [ 1464.919923][ T1943] ? do_syscall_64+0x44/0xd0 [ 1464.925137][ T1943] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1464.931033][ T1943] copy_page_range+0xc1e/0x1090 [ 1464.935724][ T1943] ? pfn_valid+0x1e0/0x1e0 [ 1464.939972][ T1943] dup_mmap+0x99f/0xea0 [ 1464.943966][ T1943] ? __delayed_free_task+0x20/0x20 [ 1464.948911][ T1943] ? mm_init+0x807/0x960 [ 1464.952992][ T1943] dup_mm+0x91/0x330 [ 1464.956726][ T1943] copy_mm+0x108/0x1b0 [ 1464.960628][ T1943] copy_process+0x1295/0x3250 [ 1464.965144][ T1943] ? proc_fail_nth_write+0x213/0x290 [ 1464.970262][ T1943] ? proc_fail_nth_read+0x220/0x220 [ 1464.975296][ T1943] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1464.980243][ T1943] ? vfs_write+0x9af/0x1050 [ 1464.984584][ T1943] kernel_clone+0x22d/0x990 [ 1464.988923][ T1943] ? file_end_write+0x1b0/0x1b0 [ 1464.993609][ T1943] ? __kasan_check_write+0x14/0x20 [ 1464.998560][ T1943] ? create_io_thread+0x1e0/0x1e0 [ 1465.003420][ T1943] ? __mutex_lock_slowpath+0x10/0x10 [ 1465.008541][ T1943] __x64_sys_clone+0x289/0x310 [ 1465.013139][ T1943] ? __do_sys_vfork+0x130/0x130 [ 1465.017828][ T1943] ? debug_smp_processor_id+0x17/0x20 [ 1465.023033][ T1943] do_syscall_64+0x44/0xd0 [ 1465.027290][ T1943] ? irqentry_exit+0x12/0x40 [ 1465.031714][ T1943] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1465.037439][ T1943] RIP: 0033:0x7f3bd36fc0a9 [ 1465.041699][ T1943] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1465.061137][ T1943] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1465.069380][ T1943] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1465.077191][ T1943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1465.085005][ T1943] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.092814][ T1943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1465.100628][ T1943] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 09:17:43 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_alloc_ptpage\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_mmu_alloc_ptpage\x00'}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) [ 1465.108441][ T1943] 09:17:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0xfffffeff, 0x1, 0xccce, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x1, 0x0, 0x2}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x4102}) 09:17:47 executing program 5: syz_clone(0x8208200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='xprt_reserve\x00'}, 0x10) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x56, 0x0, 0x1f, 0x200, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000180), 0x1f}, 0x8000, 0x5, 0x4, 0x3, 0x8, 0x6, 0xcd1, 0x0, 0xb8, 0x0, 0x1}, r0, 0x0, r2, 0x1) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7f, 0x2, 0x6, 0x45, 0x0, 0x8, 0x400, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4, 0x8, 0x2, 0x1, 0x9, 0x1, 0x7fff, 0x0, 0x4, 0x0, 0xe571}, r0, 0x2, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x4, 0xc8, 0xf4, 0x0, 0xcd, 0x381c2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x10000000000, 0x10001, 0x9, 0x101, 0x5, 0xfff, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 09:17:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) [ 1469.466091][ T1979] FAULT_INJECTION: forcing a failure. [ 1469.466091][ T1979] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.479169][ T1979] CPU: 1 PID: 1979 Comm: syz-executor.1 Tainted: G B 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1469.490526][ T1979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1469.500420][ T1979] Call Trace: [ 1469.503543][ T1979] [ 1469.506323][ T1979] dump_stack_lvl+0x151/0x1b7 [ 1469.510841][ T1979] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1469.516129][ T1979] dump_stack+0x15/0x17 [ 1469.520121][ T1979] should_fail+0x3c0/0x510 [ 1469.524377][ T1979] __should_failslab+0x9f/0xe0 [ 1469.528972][ T1979] should_failslab+0x9/0x20 [ 1469.533314][ T1979] kmem_cache_alloc+0x4f/0x2f0 [ 1469.537913][ T1979] ? anon_vma_fork+0x1b9/0x4f0 [ 1469.542512][ T1979] anon_vma_fork+0x1b9/0x4f0 [ 1469.546941][ T1979] dup_mmap+0x750/0xea0 [ 1469.550933][ T1979] ? __delayed_free_task+0x20/0x20 [ 1469.555882][ T1979] ? mm_init+0x807/0x960 [ 1469.561445][ T1979] dup_mm+0x91/0x330 [ 1469.565175][ T1979] copy_mm+0x108/0x1b0 [ 