f$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="950800ffd209bd387fff0ecb60000000810000002b400000506e6d821d00000000704226a1385b5aaff45dfb"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x8, 0x80, 0x9, 0x1, 0x0, 0x8, 0x4001, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x3f, 0xbd6}, 0x4108, 0x7, 0xffffffff, 0x9, 0x297, 0x100, 0x100, 0x0, 0x7, 0x0, 0x6}, r0, 0xe, r11, 0x2) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff, 0xffffffffffffffff, r13, 0x1]}, 0x80) (async) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @ldst={0x3, 0x3, 0x3, 0x9, 0x8, 0x20, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x2, 0x4, 0x8, 0x4, 0x4}, @ldst={0x1, 0x1, 0x2, 0x9, 0x9, 0xfffffffffffffff4, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, r13, r14]}, 0x90) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2362.717696][ T2928] FAULT_INJECTION: forcing a failure. [ 2362.717696][ T2928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2362.778583][ T2928] CPU: 0 PID: 2928 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2362.788679][ T2928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2362.798571][ T2928] Call Trace: [ 2362.801785][ T2928] [ 2362.804555][ T2928] dump_stack_lvl+0x151/0x1b7 [ 2362.809068][ T2928] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2362.814539][ T2928] dump_stack+0x15/0x17 [ 2362.818532][ T2928] should_fail+0x3c6/0x510 [ 2362.822785][ T2928] should_fail_alloc_page+0x5a/0x80 [ 2362.827814][ T2928] prepare_alloc_pages+0x15c/0x700 [ 2362.832763][ T2928] ? __alloc_pages_bulk+0xe60/0xe60 [ 2362.837797][ T2928] ? kasan_check_range+0x90/0x2a0 [ 2362.842658][ T2928] __alloc_pages+0x138/0x5e0 [ 2362.847084][ T2928] ? stack_trace_save+0x1c0/0x1c0 [ 2362.851939][ T2928] ? prep_new_page+0x110/0x110 [ 2362.856631][ T2928] ? irqentry_exit+0x30/0x40 [ 2362.861056][ T2928] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2362.867045][ T2928] get_zeroed_page+0x19/0x40 [ 2362.871468][ T2928] __pud_alloc+0x8b/0x260 [ 2362.875638][ T2928] ? do_handle_mm_fault+0x2330/0x2330 [ 2362.880841][ T2928] ? __stack_depot_save+0x34/0x470 [ 2362.885789][ T2928] ? anon_vma_clone+0x9a/0x500 [ 2362.890391][ T2928] copy_page_range+0x2bcf/0x2f90 [ 2362.895161][ T2928] ? __kasan_slab_alloc+0xb1/0xe0 [ 2362.900035][ T2928] ? slab_post_alloc_hook+0x53/0x2c0 [ 2362.905148][ T2928] ? copy_mm+0xa3a/0x13e0 [ 2362.909397][ T2928] ? copy_process+0x12bc/0x3260 [ 2362.914090][ T2928] ? kernel_clone+0x21e/0x9e0 [ 2362.918776][ T2928] ? __x64_sys_clone+0x23f/0x290 [ 2362.923555][ T2928] ? do_syscall_64+0x3d/0xb0 [ 2362.927979][ T2928] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2362.933974][ T2928] ? pfn_valid+0x1e0/0x1e0 [ 2362.938222][ T2928] ? irqentry_exit+0x30/0x40 [ 2362.942676][ T2928] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2362.948287][ T2928] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2362.953842][ T2928] ? __rb_insert_augmented+0x5de/0x610 [ 2362.959142][ T2928] copy_mm+0xc7e/0x13e0 [ 2362.963129][ T2928] ? irqentry_exit+0x30/0x40 [ 2362.967561][ T2928] ? copy_signal+0x610/0x610 [ 2362.971983][ T2928] ? __init_rwsem+0xd6/0x1c0 [ 2362.976413][ T2928] ? copy_signal+0x4e3/0x610 [ 2362.980836][ T2928] copy_process+0x12bc/0x3260 [ 2362.985354][ T2928] ? timerqueue_add+0x250/0x270 [ 2362.990034][ T2928] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2362.994983][ T2928] ? enqueue_hrtimer+0xca/0x240 [ 2362.999672][ T2928] ? __hrtimer_run_queues+0x46b/0xad0 [ 2363.004877][ T2928] kernel_clone+0x21e/0x9e0 [ 2363.009232][ T2928] ? create_io_thread+0x1e0/0x1e0 [ 2363.014079][ T2928] ? clockevents_program_event+0x22f/0x300 [ 2363.019719][ T2928] __x64_sys_clone+0x23f/0x290 [ 2363.024320][ T2928] ? __do_sys_vfork+0x130/0x130 [ 2363.029163][ T2928] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2363.034966][ T2928] do_syscall_64+0x3d/0xb0 [ 2363.039225][ T2928] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2363.044860][ T2928] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2363.050588][ T2928] RIP: 0033:0x7f977f216ae9 [ 2363.054844][ T2928] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 10:41:02 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000ef0285b72eaec5df696334e2d836395560230500ef286f21c974d520c247fd200861e50b2dd5e5f6b23909a23ee27007dae2a0fd08dbf92809a931196df3be84781f7eca5edf3850576acb265f56d62e6288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164cc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd0500c41f636ec4e299e370f5630dcfab526519a36f963679457241bc05a307f8be0c828a77b84553f3efa55679c30b656f6e43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975e8617ffc7e8cc497f437853d9c04b195fa52848dd1555796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3fcf766c3cb8cd6a4a46895dc5b44d224a0b3c2ca8087486aead10034d94d32ad677b28b10ed58f8de24920d5a8d25c7cae49ba35be28888ea8da622daf5f0f02d9c08752113ab1ec6bde50940e9bf33f91a6c5056aabc04eedfeb6535540e5c027ffac3d4df6589cb47171bfbb564a2350564f4bdbcf4e048f2b34570d5ef2bb8e9274d5d40af19b0afe0c774b562378fc3dbf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e1308000000ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff00151bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc491b3df83509d2fa1023eb77b8a13de09e22a77e90f0b9bd8f47ad5a964ab6bbb94784d31b397229aeb326313fb66ffe0e9913d32301c844e58fd43db6b3693b404e000000000000000035cee0e44d723a1561dbb38e1d1ca9c52da483fd9003f43ba42a3b68faa431a930f28f5505400c94b18390a327789db7e625c56e2741c730d2ac76fb6ca67bf573a5614ef1e87a670a9762c18c026a997e27acb0b20fce93ed96c5508da9951e4f33d07d83d79843cd0b5ff2412a7884197e4c7494e9c0a1a9d5c9da91e7a999c11b9f4c3c37e1da20287818bb827ea0b2c4718d4af9d372938b0a43cc2c000000000000000000000000000000003844c98a5c738d111dc5238e8090a64909612c2027c8c97a21568150fc1797f72002b55f2118a7c2202e09b90a69c864562e842d0466a50a0f8dcbb003a22e42487a463ef3c9afbc2284eb130390000000000000000000000089296756f2458db7d840df00a49fd4bac00331bdad6b67c9cca3cd05076b670486ef3467606cb180602e8a643083b655c2a3b942c2ec1da1b7e72106ff2d46d2cc7a1478c60ef55ce084952e40b33a041c17ea8f59c7a7a98ea770a674d450f9e6a074c2dc17832d95937bd722fb871c96bb653dcdfc8a9dd5a1052b93afdab1c20f408ab3c64e1065308e9ae890d9e46845099a09bb26d08b6c1ceeb682562662843f9f08f694a93b00"/1082], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1082], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) close(r5) (async) close(r5) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x4, 0x81, 0x41, 0x0, 0x2, 0x2005, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xb3d}, 0x4540, 0x10001, 0x81, 0x9, 0x1000, 0x3, 0x6, 0x0, 0x4, 0x0, 0x80000001}, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0x2) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x4, 0x81, 0x41, 0x0, 0x2, 0x2005, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xb3d}, 0x4540, 0x10001, 0x81, 0x9, 0x1000, 0x3, 0x6, 0x0, 0x4, 0x0, 0x80000001}, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000024c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 10:41:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf5ffffc6}, 0x80) [ 2363.074298][ T2928] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2363.082528][ T2928] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2363.090335][ T2928] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2363.098145][ T2928] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2363.106075][ T2928] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2363.113885][ T2928] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2363.121700][ T2928] 10:41:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2bffffff}, 0x80) 10:41:02 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1082], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) (async) close(r5) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x9, 0x4, 0x81, 0x41, 0x0, 0x2, 0x2005, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xb3d}, 0x4540, 0x10001, 0x81, 0x9, 0x1000, 0x3, 0x6, 0x0, 0x4, 0x0, 0x80000001}, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000024c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 10:41:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"/3776], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x8006, 0x0, 0x0, 0x1, 0x4, 0x800000, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='memory.numa_st\x13\xd2D\xff\xcaTW\x8f\xee@A\xcb.\xf3o\'\xfd\x85/1G\x93L\xf7\xf7\t7\xa9F\x04\xee(C8\x1f\x05\x9a\x95$<\x0f\xea\xb3m\xd8\xfa\x86]&6\xac~Qv\x93\xcd\"\x00\x00\x00\x00\x00\x00\x00\x00\x1a)\xc0\xeb\t\x96\xf3\xa7\t\xcc\x9d\xc2Y\x06\x1do$\xff\x9eGe\x1f\xf8\x8bEa\xfdK\xca\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H&\xe20\xc3\xcd^\xfdFq\xb2\x9f\xd5m\x9e\xcf=\x83+\x05\xe58\x7f0x0}, 0x52) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x0, &(0x7f0000000540), &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000d40)=""/4096, 0x40f00, 0x32, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x3}, 0xfffffffffffffec1, 0x10, &(0x7f0000000700)={0x5, 0x2, 0x8, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r3, 0xffffffffffffffff, r3]}, 0x90) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="032000000100000018000000db00000000000000ffffffff85200000050000005180fffff0ffffff85200000010000001800000008000000000000000300000095b068db1297e621ae694842ca9e163c3c79e18cff0bb8f084d873d5d122f3b4d9a5838122526517d8d9c9af5b9edfe941376fce4c7a184f14951fdb2e996cbf952b52cf4a482fad2ac0e8195a2454ce2cdb6fac48e524f61bf5c040a96d1c3d1c66ef6e5c5858551fb2c09a98d064e6568dbc05b47354d3e9da6f72c3f9171f782e14ad688ef4bc56e24303d7bee5bd09081f5e128856cabd18aee3083e062c444b86976af84f0e710e48b435d48227f7ff387c086d7200a61bbc72bb85c5456699f246ee088c84cdd0911383f21db5266a42aa986eb455b305096d7afecadac0222b7d6b9800278169c0f2915f041e96488af187176fafe5c502ae1905c31fd4d08de90de4c46e79361214ccc0ecbb297e8071515cbc15621c950e7783bbc59ca453b1f739bdbb3dc9052fe777b8b70a6d3eb16626f1470a8db7ab6b8d58166eb59ea5aa65c4efacde59b30cfdf266d23b6f280087176f9d0ec46e182572351ca7b58df7bf3d815085e8"], &(0x7f0000000300)='GPL\x00', 0x3, 0x44, &(0x7f0000000480)=""/68, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x9, 0xffffff01}, 0x10, r2, 0x0, 0x0, &(0x7f0000000680)=[0x1, r4, r5]}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000002db50e00000000000000b764a01cef1cf35df7ee692f2c574158ad2e1ad58f5298c2890126fac65580a3744cfd8ac980eba5d03e138a2c2356796c17c91c5e246ee78b51f5150800040000000000c89c877b6c7919f96d7c620d94acb5ffc0eaf77c92a4f2ecd5c2043e649c3ccbd2909c282e08d0485c683464ec2e13f9f969b5f926b8a1360e63ea969191819e9ac7becefac22a8d22bc2fc129b0c2cb23ea84a250688c5a1b42c3dd68d1b6077b211e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socketpair(0x4, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x21, 0x80000, 0x2, 0x0) syz_clone(0x528c0400, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xa5, &(0x7f0000000480)=""/165, 0x40f00, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x6, 0x80, 0x6, 0x20, 0xf9, 0x5a, 0x0, 0x3, 0x40000, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x9, 0x10000}, 0x8000, 0x1, 0x6, 0x3, 0x3, 0x2, 0x2, 0x0, 0x7ff, 0x0, 0x6}, r0, 0xf, r4, 0x29e050172f4952b4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f0000000040)) 10:41:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2cffffff}, 0x80) 10:41:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf6ffff7f}, 0x80) 10:41:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 10:41:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2dffffff}, 0x80) [ 2363.471737][ T2992] FAULT_INJECTION: forcing a failure. [ 2363.471737][ T2992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:41:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf6ffffa5}, 0x80) 10:41:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0x17, 0x3, 0x9, 0xa5, 0x0, 0x5, 0x4080, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x92c}, 0x0, 0x0, 0x16543df5, 0x9, 0x1, 0x401, 0x3, 0x0, 0x6b, 0x0, 0x3}, r2, 0xe, r0, 0xa) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7f, 0xfa, 0x0, 0x7, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0xd6f9be1ef1cb639a, @perf_bp={&(0x7f0000000000), 0x8}, 0x2, 0x10000000000000, 0xffffffff, 0x3, 0x7, 0xfff, 0x2, 0x0, 0x1, 0x0, 0xd31}, 0xffffffffffffffff, 0xd, r4, 