1469.569082][ T1979] copy_process+0x1295/0x3250 [ 1469.573596][ T1979] ? timerqueue_add+0x25c/0x280 [ 1469.578282][ T1979] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 1469.583239][ T1979] kernel_clone+0x22d/0x990 [ 1469.587572][ T1979] ? __kasan_check_write+0x14/0x20 [ 1469.592518][ T1979] ? create_io_thread+0x1e0/0x1e0 [ 1469.597468][ T1979] ? lapic_next_event+0x5f/0x70 [ 1469.602150][ T1979] ? clockevents_program_event+0x240/0x310 [ 1469.607792][ T1979] __x64_sys_clone+0x289/0x310 [ 1469.612396][ T1979] ? __do_sys_vfork+0x130/0x130 [ 1469.617093][ T1979] ? syscall_enter_from_user_mode+0x1a/0x1b0 [ 1469.622895][ T1979] do_syscall_64+0x44/0xd0 [ 1469.627148][ T1979] ? irqentry_exit+0x12/0x40 [ 1469.631574][ T1979] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1469.637304][ T1979] RIP: 0033:0x7f3bd36fc0a9 [ 1469.641555][ T1979] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 09:17:48 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x700, 0xfffffffffffffffc}, 0x10) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2cffdf28, 0x8dc8, 0x3, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0xfff, 0x3c94, 0x4ce, r2, 0x5, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad45be550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000081ffff080000000000"], 0x0, 0x0, 0x26, &(0x7f0000000500)=""/38, 0x0, 0x6, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x2, 0x6, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}, 0x80) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0800400, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0) [ 1469.661002][ T1979] RSP: 002b:00007f3bd246f118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1469.669247][ T1979] RAX: ffffffffffffffda RBX: 00007f3bd381bf80 RCX: 00007f3bd36fc0a9 [ 1469.677057][ T1979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0800400 [ 1469.684878][ T1979] RBP: 00007f3bd246f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1469.693208][ T1979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1469.701013][ T1979] R13: 00007fffe281172f R14: 00007f3bd246f300 R15: 0000000000022000 [ 1469.708826][ T1979] 09:17:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000480)=r3) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_ro(r6, &(0x7f0000000280)='pids.events\x00', 0x0, 0x0) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x5, 0x3, 0x6}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x660c, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x1f, 0x2b, 0x5, 0x0, 0x1, 0x11350, 0x19, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100, 0x1}, 0xaa05, 0x7fff, 0x0, 0x9, 0x2, 0x3, 0x1ff, 0x0, 0x6, 0x0, 0x22}, 0x0, 0xc, r7, 0x9) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000340)={'bridge_slave_0\x00', 0x400}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) 09:17:48 executing program 5: syz_clone(0x8208200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='xprt_reserve\x00'}, 0x10) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x56, 0x0, 0x1f, 0x200, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000180), 0x1f}, 0x8000, 0x5, 0x4, 0x3, 0x8, 0x6, 0xcd1, 0x0, 0xb8, 0x0, 0x1}, r0, 0x0, r2, 0x1) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7f, 0x2, 0x6, 0x45, 0x0, 0x8, 0x400, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4, 0x8, 0x2, 0x1, 0x9, 0x1, 0x7fff, 0x0, 0x4, 0x0, 0xe571}, r0, 0x2, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x4, 0xc8, 0xf4, 0x0, 0xcd, 0x381c2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x10000000000, 0x10001, 0x9, 0x101, 0x5, 0xfff, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x8208200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(r1) (async) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='xprt_reserve\x00'}, 0x10) (async) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x56, 0x0, 0x1f, 0x200, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000180), 0x1f}, 0x8000, 0x5, 0x4, 0x3, 0x8, 0x6, 0xcd1, 0x0, 0xb8, 0x0, 0x1}, r0, 0x0, r2, 0x1) (async) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7f, 0x2, 0x6, 0x45, 0x0, 0x8, 0x400, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4, 0x8, 0x2, 0x1, 0x9, 0x1, 0x7fff, 0x0, 0x4, 0x0, 0xe571}, r0, 0x2, r1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x4, 