0x1) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="186900001000000000000000020000000565f8ffffffffff18470000000000000000000000000000000000000000000000009500"/64], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0x1]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x106, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x11) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r1, 0x24, 0x0, 0xfffffffd, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r10, r1, 0x1d, 0x4, 0x0, @prog_id=r11, r12}, 0x20) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) [ 2363.543307][ T2992] CPU: 1 PID: 2992 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2363.553407][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2363.563298][ T2992] Call Trace: [ 2363.566424][ T2992] [ 2363.569200][ T2992] dump_stack_lvl+0x151/0x1b7 [ 2363.573714][ T2992] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2363.579179][ T2992] ? _raw_spin_unlock+0x4d/0x70 [ 2363.583871][ T2992] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 2363.589687][ T2992] dump_stack+0x15/0x17 [ 2363.593679][ T2992] should_fail+0x3c6/0x510 [ 2363.597939][ T2992] should_fail_alloc_page+0x5a/0x80 [ 2363.602970][ T2992] prepare_alloc_pages+0x15c/0x700 [ 2363.607912][ T2992] ? __alloc_pages_bulk+0xe60/0xe60 [ 2363.612944][ T2992] __alloc_pages+0x138/0x5e0 [ 2363.617371][ T2992] ? prep_new_page+0x110/0x110 [ 2363.621969][ T2992] ? __alloc_pages+0x206/0x5e0 [ 2363.626571][ T2992] ? __kasan_check_read+0x11/0x20 [ 2363.631430][ T2992] ? preempt_schedule_irq+0xe7/0x140 [ 2363.636551][ T2992] ? __cond_resched+0x20/0x20 [ 2363.641067][ T2992] ? _raw_spin_lock+0xa4/0x1b0 [ 2363.645662][ T2992] __pmd_alloc+0xb1/0x550 [ 2363.649831][ T2992] ? __pud_alloc+0x260/0x260 [ 2363.654254][ T2992] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2363.660241][ T2992] copy_page_range+0x2b3d/0x2f90 [ 2363.665012][ T2992] ? __kasan_slab_alloc+0xb1/0xe0 [ 2363.669871][ T2992] ? slab_post_alloc_hook+0x53/0x2c0 [ 2363.674995][ T2992] ? copy_mm+0xa3a/0x13e0 [ 2363.679158][ T2992] ? copy_process+0x12bc/0x3260 [ 2363.683855][ T2992] ? kernel_clone+0x21e/0x9e0 [ 2363.688450][ T2992] ? do_syscall_64+0x3d/0xb0 [ 2363.692873][ T2992] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2363.698784][ T2992] ? pfn_valid+0x1e0/0x1e0 [ 2363.703029][ T2992] ? irqentry_exit+0x30/0x40 [ 2363.707452][ T2992] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2363.713181][ T2992] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2363.718738][ T2992] ? __rb_insert_augmented+0x5de/0x610 [ 2363.724036][ T2992] copy_mm+0xc7e/0x13e0 [ 2363.728026][ T2992] ? copy_signal+0x610/0x610 [ 2363.732462][ T2992] ? __init_rwsem+0xd6/0x1c0 [ 2363.736875][ T2992] ? copy_signal+0x4e3/0x610 [ 2363.741306][ T2992] copy_process+0x12bc/0x3260 [ 2363.745821][ T2992] ? timerqueue_add+0x250/0x270 [ 2363.750504][ T2992] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2363.755448][ T2992] ? enqueue_hrtimer+0xca/0x240 [ 2363.760133][ T2992] ? __hrtimer_run_queues+0x46b/0xad0 [ 2363.765346][ T2992] kernel_clone+0x21e/0x9e0 [ 2363.769683][ T2992] ? create_io_thread+0x1e0/0x1e0 [ 2363.774542][ T2992] ? clockevents_program_event+0x22f/0x300 [ 2363.780187][ T2992] __x64_sys_clone+0x23f/0x290 [ 2363.784787][ T2992] ? __do_sys_vfork+0x130/0x130 [ 2363.789475][ T2992] ? debug_smp_processor_id+0x17/0x20 [ 2363.794679][ T2992] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2363.800579][ T2992] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2363.806050][ T2992] do_syscall_64+0x3d/0xb0 [ 2363.810299][ T2992] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2363.815944][ T2992] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2363.821670][ T2992] RIP: 0033:0x7f977f216ae9 [ 2363.825925][ T2992] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2363.845365][ T2992] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2363.853695][ T2992] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2363.861511][ T2992] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2363.869322][ T2992] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2363.877128][ T2992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2363.884941][ T2992] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 10:41:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf7ffff2e}, 0x80) [ 2363.892772][ T2992] 10:41:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"/3776], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x90) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x8006, 0x0, 0x0, 0x1, 0x4, 0x800000, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='memory.numa_st\x13\xd2D\xff\xcaTW\x8f\xee@A\xcb.\xf3o\'\xfd\x85/1G\x93L\xf7\xf7\t7\xa9F\x04\xee(C8\x1f\x05\x9a\x95$<\x0f\xea\xb3m\xd8\xfa\x86]&6\xac~Qv\x93\xcd\"\x00\x00\x00\x00\x00\x00\x00\x00\x1a)\xc0\xeb\t\x96\xf3\xa7\t\xcc\x9d\xc2Y\x06\x1do$\xff\x9eGe\x1f\xf8\x8bEa\xfdK\xca\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H&\xe20\xc3\xcd^\xfdFq\xb2\x9f\xd5m\x9e\xcf=\x83+\x05\xe58\x7f0x0}, 0x52) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x0, &(0x7f0000000540), &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000d40)=""/4096, 0x40f00, 0x32, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x3}, 0xfffffffffffffec1, 0x10, &(0x7f0000000700)={0x5, 0x2, 0x8, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r3, 0xffffffffffffffff, r3]}, 0x90) (async, rerun: 64) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (rerun: 64) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x3, 0x44, &(0x7f0000000480)=""/68, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x9, 0xffffff01}, 0x10, r2, 0x0, 0x0, &(0x7f0000000680)=[0x1, r4, r5]}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000002db50e00000000000000b764a01cef1cf35df7ee692f2c574158ad2e1ad58f5298c2890126fac65580a3744cfd8ac980eba5d03e138a2c2356796c17c91c5e246ee78b51f5150800040000000000c89c877b6c7919f96d7c620d94acb5ffc0eaf77c92a4f2ecd5c2043e649c3ccbd2909c282e08d0485c683464ec2e13f9f969b5f926b8a1360e63ea969191819e9ac7becefac22a8d22bc2fc129b0c2cb23ea84a250688c5a1b42c3dd68d1b6077b211e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) (async) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socketpair(0x4, 0x2, 0x0, &(0x7f0000000100)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socketpair(0x21, 0x80000, 0x2, 0x0) (async) syz_clone(0x528c0400, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2effffff}, 0x80) 10:41:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf7ffff38}, 0x80) 10:41:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2fffffff}, 0x80) 10:41:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 51) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf8010000}, 0x80) 10:41:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x30000000}, 0x80) [ 2364.408698][ T3061] FAULT_INJECTION: forcing a failure. [ 2364.408698][ T3061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:41:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0x17, 0x3, 0x9, 0xa5, 0x0, 0x5, 0x4080, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x92c}, 0x0, 0x0, 0x16543df5, 0x9, 0x1, 0x401, 0x3, 0x0, 0x6b, 0x0, 0x3}, r2, 0xe, r0, 0xa) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7f, 0xfa, 0x0, 0x7, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0xd6f9be1ef1cb639a, @perf_bp={&(0x7f0000000000), 0x8}, 0x2, 0x10000000000000, 0xffffffff, 0x3, 0x7, 0xfff, 0x2, 0x0, 0x1, 0x0, 0xd31}, 0xffffffffffffffff, 0xd, r4, 0x1) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7f, 0xfa, 0x0, 0x7, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0xd6f9be1ef1cb639a, @perf_bp={&(0x7f0000000000), 0x8}, 0x2, 0x10000000000000, 0xffffffff, 0x3, 0x7, 0xfff, 0x2, 0x0, 0x1, 0x0, 0xd31}, 0xffffffffffffffff, 0xd, r4, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="186900001000000000000000020000000565f8ffffffffff18470000000000000000000000000000000000000000000000009500"/64], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0x1]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x106, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x11) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x11) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r1, 0x24, 0x0, 0xfffffffd, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r1, 0x24, 0x0, 0xfffffffd, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r10, r1, 0x1d, 0x4, 0x0, @prog_id=r11, r12}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r10, r1, 0x1d, 0x4, 0x0, @prog_id=r11, r12}, 0x20) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) 10:41:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf8ffffb7}, 0x80) 10:41:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"/3776], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x8006, 0x0, 0x0, 0x1, 0x4, 0x800000, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='memory.numa_st\x13\xd2D\xff\xcaTW\x8f\xee@A\xcb.\xf3o\'\xfd\x85/1G\x93L\xf7\xf7\t7\xa9F\x04\xee(C8\x1f\x05\x9a\x95$<\x0f\xea\xb3m\xd8\xfa\x86]&6\xac~Qv\x93\xcd\"\x00\x00\x00\x00\x00\x00\x00\x00\x1a)\xc0\xeb\t\x96\xf3\xa7\t\xcc\x9d\xc2Y\x06\x1do$\xff\x9eGe\x1f\xf8\x8bEa\xfdK\xca\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H&\xe20\xc3\xcd^\xfdFq\xb2\x9f\xd5m\x9e\xcf=\x83+\x05\xe58\x7f0x0}, 0x52) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x0, &(0x7f0000000540), &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000d40)=""/4096, 0x40f00, 0x32, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x3}, 0xfffffffffffffec1, 0x10, &(0x7f0000000700)={0x5, 0x2, 0x8, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r3, 0xffffffffffffffff, r3]}, 0x90) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x3, 0x44, &(0x7f0000000480)=""/68, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x9, 0xffffff01}, 0x10, r2, 0x0, 0x0, &(0x7f0000000680)=[0x1, r4, r5]}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000002db50e00000000000000b764a01cef1cf35df7ee692f2c574158ad2e1ad58f5298c2890126fac65580a3744cfd8ac980eba5d03e138a2c2356796c17c91c5e246ee78b51f5150800040000000000c89c877b6c7919f96d7c620d94acb5ffc0eaf77c92a4f2ecd5c2043e649c3ccbd2909c282e08d0485c683464ec2e13f9f969b5f926b8a1360e63ea969191819e9ac7becefac22a8d22bc2fc129b0c2cb23ea84a250688c5a1b42c3dd68d1b6077b211e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) (async) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) socketpair(0x4, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socketpair(0x21, 0x80000, 0x2, 0x0) (async) syz_clone(0x528c0400, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0x17, 0x3, 0x9, 0xa5, 0x0, 0x5, 0x4080, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x92c}, 0x0, 0x0, 0x16543df5, 0x9, 0x1, 0x401, 0x3, 0x0, 0x6b, 0x0, 0x3}, r2, 0xe, r0, 0xa) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7f, 0xfa, 0x0, 0x7, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0xd6f9be1ef1cb639a, @perf_bp={&(0x7f0000000000), 0x8}, 0x2, 0x10000000000000, 0xffffffff, 0x3, 0x7, 0xfff, 0x2, 0x0, 0x1, 0x0, 0xd31}, 0xffffffffffffffff, 0xd, r4, 0x1) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="186900001000000000000000020000000565f8ffffffffff18470000000000000000000000000000000000000000000000009500"/64], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0x1]}, 0x80) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4}, 0x80) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x106, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x11) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r1, 0x24, 0x0, 0xfffffffd, &(0x7f00000003c0)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r10, r1, 0x1d, 0x4, 0x0, @prog_id=r11, r12}, 0x20) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) 10:41:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf8fffff1}, 0x80) 10:41:03 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0xcf, 0x1f, 0x0, 0x0, 0x1, 0x48020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0xae, 0x9}, 0x400, 0x7, 0x9, 0x8, 0x0, 0x800, 0x8, 0x0, 0x7, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2364.623711][ T3061] CPU: 0 PID: 3061 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2364.633800][ T3061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2364.643697][ T3061] Call Trace: [ 2364.646845][ T3061] [ 2364.649595][ T3061] dump_stack_lvl+0x151/0x1b7 [ 2364.654113][ T3061] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2364.659574][ T3061] ? kvm_sched_clock_read+0x18/0x40 [ 2364.664606][ T3061] ? sched_clock+0x9/0x10 [ 2364.668770][ T3061] ? sched_clock_cpu+0x18/0x3b0 [ 2364.673459][ T3061] ? _raw_spin_lock+0xa4/0x1b0 [ 2364.678062][ T3061] dump_stack+0x15/0x17 [ 2364.682050][ T3061] should_fail+0x3c6/0x510 [ 2364.686307][ T3061] should_fail_alloc_page+0x5a/0x80 [ 2364.691352][ T3061] prepare_alloc_pages+0x15c/0x700 [ 2364.696289][ T3061] ? __alloc_pages_bulk+0xe60/0xe60 [ 2364.701320][ T3061] ? sched_clock+0x9/0x10 [ 2364.705483][ T3061] ? native_set_ldt+0x360/0x360 [ 2364.710172][ T3061] __alloc_pages+0x138/0x5e0 [ 2364.714597][ T3061] ? _raw_spin_unlock+0x4d/0x70 [ 2364.719285][ T3061] ? prep_new_page+0x110/0x110 [ 2364.723889][ T3061] pte_alloc_one+0x73/0x1b0 [ 2364.728224][ T3061] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2364.733258][ T3061] ? preempt_schedule+0xd9/0xe0 [ 2364.737947][ T3061] __pte_alloc+0x86/0x350 [ 2364.742111][ T3061] ? irqentry_exit+0x30/0x40 [ 2364.746537][ T3061] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2364.752180][ T3061] ? free_pgtables+0x280/0x280 [ 2364.756788][ T3061] ? copy_page_range+0x27d0/0x2f90 [ 2364.761725][ T3061] copy_page_range+0x28a8/0x2f90 [ 2364.766504][ T3061] ? __kasan_slab_alloc+0xb1/0xe0 [ 2364.771374][ T3061] ? pfn_valid+0x1e0/0x1e0 [ 2364.775613][ T3061] ? __vma_link_rb+0x4c5/0x550 [ 2364.780214][ T3061] ? trace_raw_output_vm_unmapped_area+0x220/0x220 [ 2364.786546][ T3061] ? __rb_insert_augmented+0x14d/0x610 [ 2364.791845][ T3061] copy_mm+0xc7e/0x13e0 [ 2364.795842][ T3061] ? copy_signal+0x610/0x610 [ 2364.800259][ T3061] ? __init_rwsem+0xd6/0x1c0 [ 2364.804687][ T3061] ? copy_signal+0x4e3/0x610 [ 2364.809111][ T3061] copy_process+0x12bc/0x3260 [ 2364.813630][ T3061] ? timerqueue_add+0x250/0x270 [ 2364.818313][ T3061] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2364.823261][ T3061] ? enqueue_hrtimer+0xca/0x240 [ 2364.827946][ T3061] ? __hrtimer_run_queues+0x46b/0xad0 [ 2364.833155][ T3061] kernel_clone+0x21e/0x9e0 [ 2364.837494][ T3061] ? create_io_thread+0x1e0/0x1e0 [ 2364.842353][ T3061] ? clockevents_program_event+0x22f/0x300 [ 2364.847999][ T3061] __x64_sys_clone+0x23f/0x290 [ 2364.852594][ T3061] ? __do_sys_vfork+0x130/0x130 [ 2364.857286][ T3061] ? debug_smp_processor_id+0x17/0x20 [ 2364.862492][ T3061] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2364.868390][ T3061] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2364.873864][ T3061] do_syscall_64+0x3d/0xb0 [ 2364.878124][ T3061] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2364.883752][ T3061] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2364.889481][ T3061] RIP: 0033:0x7f977f216ae9 [ 2364.893822][ T3061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2364.913352][ T3061] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 10:41:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x30010000}, 0x80) [ 2364.921593][ T3061] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2364.929405][ T3061] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2364.937217][ T3061] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2364.945040][ T3061] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2364.952840][ T3061] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2364.960655][ T3061] 10:41:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000000000000700000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="186900001000000000000000020000000565f8ffffffffff1847000000000000000000000000000018330000040000000000000000090000950000000000000086ecfcd5e0f29ff775b3850b0bd30fdee9906c29789c0923ddffdaa4e8f9d20d48ea2ac29d8e034f1b8f04c85aad812a301d89a996684a895d3ec58fe69797d042e57943568021404bdc203db98f5b4e0a185a1fa83b1bf4297f18d58e1c6f4aae50857308a3849aea69be2d82ce880d825098bdbfbbe1f32985"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="9694126794f38f992e690000100000004000000002ffffffff18470000ecff000000002a1c68ea41a65c840002040000000000000000000000b083abd620858181b91f129fb1831a06b531075e5c22a5add90275482668d254fa17a3e143a9b6937c5927b2bf00000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, @ldst={0x0, 0x0, 0x6, 0x7, 0x7, 0x4, 0xfffffffffffffffc}, @generic={0x6, 0x1, 0x9, 0x0, 0x100}], &(0x7f00000002c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x7716, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[r0, r1, r7, r1, r13, r1], &(0x7f00000009c0)=[{0x1, 0x4, 0x1, 0x2}, {0x3, 0x1, 0x6, 0x2}, {0x3, 0x5, 0x10, 0x8}, {0x5, 0x2, 0x7}, {0x5, 0x5, 0x5, 0x4}], 0x10, 0x6}, 0x90) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1430, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r14, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x9}, 0x0, 0x40000000000000, 0x0, 0x5, 0x6, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0xc020660b, &(0x7f0000000040)) 10:41:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 52) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x30ffffff}, 0x80) 10:41:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf9ffff40}, 0x80) 10:41:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000000000000700000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="186900001000000000000000020000000565f8ffffffffff1847000000000000000000000000000018330000040000000000000000090000950000000000000086ecfcd5e0f29ff775b3850b0bd30fdee9906c29789c0923ddffdaa4e8f9d20d48ea2ac29d8e034f1b8f04c85aad812a301d89a996684a895d3ec58fe69797d042e57943568021404bdc203db98f5b4e0a185a1fa83b1bf4297f18d58e1c6f4aae50857308a3849aea69be2d82ce880d825098bdbfbbe1f32985"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="9694126794f38f992e690000100000004000000002ffffffff18470000ecff000000002a1c68ea41a65c840002040000000000000000000000b083abd620858181b91f129fb1831a06b531075e5c22a5add90275482668d254fa17a3e143a9b6937c5927b2bf00000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, @ldst={0x0, 0x0, 0x6, 0x7, 0x7, 0x4, 0xfffffffffffffffc}, @generic={0x6, 0x1, 0x9, 0x0, 0x100}], &(0x7f00000002c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x7716, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[r0, r1, r7, r1, r13, r1], &(0x7f00000009c0)=[{0x1, 0x4, 0x1, 0x2}, {0x3, 0x1, 0x6, 0x2}, {0x3, 0x5, 0x10, 0x8}, {0x5, 0x2, 0x7}, {0x5, 0x5, 0x5, 0x4}], 0x10, 0x6}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, @ldst={0x0, 0x0, 0x6, 0x7, 0x7, 0x4, 0xfffffffffffffffc}, @generic={0x6, 0x1, 0x9, 0x0, 0x100}], &(0x7f00000002c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x7716, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[r0, r1, r7, r1, r13, r1], &(0x7f00000009c0)=[{0x1, 0x4, 0x1, 0x2}, {0x3, 0x1, 0x6, 0x2}, {0x3, 0x5, 0x10, 0x8}, {0x5, 0x2, 0x7}, {0x5, 0x5, 0x5, 0x4}], 0x10, 0x6}, 0x90) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1430, 0x12) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1430, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r14, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x9}, 0x0, 0x40000000000000, 0x0, 0x5, 0x6, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0xc020660b, &(0x7f0000000040)) 10:41:04 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0xcf, 0x1f, 0x0, 0x0, 0x1, 0x48020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0xae, 0x9}, 0x400, 0x7, 0x9, 0x8, 0x0, 0x800, 0x8, 0x0, 0x7, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) (rerun: 32) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%\x00') (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2fffffff}, 0x80) 10:41:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000000000000700000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="186900001000000000000000020000000565f8ffffffffff1847000000000000000000000000000018330000040000000000000000090000950000000000000086ecfcd5e0f29ff775b3850b0bd30fdee9906c29789c0923ddffdaa4e8f9d20d48ea2ac29d8e034f1b8f04c85aad812a301d89a996684a895d3ec58fe69797d042e57943568021404bdc203db98f5b4e0a185a1fa83b1bf4297f18d58e1c6f4aae50857308a3849aea69be2d82ce880d825098bdbfbbe1f32985"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="9694126794f38f992e690000100000004000000002ffffffff18470000ecff000000002a1c68ea41a65c840002040000000000000000000000b083abd620858181b91f129fb1831a06b531075e5c22a5add90275482668d254fa17a3e143a9b6937c5927b2bf00000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x101}, @ldst={0x0, 0x0, 0x6, 0x7, 0x7, 0x4, 0xfffffffffffffffc}, @generic={0x6, 0x1, 0x9, 0x0, 0x100}], &(0x7f00000002c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x7716, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000980)=[r0, r1, r7, r1, r13, r1], &(0x7f00000009c0)=[{0x1, 0x4, 0x1, 0x2}, {0x3, 0x1, 0x6, 0x2}, {0x3, 0x5, 0x10, 0x8}, {0x5, 0x2, 0x7}, {0x5, 0x5, 0x5, 0x4}], 0x10, 0x6}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1430, 0x12) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1430, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r14, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) write$cgroup_subtree(r14, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x9}, 0x0, 0x40000000000000, 0x0, 0x5, 0x6, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x9}, 0x0, 0x40000000000000, 0x0, 0x5, 0x6, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0xc020660b, &(0x7f0000000040)) 10:41:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xf9ffffaa}, 0x80) [ 2365.313254][ T3140] FAULT_INJECTION: forcing a failure. [ 2365.313254][ T3140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2365.368649][ T3140] CPU: 1 PID: 3140 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2365.378745][ T3140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2365.388640][ T3140] Call Trace: [ 2365.391760][ T3140] [ 2365.394541][ T3140] dump_stack_lvl+0x151/0x1b7 [ 2365.399058][ T3140] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2365.404527][ T3140] dump_stack+0x15/0x17 [ 2365.408513][ T3140] should_fail+0x3c6/0x510 [ 2365.412765][ T3140] should_fail_alloc_page+0x5a/0x80 [ 2365.417798][ T3140] prepare_alloc_pages+0x15c/0x700 [ 2365.422748][ T3140] ? __alloc_pages_bulk+0xe60/0xe60 [ 2365.427780][ T3140] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2365.433770][ T3140] __alloc_pages+0x138/0x5e0 [ 2365.438193][ T3140] ? get_page_from_freelist+0x35ba/0x35d0 [ 2365.443756][ T3140] ? prep_new_page+0x110/0x110 [ 2365.448348][ T3140] ? __alloc_pages+0x206/0x5e0 [ 2365.452949][ T3140] ? prep_new_page+0x110/0x110 [ 2365.457548][ T3140] ? __kasan_check_write+0x14/0x20 [ 2365.462494][ T3140] ? _raw_spin_lock+0xa4/0x1b0 [ 2365.467097][ T3140] pte_alloc_one+0x73/0x1b0 [ 2365.471437][ T3140] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2365.476472][ T3140] __pte_alloc+0x86/0x350 [ 2365.480723][ T3140] ? irqentry_exit+0x30/0x40 [ 2365.485149][ T3140] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2365.490789][ T3140] ? free_pgtables+0x280/0x280 [ 2365.495393][ T3140] copy_page_range+0x28a8/0x2f90 [ 2365.500164][ T3140] ? __kasan_slab_alloc+0xb1/0xe0 [ 2365.505023][ T3140] ? slab_post_alloc_hook+0x53/0x2c0 [ 2365.510144][ T3140] ? kernel_clone+0x21e/0x9e0 [ 2365.514655][ T3140] ? do_syscall_64+0x3d/0xb0 [ 2365.519084][ T3140] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2365.524993][ T3140] ? pfn_valid+0x1e0/0x1e0 [ 2365.529237][ T3140] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2365.534878][ T3140] ? irqentry_exit+0x30/0x40 [ 2365.539304][ T3140] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2365.544943][ T3140] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2365.550931][ T3140] ? copy_mm+0xc64/0x13e0 [ 2365.555095][ T3140] ? copy_mm+0xc73/0x13e0 [ 2365.559275][ T3140] copy_mm+0xc7e/0x13e0 [ 2365.563255][ T3140] ? irqentry_exit+0x30/0x40 [ 2365.567687][ T3140] ? copy_signal+0x610/0x610 [ 2365.572110][ T3140] ? __init_rwsem+0xd6/0x1c0 [ 2365.576533][ T3140] ? copy_signal+0x4e3/0x610 [ 2365.580961][ T3140] copy_process+0x12bc/0x3260 [ 2365.585480][ T3140] ? irqentry_exit+0x30/0x40 [ 2365.589901][ T3140] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2365.594847][ T3140] ? kernel_clone+0x165/0x9e0 [ 2365.599364][ T3140] kernel_clone+0x21e/0x9e0 [ 2365.603702][ T3140] ? create_io_thread+0x1e0/0x1e0 [ 2365.608560][ T3140] ? clockevents_program_event+0x22f/0x300 [ 2365.614206][ T3140] __x64_sys_clone+0x23f/0x290 [ 2365.618804][ T3140] ? __do_sys_vfork+0x130/0x130 [ 2365.623490][ T3140] ? debug_smp_processor_id+0x17/0x20 [ 2365.628694][ T3140] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2365.634597][ T3140] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2365.640067][ T3140] do_syscall_64+0x3d/0xb0 [ 2365.644317][ T3140] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2365.649960][ T3140] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2365.655702][ T3140] RIP: 0033:0x7f977f216ae9 [ 2365.659944][ T3140] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2365.679382][ T3140] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2365.687630][ T3140] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2365.695442][ T3140] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2365.703250][ T3140] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2365.711059][ T3140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 10:41:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x31ffffff}, 0x80) 10:41:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfaffff63}, 0x80) [ 2365.718874][ T3140] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2365.726688][ T3140] 10:41:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfaffffc9}, 0x80) 10:41:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f00000002c0)="151eaf2eba23ae2dad1ec393ac20bec315fb3d30e32d568559214ca28b46e97f94bed184af6788563275a27e23b415c340fde334fc3f150c22f687e0ee70e3f70d578b2a95cb4515907078f18b983261e525c4f6e3763437ad63424f512303a1a27109d2f42a575644e97f7a35b68b57e232ebf96328710b2abb43d790853e9b7f40b0526e1903d00028651711c2439179123ce188a0ccc03c31b9a9da710755b499162b87db77e937429ac18f07fdeea7556a1721f03584dd4e1bd9268ef6dd0090587d49236f69c962bb093a0c6b99a4890de1962cb6a774a5f1743429507722fcaa4112", &(0x7f0000000240)=""/42, &(0x7f0000000540)="788acb4c45e4d7626730e2b99cd4a41aa3e6eda7c198b8a89aa8d4a7c66122593a1f3b1d8abfb05b612fd4bd38c2f36984ca8b558f2f17bd5e834dc6d1458f4df2c4b5ef27cf", &(0x7f0000000880)="2f39649fb9aa70539ce03c2c7a7e8c8ac60928bdbaffb1df5a61dd4c6e12b3020d7830943dd36dfacbf5a970d97cbad65d776ac3d0dbc29dfc762d6be81c0dba56a0df49e33c98f46fca42b95e8bcdc21ae9aaf3c449cde28914a04450b0480eae91bfb1aa029eae3db8899db82bd18d58510fd44f54d49aec83449bd1bf7f8096761c47c42b8a537706f690e22b060e7d2146e1e9cb4e35ed49712c6a760097dc312ac5c09989538b2ef77a866a82aae6fdbb6635ee62d9d2f3759e05f045bf29159217f41402d43222f28170af1c315ffb2fad6aa3b14e7a1cb21c25ec83b33483819a36bd0ce032b13c22feb7ddc9e9", 0x7, r0, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) 10:41:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 53) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x32ffffff}, 0x80) 10:41:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb030000}, 0x80) 10:41:05 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"/3776], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x8006, 0x0, 0x0, 0x1, 0x4, 0x800000, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='memory.numa_st\x13\xd2D\xff\xcaTW\x8f\xee@A\xcb.\xf3o\'\xfd\x85/1G\x93L\xf7\xf7\t7\xa9F\x04\xee(C8\x1f\x05\x9a\x95$<\x0f\xea\xb3m\xd8\xfa\x86]&6\xac~Qv\x93\xcd\"\x00\x00\x00\x00\x00\x00\x00\x00\x1a)\xc0\xeb\t\x96\xf3\xa7\t\xcc\x9d\xc2Y\x06\x1do$\xff\x9eGe\x1f\xf8\x8bEa\xfdK\xca\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H&\xe20\xc3\xcd^\xfdFq\xb2\x9f\xd5m\x9e\xcf=\x83+\x05\xe58\x7f0x0}, 0x52) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x0, &(0x7f0000000540), &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000d40)=""/4096, 0x40f00, 0x32, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x3}, 0xfffffffffffffec1, 0x10, &(0x7f0000000700)={0x5, 0x2, 0x8, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r3, 0xffffffffffffffff, r3]}, 0x90) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x3, 0x44, &(0x7f0000000480)=""/68, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x9, 0xffffff01}, 0x10, r2, 0x0, 0x0, &(0x7f0000000680)=[0x1, r4, r5]}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000002db50e00000000000000b764a01cef1cf35df7ee692f2c574158ad2e1ad58f5298c2890126fac65580a3744cfd8ac980eba5d03e138a2c2356796c17c91c5e246ee78b51f5150800040000000000c89c877b6c7919f96d7c620d94acb5ffc0eaf77c92a4f2ecd5c2043e649c3ccbd2909c282e08d0485c683464ec2e13f9f969b5f926b8a1360e63ea969191819e9ac7becefac22a8d22bc2fc129b0c2cb23ea84a250688c5a1b42c3dd68d1b6077b211e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socketpair(0x4, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x21, 0x80000, 0x2, 0x0) syz_clone(0x528c0400, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f00000002c0)="151eaf2eba23ae2dad1ec393ac20bec315fb3d30e32d568559214ca28b46e97f94bed184af6788563275a27e23b415c340fde334fc3f150c22f687e0ee70e3f70d578b2a95cb4515907078f18b983261e525c4f6e3763437ad63424f512303a1a27109d2f42a575644e97f7a35b68b57e232ebf96328710b2abb43d790853e9b7f40b0526e1903d00028651711c2439179123ce188a0ccc03c31b9a9da710755b499162b87db77e937429ac18f07fdeea7556a1721f03584dd4e1bd9268ef6dd0090587d49236f69c962bb093a0c6b99a4890de1962cb6a774a5f1743429507722fcaa4112", &(0x7f0000000240)=""/42, &(0x7f0000000540)="788acb4c45e4d7626730e2b99cd4a41aa3e6eda7c198b8a89aa8d4a7c66122593a1f3b1d8abfb05b612fd4bd38c2f36984ca8b558f2f17bd5e834dc6d1458f4df2c4b5ef27cf", &(0x7f0000000880)="2f39649fb9aa70539ce03c2c7a7e8c8ac60928bdbaffb1df5a61dd4c6e12b3020d7830943dd36dfacbf5a970d97cbad65d776ac3d0dbc29dfc762d6be81c0dba56a0df49e33c98f46fca42b95e8bcdc21ae9aaf3c449cde28914a04450b0480eae91bfb1aa029eae3db8899db82bd18d58510fd44f54d49aec83449bd1bf7f8096761c47c42b8a537706f690e22b060e7d2146e1e9cb4e35ed49712c6a760097dc312ac5c09989538b2ef77a866a82aae6fdbb6635ee62d9d2f3759e05f045bf29159217f41402d43222f28170af1c315ffb2fad6aa3b14e7a1cb21c25ec83b33483819a36bd0ce032b13c22feb7ddc9e9", 0x7, r0, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f00000002c0)="151eaf2eba23ae2dad1ec393ac20bec315fb3d30e32d568559214ca28b46e97f94bed184af6788563275a27e23b415c340fde334fc3f150c22f687e0ee70e3f70d578b2a95cb4515907078f18b983261e525c4f6e3763437ad63424f512303a1a27109d2f42a575644e97f7a35b68b57e232ebf96328710b2abb43d790853e9b7f40b0526e1903d00028651711c2439179123ce188a0ccc03c31b9a9da710755b499162b87db77e937429ac18f07fdeea7556a1721f03584dd4e1bd9268ef6dd0090587d49236f69c962bb093a0c6b99a4890de1962cb6a774a5f1743429507722fcaa4112", &(0x7f0000000240)=""/42, &(0x7f0000000540)="788acb4c45e4d7626730e2b99cd4a41aa3e6eda7c198b8a89aa8d4a7c66122593a1f3b1d8abfb05b612fd4bd38c2f36984ca8b558f2f17bd5e834dc6d1458f4df2c4b5ef27cf", &(0x7f0000000880)="2f39649fb9aa70539ce03c2c7a7e8c8ac60928bdbaffb1df5a61dd4c6e12b3020d7830943dd36dfacbf5a970d97cbad65d776ac3d0dbc29dfc762d6be81c0dba56a0df49e33c98f46fca42b95e8bcdc21ae9aaf3c449cde28914a04450b0480eae91bfb1aa029eae3db8899db82bd18d58510fd44f54d49aec83449bd1bf7f8096761c47c42b8a537706f690e22b060e7d2146e1e9cb4e35ed49712c6a760097dc312ac5c09989538b2ef77a866a82aae6fdbb6635ee62d9d2f3759e05f045bf29159217f41402d43222f28170af1c315ffb2fad6aa3b14e7a1cb21c25ec83b33483819a36bd0ce032b13c22feb7ddc9e9", 0x7, r0, 0x4}, 0x38) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) (async) 10:41:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0xcf, 0x1f, 0x0, 0x0, 0x1, 0x48020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0xae, 0x9}, 0x400, 0x7, 0x9, 0x8, 0x0, 0x800, 0x8, 0x0, 0x7, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x33ffffff}, 0x80) [ 2366.365464][ T3224] FAULT_INJECTION: forcing a failure. [ 2366.365464][ T3224] name failslab, interval 1, probability 0, space 0, times 0 [ 2366.412895][ T3224] CPU: 0 PID: 3224 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2366.422991][ T3224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2366.432887][ T3224] Call Trace: [ 2366.436005][ T3224] [ 2366.438793][ T3224] dump_stack_lvl+0x151/0x1b7 [ 2366.443296][ T3224] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2366.448765][ T3224] ? avc_denied+0x1b0/0x1b0 [ 2366.453111][ T3224] dump_stack+0x15/0x17 [ 2366.457106][ T3224] should_fail+0x3c6/0x510 [ 2366.461357][ T3224] __should_failslab+0xa4/0xe0 [ 2366.465950][ T3224] ? vm_area_dup+0x26/0x230 [ 2366.470286][ T3224] should_failslab+0x9/0x20 [ 2366.474627][ T3224] slab_pre_alloc_hook+0x37/0xd0 [ 2366.479403][ T3224] ? vm_area_dup+0x26/0x230 [ 2366.483736][ T3224] kmem_cache_alloc+0x44/0x200 [ 2366.488342][ T3224] vm_area_dup+0x26/0x230 [ 2366.492509][ T3224] copy_mm+0x9a1/0x13e0 [ 2366.496500][ T3224] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2366.502494][ T3224] ? copy_signal+0x610/0x610 [ 2366.506914][ T3224] ? __init_rwsem+0xd6/0x1c0 [ 2366.511340][ T3224] ? copy_signal+0x4e3/0x610 [ 2366.515766][ T3224] copy_process+0x12bc/0x3260 [ 2366.520286][ T3224] ? timerqueue_add+0x250/0x270 [ 2366.526011][ T3224] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2366.530953][ T3224] ? enqueue_hrtimer+0xca/0x240 [ 2366.535651][ T3224] ? __hrtimer_run_queues+0x46b/0xad0 [ 2366.540848][ T3224] kernel_clone+0x21e/0x9e0 [ 2366.545188][ T3224] ? create_io_thread+0x1e0/0x1e0 [ 2366.550050][ T3224] ? clockevents_program_event+0x22f/0x300 [ 2366.555698][ T3224] __x64_sys_clone+0x23f/0x290 [ 2366.560292][ T3224] ? __do_sys_vfork+0x130/0x130 [ 2366.564980][ T3224] ? debug_smp_processor_id+0x17/0x20 [ 2366.570181][ T3224] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2366.576088][ T3224] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2366.581552][ T3224] do_syscall_64+0x3d/0xb0 [ 2366.585803][ T3224] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2366.591454][ T3224] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2366.597182][ T3224] RIP: 0033:0x7f977f216ae9 [ 2366.601431][ T3224] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2366.620872][ T3224] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2366.629112][ T3224] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2366.636926][ T3224] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2366.644733][ T3224] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2366.652549][ T3224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 10:41:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfbffff52}, 0x80) 10:41:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x34ffffff}, 0x80) 10:41:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f00000002c0)="151eaf2eba23ae2dad1ec393ac20bec315fb3d30e32d568559214ca28b46e97f94bed184af6788563275a27e23b415c340fde334fc3f150c22f687e0ee70e3f70d578b2a95cb4515907078f18b983261e525c4f6e3763437ad63424f512303a1a27109d2f42a575644e97f7a35b68b57e232ebf96328710b2abb43d790853e9b7f40b0526e1903d00028651711c2439179123ce188a0ccc03c31b9a9da710755b499162b87db77e937429ac18f07fdeea7556a1721f03584dd4e1bd9268ef6dd0090587d49236f69c962bb093a0c6b99a4890de1962cb6a774a5f1743429507722fcaa4112", &(0x7f0000000240)=""/42, &(0x7f0000000540)="788acb4c45e4d7626730e2b99cd4a41aa3e6eda7c198b8a89aa8d4a7c66122593a1f3b1d8abfb05b612fd4bd38c2f36984ca8b558f2f17bd5e834dc6d1458f4df2c4b5ef27cf", &(0x7f0000000880)="2f39649fb9aa70539ce03c2c7a7e8c8ac60928bdbaffb1df5a61dd4c6e12b3020d7830943dd36dfacbf5a970d97cbad65d776ac3d0dbc29dfc762d6be81c0dba56a0df49e33c98f46fca42b95e8bcdc21ae9aaf3c449cde28914a04450b0480eae91bfb1aa029eae3db8899db82bd18d58510fd44f54d49aec83449bd1bf7f8096761c47c42b8a537706f690e22b060e7d2146e1e9cb4e35ed49712c6a760097dc312ac5c09989538b2ef77a866a82aae6fdbb6635ee62d9d2f3759e05f045bf29159217f41402d43222f28170af1c315ffb2fad6aa3b14e7a1cb21c25ec83b33483819a36bd0ce032b13c22feb7ddc9e9", 0x7, r0, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) [ 2366.660357][ T3224] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2366.668173][ T3224] 10:41:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1a280100, 0x0, 0xfffffffffffffda9, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 10:41:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfcffffd5}, 0x80) 10:41:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 54) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="0565f8ffffffffff1847000000000000000000000000000018330000040000000000000000e9fd7b1b9bd969a6b9446b00"/59], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x17, 0x1f, 0x3f, 0x9, 0x0, 0x8, 0x86011, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x4, 0xb9, 0x80000000, 0x5, 0x8, 0x1b97, 0x1ff, 