0xc8, 0xf4, 0x0, 0xcd, 0x381c2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x10000000000, 0x10001, 0x9, 0x101, 0x5, 0xfff, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) 09:17:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000001"], 0x128}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000340)={&(0x7f0000000100), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000280)=""/55, 0x37}], 0x4, &(0x7f0000000300)}, 0x40000020) (async) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002140)={0x0}, 0x10) (async, rerun: 64) syz_clone(0x9000200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='\t') 09:17:48 executing program 5: syz_clone(0x8208200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() (async) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x7ffff09a}], 0x1, 0x0, 0xf2, 0xa0}, 0x0) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='xprt_reserve\x00'}, 0x10) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x56, 0x0, 0x1f, 0x200, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000180), 0x1f}, 0x8000, 0x5, 0x4, 0x3, 0x8, 0x6, 0xcd1, 0x0, 0xb8, 0x0, 0x1}, r0, 0x0, r2, 0x1) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7f, 0x2, 0x6, 0x45, 0x0, 0x8, 0x400, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4, 0x8, 0x2, 0x1, 0x9, 0x1, 0x7fff, 0x0, 0x4, 0x0, 0xe571}, r0, 0x2, r1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x4, 0xc8, 0xf4, 0x0, 0xcd, 0x381c2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x2, 0x10000000000, 0x10001, 0x9, 0x101, 0x5, 0xfff, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 09:17:48 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='xprtrdma_frwr_dereg\x00', r1}, 0x10) openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 09:17:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}, 0x80) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x700, 0xfffffffffffffffc}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x700, 0xfffffffffffffffc}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r9, 0x700, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x0, 0x6, 0xb, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0x2, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r1, r8, r1, r1, r9, r1]}, 0x80) r10 = syz_clone(0xc0800400, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8008, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_bp, 0x50dfd91716dbf89f, 0x200, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x0, 0x4b8, 0x0, 0x8b}, r10, 0x6, r3, 0x2) 09:17:48 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='xprtrdma_frwr_dereg\x00', r1}, 0x10) (async) openat$cgroup_int(r0, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) [ 1469.871246][ T2012] FAULT_INJECTION: forcing a failure. [ 1469.871246][ T2012] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1469.888052][ T2012] CPU: 1 PID: 2012 Comm: syz-executor.1 Tainted: G B 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1469.899518][ T2012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1469.909418][ T2012] Call Trace: [ 1469.912535][ T2012] [ 1469.915313][ T2012] dump_stack_lvl+0x151/0x1b7 [ 1469.919828][ T2012] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1469.925123][ T2012] dump_stack+0x15/0x17 [ 1469.929111][ T2012] should_fail+0x3c0/0x510 [ 1469.933369][ T2012] should_fail_alloc_page+0x58/0x70 [ 1469.938399][ T2012] __alloc_pages+0x1de/0x7c0 [ 1469.942826][ T2012] ? update_stack_state+0xb4/0x580 [ 1469.947775][ T2012] ? __count_vm_events+0x30/0x30 [ 1469.952553][ T2012] pte_alloc_one+0x73/0x1b0 [ 1469.956888][ T2012] ? pfn_modify_allowed+0x2e0/0x2e0 [ 1469.961921][ T2012] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 1469.967567][ T2012] ? stack_trace_save+0x1f0/0x1f0 [ 1469.972427][ T2012] __pte_alloc+0x86/0x350 [ 1469.976593][ T2012] ? free_pgtables+0x210/0x210 [ 1469.981276][ T2012] ? __kernel_text_address+0x9a/0x110 [ 1469.986482][ T2012] ? unwind_get_return_address+0x4c/0x90 [ 1469.991959][ T2012] copy_pte_range+0x1b1f/0x20b0 [ 1469.996638][ T2012] ? stack_trace_save+0x12d/0x1f0 [ 1470.001502][ T2012] ? anon_vma_clone+0xa1/0x4f0 [ 1470.006104][ T2012] ? __kunmap_atomic+0x80/0x80 [ 1470.010701][ T2012] ? dup_mmap+0x750/0xea0 [ 1470.014878][ T2012] ? dup_mm+0x91/0x330