0x0, 0xad2, 0x0, 0x37cc}, r0, 0x4, r11, 0x4) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000001000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed, 0x8}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40086602, &(0x7f0000000040)) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x35ffffff}, 0x80) [ 2367.143949][ T3287] FAULT_INJECTION: forcing a failure. [ 2367.143949][ T3287] name failslab, interval 1, probability 0, space 0, times 0 [ 2367.203749][ T3287] CPU: 0 PID: 3287 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2367.213837][ T3287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2367.223734][ T3287] Call Trace: [ 2367.226856][ T3287] [ 2367.229631][ T3287] dump_stack_lvl+0x151/0x1b7 [ 2367.234154][ T3287] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2367.239616][ T3287] dump_stack+0x15/0x17 [ 2367.243609][ T3287] should_fail+0x3c6/0x510 [ 2367.247866][ T3287] __should_failslab+0xa4/0xe0 [ 2367.252461][ T3287] ? vm_area_dup+0x26/0x230 [ 2367.256801][ T3287] should_failslab+0x9/0x20 [ 2367.261142][ T3287] slab_pre_alloc_hook+0x37/0xd0 [ 2367.265914][ T3287] ? vm_area_dup+0x26/0x230 [ 2367.270250][ T3287] kmem_cache_alloc+0x44/0x200 [ 2367.274851][ T3287] vm_area_dup+0x26/0x230 [ 2367.279022][ T3287] copy_mm+0x9a1/0x13e0 [ 2367.283013][ T3287] ? copy_signal+0x610/0x610 [ 2367.287438][ T3287] ? __init_rwsem+0xd6/0x1c0 [ 2367.291865][ T3287] ? copy_signal+0x4e3/0x610 [ 2367.296289][ T3287] copy_process+0x12bc/0x3260 [ 2367.300809][ T3287] ? timerqueue_add+0x250/0x270 [ 2367.305487][ T3287] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2367.310436][ T3287] ? enqueue_hrtimer+0xca/0x240 [ 2367.315124][ T3287] ? __hrtimer_run_queues+0x46b/0xad0 [ 2367.320325][ T3287] kernel_clone+0x21e/0x9e0 [ 2367.324667][ T3287] ? create_io_thread+0x1e0/0x1e0 [ 2367.329525][ T3287] ? clockevents_program_event+0x22f/0x300 [ 2367.335167][ T3287] __x64_sys_clone+0x23f/0x290 [ 2367.339768][ T3287] ? __do_sys_vfork+0x130/0x130 [ 2367.344460][ T3287] do_syscall_64+0x3d/0xb0 [ 2367.348705][ T3287] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2367.354345][ T3287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2367.360073][ T3287] RIP: 0033:0x7f977f216ae9 [ 2367.364329][ T3287] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2367.383770][ T3287] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2367.392012][ T3287] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2367.399827][ T3287] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2367.407635][ T3287] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2367.415446][ T3287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2367.423258][ T3287] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2367.431075][ T3287] 10:41:06 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"/3776], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1007}, 0x8006, 0x0, 0x0, 0x1, 0x4, 0x800000, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='memory.numa_st\x13\xd2D\xff\xcaTW\x8f\xee@A\xcb.\xf3o\'\xfd\x85/1G\x93L\xf7\xf7\t7\xa9F\x04\xee(C8\x1f\x05\x9a\x95$<\x0f\xea\xb3m\xd8\xfa\x86]&6\xac~Qv\x93\xcd\"\x00\x00\x00\x00\x00\x00\x00\x00\x1a)\xc0\xeb\t\x96\xf3\xa7\t\xcc\x9d\xc2Y\x06\x1do$\xff\x9eGe\x1f\xf8\x8bEa\xfdK\xca\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H&\xe20\xc3\xcd^\xfdFq\xb2\x9f\xd5m\x9e\xcf=\x83+\x05\xe58\x7f0x0}, 0x52) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x0, &(0x7f0000000540), &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000d40)=""/4096, 0x40f00, 0x32, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x8, 0x3}, 0xfffffffffffffec1, 0x10, &(0x7f0000000700)={0x5, 0x2, 0x8, 0x3}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r3, 0xffffffffffffffff, r3]}, 0x90) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x3, 0x44, &(0x7f0000000480)=""/68, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x9, 0xffffff01}, 0x10, r2, 0x0, 0x0, &(0x7f0000000680)=[0x1, r4, r5]}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000002db50e00000000000000b764a01cef1cf35df7ee692f2c574158ad2e1ad58f5298c2890126fac65580a3744cfd8ac980eba5d03e138a2c2356796c17c91c5e246ee78b51f5150800040000000000c89c877b6c7919f96d7c620d94acb5ffc0eaf77c92a4f2ecd5c2043e649c3ccbd2909c282e08d0485c683464ec2e13f9f969b5f926b8a1360e63ea969191819e9ac7becefac22a8d22bc2fc129b0c2cb23ea84a250688c5a1b42c3dd68d1b6077b211e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.numa_stat\x00', 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socketpair(0x4, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x21, 0x80000, 0x2, 0x0) syz_clone(0x528c0400, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfcffffdb}, 0x80) 10:41:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x36ffffff}, 0x80) 10:41:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1a280100, 0x0, 0xfffffffffffffda9, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpid() 10:41:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 32) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="0565f8ffffffffff1847000000000000000000000000000018330000040000000000000000e9fd7b1b9bd969a6b9446b00"/59], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) (rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) (async, rerun: 64) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) (async, rerun: 64) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x17, 0x1f, 0x3f, 0x9, 0x0, 0x8, 0x86011, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x4, 0xb9, 0x80000000, 0x5, 0x8, 0x1b97, 0x1ff, 0x0, 0xad2, 0x0, 0x37cc}, r0, 0x4, r11, 0x4) (rerun: 64) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000001000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed, 0x8}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40086602, &(0x7f0000000040)) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfdffff64}, 0x80) 10:41:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37ffffff}, 0x80) 10:41:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="0565f8ffffffffff1847000000000000000000000000000018330000040000000000000000e9fd7b1b9bd969a6b9446b00"/59], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) (async) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x17, 0x1f, 0x3f, 0x9, 0x0, 0x8, 0x86011, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x4, 0xb9, 0x80000000, 0x5, 0x8, 0x1b97, 0x1ff, 0x0, 0xad2, 0x0, 0x37cc}, r0, 0x4, r11, 0x4) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000001000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed, 0x8}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40086602, &(0x7f0000000040)) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 55) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000540)=""/101, 0x65}], 0x3}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r4, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r5, r3, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r10, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r11, r9, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r7, 0xffffffffffffffff, r8, r7, r12, r7, r7, r13, 0x1]}, 0x80) openat$cgroup_int(r13, &(0x7f0000000440)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x1a280100, 0x0, 0xfffffffffffffda9, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpid() 10:41:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfdffff8e}, 0x80) [ 2367.821836][ T3338] FAULT_INJECTION: forcing a failure. [ 2367.821836][ T3338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2367.876960][ T3338] CPU: 1 PID: 3338 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2367.887055][ T3338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2367.896945][ T3338] Call Trace: [ 2367.900064][ T3338] [ 2367.902845][ T3338] dump_stack_lvl+0x151/0x1b7 [ 2367.907357][ T3338] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2367.912824][ T3338] ? kvm_sched_clock_read+0x18/0x40 [ 2367.917858][ T3338] dump_stack+0x15/0x17 [ 2367.921938][ T3338] should_fail+0x3c6/0x510 [ 2367.926191][ T3338] should_fail_alloc_page+0x5a/0x80 [ 2367.931222][ T3338] prepare_alloc_pages+0x15c/0x700 [ 2367.936174][ T3338] ? __alloc_pages_bulk+0xe60/0xe60 [ 2367.941210][ T3338] __alloc_pages+0x138/0x5e0 [ 2367.945635][ T3338] ? prep_new_page+0x110/0x110 [ 2367.950233][ T3338] ? is_bpf_text_address+0x80/0x190 [ 2367.955274][ T3338] ? 0xffffffffa001a000 [ 2367.959260][ T3338] ? is_bpf_text_address+0x172/0x190 [ 2367.964383][ T3338] pte_alloc_one+0x73/0x1b0 [ 2367.968722][ T3338] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2367.973755][ T3338] ? irqentry_exit+0x30/0x40 [ 2367.978181][ T3338] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2367.984174][ T3338] __pte_alloc+0x86/0x350 [ 2367.988335][ T3338] ? add_mm_rss_vec+0xeb/0x240 [ 2367.992934][ T3338] ? free_pgtables+0x280/0x280 [ 2367.997534][ T3338] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 2368.002952][ T3338] ? __kasan_check_write+0x14/0x20 [ 2368.007898][ T3338] copy_page_range+0x28a8/0x2f90 [ 2368.012677][ T3338] ? __kasan_slab_alloc+0xb1/0xe0 [ 2368.017543][ T3338] ? pfn_valid+0x1e0/0x1e0 [ 2368.021788][ T3338] ? __vma_link_rb+0x4c5/0x550 [ 2368.026385][ T3338] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 2368.031938][ T3338] ? __rb_insert_augmented+0x5de/0x610 [ 2368.037238][ T3338] copy_mm+0xc7e/0x13e0 [ 2368.041228][ T3338] ? irqentry_exit+0x30/0x40 [ 2368.045660][ T3338] ? copy_signal+0x610/0x610 [ 2368.050080][ T3338] ? __init_rwsem+0xd6/0x1c0 [ 2368.054506][ T3338] ? copy_signal+0x4e3/0x610 [ 2368.058928][ T3338] copy_process+0x12bc/0x3260 [ 2368.063445][ T3338] ? proc_fail_nth_write+0x20b/0x290 [ 2368.068655][ T3338] ? fsnotify_perm+0x6a/0x5d0 [ 2368.073165][ T3338] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2368.078109][ T3338] ? vfs_write+0x9ec/0x1110 [ 2368.082450][ T3338] ? __hrtimer_run_queues+0x46b/0xad0 [ 2368.087660][ T3338] kernel_clone+0x21e/0x9e0 [ 2368.091999][ T3338] ? irqentry_exit+0x30/0x40 [ 2368.096424][ T3338] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2368.102064][ T3338] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2368.108054][ T3338] ? create_io_thread+0x1e0/0x1e0 [ 2368.112923][ T3338] ? ksys_write+0x244/0x2c0 [ 2368.117258][ T3338] ? fput_many+0x17/0x1b0 [ 2368.121549][ T3338] __x64_sys_clone+0x23f/0x290 [ 2368.126108][ T3338] ? __do_sys_vfork+0x130/0x130 [ 2368.130795][ T3338] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2368.136607][ T3338] do_syscall_64+0x3d/0xb0 [ 2368.140861][ T3338] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2368.146500][ T3338] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2368.152671][ T3338] RIP: 0033:0x7f977f216ae9 [ 2368.156921][ T3338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2368.176362][ T3338] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2368.184600][ T3338] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2368.192415][ T3338] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2368.200225][ T3338] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2368.208033][ T3338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2368.215982][ T3338] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2368.223795][ T3338] 10:41:07 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x5, &(0x7f0000001680)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f00000016c0)='GPL\x00', 0x7f8, 0x5c, &(0x7f0000001700)=""/92, 0x41100, 0x61, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001780)=[r5, r5, 0x1, r4, r5, r4, r5, r5, r5, r5], &(0x7f00000017c0)=[{0x4, 0x5, 0xa, 0xa}, {0x2, 0x5, 0x3, 0x2}, {0x5, 0x3, 0x9, 0xa}, {0x2, 0x2, 0xe, 0x7}, {0x3, 0x2, 0x8, 0x6}, {0x0, 0x5, 0x1, 0x7}], 0x10, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r6, 0x0, 0xdc, 0x67, &(0x7f0000001900)="75258db7261c8b1810e744cb8f0a8cacfb25aa3fae3704ed1fd6dc21ce5b498d6168982f1f7a86020d7c5a5cc8d2efcdb43a575b7d9ba49a6cd2bbe9d1fe3ad58d6e89e3570e6f508824a068d79e8aeec2068edfd1ad9410e5dab2cf101de5cb4577f8b8182374e0b269a63b0e58b298bf8e4bce82b13b27fd3607132f79515afa5265618e69b961baa9a3ef940c7a121599ae541e040ac304474a14005671ad5fa2d409a8137850118258de4478afd474d864accd4bcdcb7c71a539925b8c867608f7c5f98b77541da8c770b2c8158db0c9c13997da8ef001ae3f3e", &(0x7f0000001a00)=""/103, 0x1, 0x0, 0x61, 0xd0, &(0x7f0000001a80)="b09d2a93c5fdfd137df362c3e226f8882db50d85ed92928118f54e87415bed2826367ae3b64a860307d23013188a1a90533f00d6d0e260305b7ff69c90711024a4c8620bcba88f8c2640691505f1ea761a5a946c589e2324cf195cb6af95e9f2e7", &(0x7f0000001b00)="6b915bd26fabd011327d3fe843b905decfd1c3925a68918ab00be347cc9658418d40111351d40b0b947b934e0e185ef53e52b28d9fc38f1a3f1f664ad070b953b3cf5ad576a72818ff2187bd16414b5be0c766b17204f27510bd5d5d1fc547a18be706b70d472a89218b6b6aceb6b53360cf1dba80aaff7f06f35d9e7e2f0893128940c28c4f5682cdad71fd9f9fdc88a80a6bbfa885d298c6946cc5cbc96a28db45b801647ce7d3b6d25f78da2cf12ec2394f5c572a10983283e68bd3e3297da2c537cd7afd9fd2585d6594798d848c", 0x5, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="9500001d000000008500780c000000000000000000056349ec7cf7538048fd71563ed29e36d32a0000000000000000b036e86c389e78877ee8c593509dd975588f4b2d39"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r10, r4, r4, r11, 0x1]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13b, 0x13b, 0x3, [@const={0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xd, 0x4}, {0x2, 0x4}, {0xd, 0x2}, {0xe, 0x3}, {0x4, 0x1}, {0xb}, {0x2, 0x4}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x15, 0x1}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @struct={0x2, 0xa, 0x0, 0x4, 0x1, 0x6, [{0x7, 0x0, 0x1}, {0x10, 0x1, 0x6}, {0xf, 0x5, 0x9}, {0x6, 0x3, 0x5}, {0x3, 0x2, 0x80}, {0xd, 0x3, 0x7}, {0x0, 0x4, 0x10001}, {0x6, 0x1, 0xffffffff}, {0xa, 0x0, 0xf0b0}, {0x9, 0x3, 0x1}]}, @datasec={0xc, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x80000001, 0x3}, {0x5, 0x40, 0x40}], "14d25c"}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/4096, 0x157, 0x1000, 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x250}, [@alu={0x7, 0x0, 0x0, 0x8, 0x2, 0xfffffffffffffff0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x8a}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r5}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x13, &(0x7f0000000140)=""/19, 0x40f00, 0x0, '\x00', r12, 0x0, r13, 0x8, &(0x7f00000014c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001500)=[{0x0, 0x2, 0x8, 0x7}, {0x1, 0x4, 0x7, 0x4}], 0x10, 0x6ca}, 0x90) 10:41:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x38010000}, 0x80) 10:41:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfeffff47}, 0x80) 10:41:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) recvmsg$unix(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000540)=""/101, 0x65}], 0x3}, 0x40) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r4, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r5, r3, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r10, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r11, r9, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r7, 0xffffffffffffffff, r8, r7, r12, r7, r7, r13, 0x1]}, 0x80) openat$cgroup_int(r13, &(0x7f0000000440)='memory.max\x00', 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 56) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000540)=""/101, 0x65}], 0x3}, 0x40) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r4, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r5, r3, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r10, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r11, r9, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r7, 0xffffffffffffffff, r8, r7, r12, r7, r7, r13, 0x1]}, 0x80) (async) openat$cgroup_int(r13, &(0x7f0000000440)='memory.max\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) [ 2368.444591][ T3388] FAULT_INJECTION: forcing a failure. [ 2368.444591][ T3388] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2368.475183][ T3388] CPU: 1 PID: 3388 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2368.485278][ T3388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2368.495167][ T3388] Call Trace: [ 2368.498292][ T3388] [ 2368.501071][ T3388] dump_stack_lvl+0x151/0x1b7 [ 2368.505589][ T3388] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2368.511053][ T3388] ? __alloc_pages+0x206/0x5e0 [ 2368.515660][ T3388] dump_stack+0x15/0x17 [ 2368.519653][ T3388] should_fail+0x3c6/0x510 [ 2368.523901][ T3388] should_fail_alloc_page+0x5a/0x80 [ 2368.528929][ T3388] prepare_alloc_pages+0x15c/0x700 [ 2368.533882][ T3388] ? page_ext_put+0x1c/0x30 [ 2368.538221][ T3388] ? __alloc_pages_bulk+0xe60/0xe60 [ 2368.543259][ T3388] ? post_alloc_hook+0x1a3/0x1b0 [ 2368.548023][ T3388] __alloc_pages+0x138/0x5e0 [ 2368.552450][ T3388] ? prep_new_page+0x110/0x110 [ 2368.557057][ T3388] pte_alloc_one+0x73/0x1b0 [ 2368.561387][ T3388] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2368.566430][ T3388] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2368.572068][ T3388] __pte_alloc+0x86/0x350 [ 2368.576405][ T3388] ? free_pgtables+0x280/0x280 [ 2368.581005][ T3388] ? __kasan_check_write+0x14/0x20 [ 2368.585957][ T3388] copy_page_range+0x28a8/0x2f90 [ 2368.590726][ T3388] ? __kasan_slab_alloc+0xb1/0xe0 [ 2368.595602][ T3388] ? pfn_valid+0x1e0/0x1e0 [ 2368.599940][ T3388] ? irqentry_exit+0x30/0x40 [ 2368.604372][ T3388] copy_mm+0xc7e/0x13e0 [ 2368.608364][ T3388] ? copy_signal+0x610/0x610 [ 2368.612783][ T3388] ? __init_rwsem+0xd6/0x1c0 [ 2368.617221][ T3388] ? copy_signal+0x4e3/0x610 [ 2368.621640][ T3388] copy_process+0x12bc/0x3260 [ 2368.626154][ T3388] ? timerqueue_add+0x250/0x270 [ 2368.630848][ T3388] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2368.635786][ T3388] ? enqueue_hrtimer+0xca/0x240 [ 2368.640469][ T3388] ? __hrtimer_run_queues+0x46b/0xad0 [ 2368.645677][ T3388] kernel_clone+0x21e/0x9e0 [ 2368.650018][ T3388] ? create_io_thread+0x1e0/0x1e0 [ 2368.654880][ T3388] ? clockevents_program_event+0x22f/0x300 [ 2368.660525][ T3388] __x64_sys_clone+0x23f/0x290 [ 2368.665130][ T3388] ? __do_sys_vfork+0x130/0x130 [ 2368.669811][ T3388] do_syscall_64+0x3d/0xb0 [ 2368.674058][ T3388] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2368.679696][ T3388] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2368.685426][ T3388] RIP: 0033:0x7f977f216ae9 10:41:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x38ffffff}, 0x80) 10:41:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfeffffed}, 0x80) [ 2368.689680][ T3388] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2368.709123][ T3388] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2368.717364][ T3388] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2368.725185][ T3388] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2368.733001][ T3388] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2368.740805][ T3388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2368.748611][ T3388] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2368.756427][ T3388] 10:41:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x80, 0x1, 0x2, 0x5, 0x0, 0x4, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x9328, 0xc37, 0x3ff, 0x9, 0x3, 0x1f, 0x100, 0x0, 0x80000001, 0x0, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40086602, &(0x7f0000000040)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) 10:41:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x39ffffff}, 0x80) 10:41:08 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1b180}, 0x0, 0x4000000, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8b, 0x3, 0x7f, 0xc1, 0x0, 0x7ff, 0x8, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf4, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x204, 0xfffffffffffffe00, 0x0, 0x7, 0x1, 0x100, 0xbaa, 0x0, 0x7}, r2, 0x4, r3, 0x3) syz_clone(0x1100ac00, 0x0, 0x16, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x80, 0x2, 0xdc, 0x4, 0x0, 0x7, 0x4200, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x40a4, 0x26aa5d28, 0x7fff, 0x4, 0x4, 0x1, 0x1, 0x0, 0x9, 0x0, 0x8000000000000000}, r1, 0x5, r0, 0x8) 10:41:08 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 32) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x5, &(0x7f0000001680)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f00000016c0)='GPL\x00', 0x7f8, 0x5c, &(0x7f0000001700)=""/92, 0x41100, 0x61, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001780)=[r5, r5, 0x1, r4, r5, r4, r5, r5, r5, r5], &(0x7f00000017c0)=[{0x4, 0x5, 0xa, 0xa}, {0x2, 0x5, 0x3, 0x2}, {0x5, 0x3, 0x9, 0xa}, {0x2, 0x2, 0xe, 0x7}, {0x3, 0x2, 0x8, 0x6}, {0x0, 0x5, 0x1, 0x7}], 0x10, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r6, 0x0, 0xdc, 0x67, &(0x7f0000001900)="75258db7261c8b1810e744cb8f0a8cacfb25aa3fae3704ed1fd6dc21ce5b498d6168982f1f7a86020d7c5a5cc8d2efcdb43a575b7d9ba49a6cd2bbe9d1fe3ad58d6e89e3570e6f508824a068d79e8aeec2068edfd1ad9410e5dab2cf101de5cb4577f8b8182374e0b269a63b0e58b298bf8e4bce82b13b27fd3607132f79515afa5265618e69b961baa9a3ef940c7a121599ae541e040ac304474a14005671ad5fa2d409a8137850118258de4478afd474d864accd4bcdcb7c71a539925b8c867608f7c5f98b77541da8c770b2c8158db0c9c13997da8ef001ae3f3e", &(0x7f0000001a00)=""/103, 0x1, 0x0, 0x61, 0xd0, &(0x7f0000001a80)="b09d2a93c5fdfd137df362c3e226f8882db50d85ed92928118f54e87415bed2826367ae3b64a860307d23013188a1a90533f00d6d0e260305b7ff69c90711024a4c8620bcba88f8c2640691505f1ea761a5a946c589e2324cf195cb6af95e9f2e7", &(0x7f0000001b00)="6b915bd26fabd011327d3fe843b905decfd1c3925a68918ab00be347cc9658418d40111351d40b0b947b934e0e185ef53e52b28d9fc38f1a3f1f664ad070b953b3cf5ad576a72818ff2187bd16414b5be0c766b17204f27510bd5d5d1fc547a18be706b70d472a89218b6b6aceb6b53360cf1dba80aaff7f06f35d9e7e2f0893128940c28c4f5682cdad71fd9f9fdc88a80a6bbfa885d298c6946cc5cbc96a28db45b801647ce7d3b6d25f78da2cf12ec2394f5c572a10983283e68bd3e3297da2c537cd7afd9fd2585d6594798d848c", 0x5, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="9500001d000000008500780c000000000000000000056349ec7cf7538048fd71563ed29e36d32a0000000000000000b036e86c389e78877ee8c593509dd975588f4b2d39"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r10, r4, r4, r11, 0x1]}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13b, 0x13b, 0x3, [@const={0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xd, 0x4}, {0x2, 0x4}, {0xd, 0x2}, {0xe, 0x3}, {0x4, 0x1}, {0xb}, {0x2, 0x4}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x15, 0x1}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @struct={0x2, 0xa, 0x0, 0x4, 0x1, 0x6, [{0x7, 0x0, 0x1}, {0x10, 0x1, 0x6}, {0xf, 0x5, 0x9}, {0x6, 0x3, 0x5}, {0x3, 0x2, 0x80}, {0xd, 0x3, 0x7}, {0x0, 0x4, 0x10001}, {0x6, 0x1, 0xffffffff}, {0xa, 0x0, 0xf0b0}, {0x9, 0x3, 0x1}]}, @datasec={0xc, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x80000001, 0x3}, {0x5, 0x40, 0x40}], "14d25c"}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/4096, 0x157, 0x1000, 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x250}, [@alu={0x7, 0x0, 0x0, 0x8, 0x2, 0xfffffffffffffff0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x8a}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r5}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x13, &(0x7f0000000140)=""/19, 0x40f00, 0x0, '\x00', r12, 0x0, r13, 0x8, &(0x7f00000014c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001500)=[{0x0, 0x2, 0x8, 0x7}, {0x1, 0x4, 0x7, 0x4}], 0x10, 0x6ca}, 0x90) 10:41:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xff000000}, 0x80) 10:41:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x80, 0x1, 0x2, 0x5, 0x0, 0x4, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x9328, 0xc37, 0x3ff, 0x9, 0x3, 0x1f, 0x100, 0x0, 0x80000001, 0x0, 0x7}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40086602, &(0x7f0000000040)) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) 10:41:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 57) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3affffff}, 0x80) 10:41:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x80, 0x1, 0x2, 0x5, 0x0, 0x4, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x9328, 0xc37, 0x3ff, 0x9, 0x3, 0x1f, 0x100, 0x0, 0x80000001, 0x0, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40086602, &(0x7f0000000040)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) 10:41:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3bffffff}, 0x80) [ 2369.119422][ T3463] FAULT_INJECTION: forcing a failure. [ 2369.119422][ T3463] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:41:08 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1b180}, 0x0, 0x4000000, 0xffffffffffffffff, 0x0) (async) r1 = syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8b, 0x3, 0x7f, 0xc1, 0x0, 0x7ff, 0x8, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf4, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x204, 0xfffffffffffffe00, 0x0, 0x7, 0x1, 0x100, 0xbaa, 0x0, 0x7}, r2, 0x4, r3, 0x3) syz_clone(0x1100ac00, 0x0, 0x16, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x80, 0x2, 0xdc, 0x4, 0x0, 0x7, 0x4200, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x40a4, 0x26aa5d28, 0x7fff, 0x4, 0x4, 0x1, 0x1, 0x0, 0x9, 0x0, 0x8000000000000000}, r1, 0x5, r0, 0x8) 10:41:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffff76}, 0x80) 10:41:08 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x5, &(0x7f0000001680)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f00000016c0)='GPL\x00', 0x7f8, 0x5c, &(0x7f0000001700)=""/92, 0x41100, 0x61, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001780)=[r5, r5, 0x1, r4, r5, r4, r5, r5, r5, r5], &(0x7f00000017c0)=[{0x4, 0x5, 0xa, 0xa}, {0x2, 0x5, 0x3, 0x2}, {0x5, 0x3, 0x9, 0xa}, {0x2, 0x2, 0xe, 0x7}, {0x3, 0x2, 0x8, 0x6}, {0x0, 0x5, 0x1, 0x7}], 0x10, 0x8}, 0x90) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x5, &(0x7f0000001680)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f00000016c0)='GPL\x00', 0x7f8, 0x5c, &(0x7f0000001700)=""/92, 0x41100, 0x61, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001780)=[r5, r5, 0x1, r4, r5, r4, r5, r5, r5, r5], &(0x7f00000017c0)=[{0x4, 0x5, 0xa, 0xa}, {0x2, 0x5, 0x3, 0x2}, {0x5, 0x3, 0x9, 0xa}, {0x2, 0x2, 0xe, 0x7}, {0x3, 0x2, 0x8, 0x6}, {0x0, 0x5, 0x1, 0x7}], 0x10, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r6, 0x0, 0xdc, 0x67, &(0x7f0000001900)="75258db7261c8b1810e744cb8f0a8cacfb25aa3fae3704ed1fd6dc21ce5b498d6168982f1f7a86020d7c5a5cc8d2efcdb43a575b7d9ba49a6cd2bbe9d1fe3ad58d6e89e3570e6f508824a068d79e8aeec2068edfd1ad9410e5dab2cf101de5cb4577f8b8182374e0b269a63b0e58b298bf8e4bce82b13b27fd3607132f79515afa5265618e69b961baa9a3ef940c7a121599ae541e040ac304474a14005671ad5fa2d409a8137850118258de4478afd474d864accd4bcdcb7c71a539925b8c867608f7c5f98b77541da8c770b2c8158db0c9c13997da8ef001ae3f3e", &(0x7f0000001a00)=""/103, 0x1, 0x0, 0x61, 0xd0, &(0x7f0000001a80)="b09d2a93c5fdfd137df362c3e226f8882db50d85ed92928118f54e87415bed2826367ae3b64a860307d23013188a1a90533f00d6d0e260305b7ff69c90711024a4c8620bcba88f8c2640691505f1ea761a5a946c589e2324cf195cb6af95e9f2e7", &(0x7f0000001b00)="6b915bd26fabd011327d3fe843b905decfd1c3925a68918ab00be347cc9658418d40111351d40b0b947b934e0e185ef53e52b28d9fc38f1a3f1f664ad070b953b3cf5ad576a72818ff2187bd16414b5be0c766b17204f27510bd5d5d1fc547a18be706b70d472a89218b6b6aceb6b53360cf1dba80aaff7f06f35d9e7e2f0893128940c28c4f5682cdad71fd9f9fdc88a80a6bbfa885d298c6946cc5cbc96a28db45b801647ce7d3b6d25f78da2cf12ec2394f5c572a10983283e68bd3e3297da2c537cd7afd9fd2585d6594798d848c", 0x5, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="9500001d000000008500780c000000000000000000056349ec7cf7538048fd71563ed29e36d32a0000000000000000b036e86c389e78877ee8c593509dd975588f4b2d39"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r10, r4, r4, r11, 0x1]}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13b, 0x13b, 0x3, [@const={0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xd, 0x4}, {0x2, 0x4}, {0xd, 0x2}, {0xe, 0x3}, {0x4, 0x1}, {0xb}, {0x2, 0x4}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x15, 0x1}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @struct={0x2, 0xa, 0x0, 0x4, 0x1, 0x6, [{0x7, 0x0, 0x1}, {0x10, 0x1, 0x6}, {0xf, 0x5, 0x9}, {0x6, 0x3, 0x5}, {0x3, 0x2, 0x80}, {0xd, 0x3, 0x7}, {0x0, 0x4, 0x10001}, {0x6, 0x1, 0xffffffff}, {0xa, 0x0, 0xf0b0}, {0x9, 0x3, 0x1}]}, @datasec={0xc, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x80000001, 0x3}, {0x5, 0x40, 0x40}], "14d25c"}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/4096, 0x157, 0x1000, 0x0, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x250}, [@alu={0x7, 0x0, 0x0, 0x8, 0x2, 0xfffffffffffffff0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x8a}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r5}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0x13, &(0x7f0000000140)=""/19, 0x40f00, 0x0, '\x00', r12, 0x0, r13, 0x8, &(0x7f00000014c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001500)=[{0x0, 0x2, 0x8, 0x7}, {0x1, 0x4, 0x7, 0x4}], 0x10, 0x6ca}, 0x90) [ 2369.247493][ T3463] CPU: 1 PID: 3463 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2369.257596][ T3463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2369.267491][ T3463] Call Trace: [ 2369.270609][ T3463] [ 2369.273384][ T3463] dump_stack_lvl+0x151/0x1b7 [ 2369.277900][ T3463] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2369.283369][ T3463] dump_stack+0x15/0x17 [ 2369.287355][ T3463] should_fail+0x3c6/0x510 [ 2369.291622][ T3463] should_fail_alloc_page+0x5a/0x80 [ 2369.296648][ T3463] prepare_alloc_pages+0x15c/0x700 [ 2369.301601][ T3463] ? __alloc_pages+0x5e0/0x5e0 [ 2369.306192][ T3463] ? __alloc_pages_bulk+0xe60/0xe60 [ 2369.311226][ T3463] __alloc_pages+0x138/0x5e0 [ 2369.315649][ T3463] ? prep_new_page+0x110/0x110 [ 2369.320250][ T3463] ? 0xffffffffa00186f8 [ 2369.324237][ T3463] ? is_bpf_text_address+0x172/0x190 [ 2369.329362][ T3463] pte_alloc_one+0x73/0x1b0 [ 2369.333708][ T3463] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2369.338739][ T3463] ? arch_stack_walk+0xf3/0x140 [ 2369.343428][ T3463] __pte_alloc+0x86/0x350 [ 2369.347586][ T3463] ? free_pgtables+0x280/0x280 [ 2369.352186][ T3463] ? _raw_spin_lock+0xa4/0x1b0 [ 2369.356793][ T3463] ? __kasan_check_write+0x14/0x20 [ 2369.361735][ T3463] copy_page_range+0x28a8/0x2f90 [ 2369.366509][ T3463] ? __kasan_slab_alloc+0xb1/0xe0 [ 2369.371389][ T3463] ? pfn_valid+0x1e0/0x1e0 [ 2369.375710][ T3463] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 2369.381263][ T3463] ? __rb_insert_augmented+0x5de/0x610 [ 2369.386561][ T3463] copy_mm+0xc7e/0x13e0 [ 2369.390553][ T3463] ? copy_signal+0x610/0x610 [ 2369.394975][ T3463] ? __init_rwsem+0xd6/0x1c0 [ 2369.399430][ T3463] ? copy_signal+0x4e3/0x610 [ 2369.403829][ T3463] copy_process+0x12bc/0x3260 [ 2369.408351][ T3463] ? proc_fail_nth_write+0x20b/0x290 [ 2369.413464][ T3463] ? fsnotify_perm+0x6a/0x5d0 [ 2369.417974][ T3463] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2369.422924][ T3463] ? vfs_write+0x9ec/0x1110 [ 2369.427262][ T3463] kernel_clone+0x21e/0x9e0 [ 2369.431603][ T3463] ? file_end_write+0x1c0/0x1c0 [ 2369.436285][ T3463] ? create_io_thread+0x1e0/0x1e0 [ 2369.441145][ T3463] ? mutex_unlock+0xb2/0x260 [ 2369.445573][ T3463] ? __mutex_lock_slowpath+0x10/0x10 [ 2369.450696][ T3463] __x64_sys_clone+0x23f/0x290 [ 2369.455308][ T3463] ? __do_sys_vfork+0x130/0x130 [ 2369.459978][ T3463] ? ksys_write+0x260/0x2c0 [ 2369.464322][ T3463] ? debug_smp_processor_id+0x17/0x20 [ 2369.469528][ T3463] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2369.475431][ T3463] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2369.480995][ T3463] do_syscall_64+0x3d/0xb0 [ 2369.485238][ T3463] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2369.490964][ T3463] RIP: 0033:0x7f977f216ae9 [ 2369.495219][ T3463] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2369.514659][ T3463] RSP: 002b:00007f977df78078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2369.522900][ T3463] RAX: ffffffffffffffda RBX: 00007f977f336050 RCX: 00007f977f216ae9 [ 2369.530712][ T3463] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2369.538528][ T3463] RBP: 00007f977df78120 R08: 0000000000000000 R09: 0000000000000000 10:41:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3cffffff}, 0x80) [ 2369.546334][ T3463] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2369.554145][ T3463] R13: 000000000000006e R14: 00007f977f336050 R15: 00007fff8c72e058 [ 2369.561962][ T3463] 10:41:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3bffffff}, 0x80) 10:41:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3dffffff}, 0x80) 10:41:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffff7f}, 0x80) 10:41:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3effffff}, 0x80) 10:41:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x9) openat$cgroup_ro(r1, &(0x7f0000000b40)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="b70200000f0e1d09bfa300000000000024020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000d0b68af1de640300000000007502faff07cd10020404000003007d60b70700000d1000006a0a00fe0000000e8500000008000000b70000000604002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8328fbcd5c5e4a5ad1059b5725ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa503b8de7ab9a780001000000000000d4bf20c2bd152d814f01f2cd539e030b0000000000007f4133b08e6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91004cd5817e0b7f005e6ee7a39e2f0b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de3535e7dacf1b13f7e875d1843c2288e7ff949a7a48ce18799ee53de177a81ea67a8f84538a9a311c754e5ab59a43f56d2085786e7ec07d78917f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a442bc098f4fcc96623b7c373b0ef04d55b846b094b0d6c7a75a76d445e0dcdf72c7ef97e08000000007b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8254479c12f7c84fa5df32b70a80cce69cf30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48eb19767e00b75041739952fe87fde27ce0172f497e251f5b102893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7686bc2e1b45577c205c70631e8ad585951950e851250540593e61860b69a521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7f58bde38b44ab13d980c894e00009338923789a1edcd8043fe83919088383268324a25df14010c8ea79c0d93ca77fd6c7ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e4ffac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9c151c2fcc8dc389671c2d08b6e2641500568445b00cee4585af04fa69e0380be0d66649dcf3bf8a9066e5961197332c5c9da52b573109ea8b308ff070000aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628ebe757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc76e5d3c6840ad05a57af1ede94d87590ce90a0a7579766f847ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6c9eb0dcca5303eed6689ea910900785f61278dde47e6672e93a314a5f60e7b682bf0cacde21f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf32acfed749d516d014cef5f98126324e202badc1e5c20d69e576a770000000000005addc0103756b894418e4591c624a9b2ccabbfb888d413d923b0c901973cd7c9d197d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe84f483b15f45b9a1d3af087047c568aef1d8659c6146a793026ebfc0bb5ec10b6290dc757a4903a88fb2c035f9349b6d2f0c051b8b775152786118a1020000fc19928ccb713ff09e179c308fbe9bc543dcf43f731074d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad10e5e9d26631c2f1db3a2882f6e130a79517a88de7596429a20793e12616aa32b3e720c6521fbe933321adde8ca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9605a504bca38627df469cebb7db08358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec1741ceb39a3ecd9e3c325fcabbab3d12f6a759f7ce11dafa387a8077db8a2230d2014a57bc8dd47741270000008000000000b2eebd5e1626cab98499328ff024a240199993433ceb5be20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd11c6320a8d8fc0e78c15a5a4dd567f91dd943f62d167fed1b605965a5c2b32d094a461a990000000000000000000000000000000000000000000200000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd85481743db5d6c2cb6a204d45f88dd4140c8edb598a36e21ad132bf6b88c99c5a5ed047d6589c10a5f6633b01813fc5cd7d048469a966bbfb300fd772cbadf2cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f84a3bb96253717a1f7ac091d0f4632f638b09a0307ff31729857f9e6fe9f19e481a3f77cead663f42456e080952636515c758f1047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c420b035ff7961484a0f62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af61e6b052e473ed26b0309080ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dcec76dcfa0c052feecee18c64c4600a0bc3d4945d4b918865bb7a8a726a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4a1b4ea8b5322f78e9f3048351b550c59a634b47981420081ea4da18b9d318fa001ce660b28bbcf3c1a8893d130b26d25e491f478ae4f95f71ea8897b32858f78d6e25537b959b69a04c5507008b8453f08a5ae1b3b4d8c83053c57637a98ef57e5fa51971eba5e287e9d10cba734336703def181022cb9f1e62079c48c13fe1659b157e5d9de7bfb929e715ed1a9a505a04a8d8474482295afbb9de90de2e918522cac2d5b5ac09d1fdc4147d6393a684ad7234ecb65d0008000000000000560ad146e8b9e9cd9b050edb1f6735c90a76b1ba4dbdee34d0b6750f25ba7251944ada7766c301c65e56351d009a568c782f4438ecba9bee47f25286300e83bd1853076ad52eac84029335b86e7f21e39a1af3d070abef94bc0827db0046dcb7d63bf64bf801c836a40b0100d0961533737c57e9b7337b981a99f63f600f90647703f0640f6594dd9f26436024a1f90f174769bad5a283271e6d7f49dec90a05bd771dd0502dc2170ccf98ade27e858eb5686ac900000000ae1bc4246ae316c6af10bf02088b4bb2ac89c96e58578dc50eddbf01ece3cb8a363ecbeb8198997115d7151f691a2a755d8233e006dd38ed5ba350bd6aad3bf6f5108083f0100f8a20be455d16134d65ce69c4b906b76427224b69750b779d81eb6e37e1db62b1788ff918433787f8026ef5c518113d48419a14a2bd8d4afff527513a2efc8403be48e494b3de33b1deefd9d902e8dc868f30161c2cd13b21b0a20362181186ff8cf4c8d58d74822f92554287ee157e9f1597c3e2e238f382a91bf48b4de88363c841bd7a8cddae3344295bd3d434d9ecf74634ffc9539010f0d36e672b9d668cc6762c0b25e4a22afb4d184ba84498b1367e4b31faf75f1b3dcecfd80c57015d8cd16171507add30833865fc1a42780e9d57bb14a6ebea4018d26e18747546fc7a4a619753fd9ba9c18e746aa9ea132058eb90f9b80549473eea2fb9bc43d38d8719a1cca094bd933ceef87a3ec0c2ac70d5f843425100950000009e000000000008000018779600e4283095c203b1f2ae5ed34f5b7e77278f7ded9f030000002e050000009f95a59418f612dfa87c654043da1a59c3c43c7884ab65d4b34984afe30c67179c4f5a3ba0e491f2b942b754a3c0d5b878c4ad63591c3fc7d3a4d4296d4bab0a88e55ff9c2536654bb2f83e8015fac216119e8ce582698938c9a331a974087b71f07e50300f7ff00d03bf057b408c86a1165bd9a1bdbf3dff88c9b2173a75d5fc82dce6d8a3f297231e33588d7cf183109c1118d94a41d48f8efcf193ff2699a76973f3f1ec1cff64a1b912ededeb080f9a241e07709e6dd6a3a7e18200c9e80b9634e6f0c4d000000000000000000000000000000005e50e77d04fcf8931ad07b38a39957e6b3a3c909000000e9d694e483e848fe0d00ee7c7d6cc30932a9575aa8808d10a4963560250bb4e60e88c726f63662cb143daf4b9ebd0774998a59fbb42dc35f12452cca456a12b7d15cf3ce7ea350e9510e96527cde622998e83e65b235c284543ca32436f9e705dff00f08df1115175628a327876dea291480c2dde8a59d1856eed2b502965038af0d56e49e0e2e9cb0e25104805f386d460e212c27ac7bafe6a0078f8648ff9f1e0257338ae58457fb27b29430cc9ac6a33ea11b88ae8bc95dffa293aa69d6d47f89b28a25a7ec2fce6691549990f93d1f02e1b619813699303b6b1260d5537e85315551adabe00c98282795dc5547aab3dcbd82a06e7f00c8160af19f1fc456b5fc4f099814631024b734c0cd8843c5cb124a21092e6cdd8aa2f4d3f93e92c6d850898890d9449e3f499af92be74ba8ba7928feabbd99d6288dece7513c50b973bab87214415078857d18032ab5adb8d4bf32405cc5f63eba7e60bcd0098fd7957943b3c4cf13de4e049e06ad7ebc236d1088c99d35f40555364ff86cab4542261999bccd3269e51d10900a1c05696b47ff33a159abce6bb1d69193bd01f59f1d3f431b4e0868db623cb8375baa50785b8fcd37ce4c52abe43c1e3368735022e7cc7a9b397b494d0183cbd8dae2ba19b32adc91444f51ff010000000000007ecd3cfc67816eb66b1faa78dd8e3f7e233b6048c53813e6b508dfc713583d8ef8f9cfff5cdae59aa7aca654b1740c90eb75ca000000000000000000000000000000000000000000faa13c07b5f590ee4c8bfbd828e912b150dde95dafe80ee043a107bde9c0bb87155691d640fd000000e4a2d2aa0607b026f78417471e6ea0d10000309b29d0dae2d2c9c730ac21cc2a6213596a784a09775f86a9e6d5b6c7b3c5d10177a873edb630fdf9b1e11005a1ce41d04a2ad3f5d25a1595e7609849033d2e86ac682f2f0cde376f50a88a3ab5e83f56e43a07641b82c077fa1479b79e85c71a9c00000000000000078ce7c4ab383dac0325fa7f4ffb201c479265ff572dd061679c0000000000000f4f6b4ef8eb757ac80dc44711ae17816e32e38d7c894ab51238b2d7051ee26121404c0ade6faea7e72449cf38be7173b066f3a7835a31f1516c4cb1fda57ec8c19bc2800e246c1b64cf278c7afb3c9a5e346bdb259ac6788eefd5086e45554c8e2bdde8a3ac990dd929277a6af1876940c7c012f4b7d3d7aa68f2f07d83e925b326b05f130000000000000000000000000000000003572023092306e73a16f4b362f725b22b32be04e53a2219e3b08d75537c158ea4c4821d17d3b844dbe87408c34bb0f26ba43bd4530afb769d45b93b8f2b6c194afc197f77bfb136dfd38c265479bd4f74b9d0b5c2f37eaacb2894370ab02abe06b823a2753ca82ea8888f2a5063212212772dcc541de26c97c1312fc247b56a9cd3e05bcb8bc93363edfa05f9c76e94190f917c3af6884c8742371f25eb0000000000000000000000004ae9afd11c62a57a29a163acc55ca9fe6da9ce6d59bdd87adec5ba4052a5edcd9999720e8b2a08b69f79f78c78b9f720bcf6a2ab411d420db8231780cdf52d44985768353ce1bc587700adf3a307ff11be0ca772f1bcc565070ef9345c2d55f0506d9059fff65ca75c9809c8e5e423f6f210a195e9b59a08c43dab5b025b1dc33cfdafe62aa8f13c38341267a920fc0be4e61fe9d8bed61524ad62896e3dfba3091cf028cdb3fabb530f1d0d4bdf391c5dda4b8b248ea58cb56aed4d968d506a108626e2423c506cc11bc2ec9de3b793fec489d08085e8c582cf6fc06c20eb57f7a1ba7315c67bd0e50f529a01211f8add5f28fd65fcd373982ae902e67966990cf34be5ed5dcf39b9e44fb0165fa40fcc5643678bab244a3a76f43dd267db562efe5156b85f6e909066b8f37b81b756eeeeee4598195e70d74bd1e221c5e0cf111b816f8bd5c2ac451fabd160815b9e81b9c4abffef4b12d82e401a0cce36fbfedaec4ab6a89e128ef71e63f2239792338e87e4c7d571d6e4bc165ea1d476531b4ddfbb698101e8563f7c25b4d527240dafb074437aa96f66e293df5e132fa95aa09c08ee57f089afc0522b438480aa3dc9f41330dcd3b25703feb85777de8fd5ac57464a31ae5924745f797a0c852ddf67e01dd5736b4826e16f885afb91b6a7f226e0d0aaabd0c01a8262cb35e501ddb3c191797560c91717a2215012da9e717ec8d65887138e3bc3886e5b6f3058e58fb4320338d6413ce94012c293e0042a2f5dd86b78d05efd9e44bbbccfae8b9361072af38c1aa3c030196d72d01a160a19c0060900e8bb2f3613a7ddacf2b878aa6b2952556d79bd183ae195e14d32ffd398ae01dbd20b034da17f5a78ceb03a16e39181a07b14e54f4e2061049569046877b9f5478106f6ac76e56213ec2e85a4dcd5960ad486e7c05a21e52e5c688c1f315169452b1b6a795dd837867899c64a04ec08a4b2d5455d93f6d5baf14ffced8576bfde19de2903835607505b4af824a0a69aee28fe65683dc83c19f6d253a5824442530c85d354c05c8b95030e629fb817697f746b9dd02fb40edf4f9886a758e0741ca2711e425f2f5be70a7fa600718fa7af2eb416a2b774f5d36f5632d791e0ba01f58f2165e6d5e564aef11dbc558170cf47c5934d41f558b02dc04d3ae4aee08aa5ad7d1e5ad92cdb90db79e73524d97ca3ce0828513c74fb0a1543eba7d17d37cc1f1f2d937bfd5fafeb23f691b326554b92d8b97e76e2cbbcb858a16287c2090727334096e574b6bb937ec9f048e041f178e8d3a3543c6862fc8b63f968501fabd17cbc81db1ad47d37d3e371913f2e8c5bfad0fe02190fde2af3ac5c9a2d64ec4db0c8b211dbdf4d7b7401248de7269c0b8d4c374d9fecb9fdff846c4e57d7d976c3f571474e4f65a87954e31e67c8cf6ac7823451b448ec90ca0b36405f6d2eef4055b5d2f4dad1aa89216f6d89bd43c4de92d8f61781a9349626fb65952dfa3c68aada76c3105d65bde2bddb981f753407c7696b767aeb3707606d0d9930b79f449557d6c3088c740f2a08c68b67f8dbbf93da08544ca2f923b58b76248e4d9d326ee62fd6e5d9bedee38b0e8da3cff3ba22e92e800b28c2693ecd1a32b7aae2d762e776d66f08d78666364a2fc154fadfd105b28495e8702400a53f5191908b98a4d109a9d44107369cdf864fa8be46f52d88b01bcd795025a90669e55fc634692e554fe3a73ae6db0a5aa706c830616327a2521d3d4294115d9c4b44f949ae465d5aa24e3911520658e542e85023552e91dd39d98065dabfec69691c868bfc45f5830de8089ae1074b6ff56b7dd8e9029b7e5ab8e500b970cb391b14302315f99ab3bc102fbcc8d911c931c662c2a53c7a7bce275bb76b4096ee6d21acb49b088c7b7e05f70e6ed4cade99d907717b43b958390caec36fdb71fb1a5f374e86d3181ae1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) [ 2369.941198][ T3535] FAULT_INJECTION: forcing a failure. [ 2369.941198][ T3535] name failslab, interval 1, probability 0, space 0, times 0 [ 2369.966741][ T3535] CPU: 0 PID: 3535 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2369.976830][ T3535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2369.986728][ T3535] Call Trace: [ 2369.989850][ T3535] [ 2369.992627][ T3535] dump_stack_lvl+0x151/0x1b7 [ 2369.997140][ T3535] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2370.002612][ T3535] dump_stack+0x15/0x17 [ 2370.006599][ T3535] should_fail+0x3c6/0x510 [ 2370.010851][ T3535] __should_failslab+0xa4/0xe0 [ 2370.015449][ T3535] ? vm_area_dup+0x26/0x230 [ 2370.019791][ T3535] should_failslab+0x9/0x20 [ 2370.024132][ T3535] slab_pre_alloc_hook+0x37/0xd0 [ 2370.028904][ T3535] ? vm_area_dup+0x26/0x230 [ 2370.033278][ T3535] kmem_cache_alloc+0x44/0x200 [ 2370.037854][ T3535] vm_area_dup+0x26/0x230 [ 2370.042013][ T3535] copy_mm+0x9a1/0x13e0 [ 2370.046014][ T3535] ? copy_signal+0x610/0x610 [ 2370.050428][ T3535] ? __init_rwsem+0xd6/0x1c0 [ 2370.054853][ T3535] ? copy_signal+0x4e3/0x610 [ 2370.059333][ T3535] copy_process+0x12bc/0x3260 [ 2370.063800][ T3535] ? timerqueue_add+0x250/0x270 [ 2370.068488][ T3535] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2370.073432][ T3535] ? enqueue_hrtimer+0xca/0x240 [ 2370.078115][ T3535] ? __hrtimer_run_queues+0x46b/0xad0 [ 2370.083329][ T3535] kernel_clone+0x21e/0x9e0 [ 2370.087664][ T3535] ? create_io_thread+0x1e0/0x1e0 [ 2370.092523][ T3535] ? clockevents_program_event+0x22f/0x300 [ 2370.098164][ T3535] __x64_sys_clone+0x23f/0x290 [ 2370.102764][ T3535] ? __do_sys_vfork+0x130/0x130 [ 2370.107456][ T3535] do_syscall_64+0x3d/0xb0 [ 2370.111706][ T3535] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2370.117344][ T3535] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2370.123072][ T3535] RIP: 0033:0x7f977f216ae9 [ 2370.127326][ T3535] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2370.146770][ T3535] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2370.155010][ T3535] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2370.162822][ T3535] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2370.170632][ T3535] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2370.178442][ T3535] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 10:41:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x4) 10:41:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffff80}, 0x80) [ 2370.186255][ T3535] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2370.194073][ T3535] 10:41:09 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1b180}, 0x0, 0x4000000, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8b, 0x3, 0x7f, 0xc1, 0x0, 0x7ff, 0x8, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf4, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x204, 0xfffffffffffffe00, 0x0, 0x7, 0x1, 0x100, 0xbaa, 0x0, 0x7}, r2, 0x4, r3, 0x3) (async, rerun: 64) syz_clone(0x1100ac00, 0x0, 0x16, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x80, 0x2, 0xdc, 0x4, 0x0, 0x7, 0x4200, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x40a4, 0x26aa5d28, 0x7fff, 0x4, 0x4, 0x1, 0x1, 0x0, 0x9, 0x0, 0x8000000000000000}, r1, 0x5, r0, 0x8) 10:41:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffff85}, 0x80) 10:41:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3f000000}, 0x80) 10:41:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 59) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x4) 10:41:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffff90}, 0x80) 10:41:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3fffffff}, 0x80) 10:41:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x4) 10:41:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x9) openat$cgroup_ro(r1, &(0x7f0000000b40)='cpuacct.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000b40)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="b70200000f0e1d09bfa300000000000024020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000d0b68af1de640300000000007502faff07cd10020404000003007d60b70700000d1000006a0a00fe0000000e8500000008000000b70000000604002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8328fbcd5c5e4a5ad1059b5725ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa503b8de7ab9a780001000000000000d4bf20c2bd152d814f01f2cd539e030b0000000000007f4133b08e6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91004cd5817e0b7f005e6ee7a39e2f0b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de3535e7dacf1b13f7e875d1843c2288e7ff949a7a48ce18799ee53de177a81ea67a8f84538a9a311c754e5ab59a43f56d2085786e7ec07d78917f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a442bc098f4fcc96623b7c373b0ef04d55b846b094b0d6c7a75a76d445e0dcdf72c7ef97e08000000007b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8254479c12f7c84fa5df32b70a80cce69cf30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48eb19767e00b75041739952fe87fde27ce0172f497e251f5b102893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7686bc2e1b45577c205c70631e8ad585951950e851250540593e61860b69a521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7f58bde38b44ab13d980c894e00009338923789a1edcd8043fe83919088383268324a25df14010c8ea79c0d93ca77fd6c7ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e4ffac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9c151c2fcc8dc389671c2d08b6e2641500568445b00cee4585af04fa69e0380be0d66649dcf3bf8a9066e5961197332c5c9da52b573109ea8b308ff070000aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628ebe757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc76e5d3c6840ad05a57af1ede94d87590ce90a0a7579766f847ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6c9eb0dcca5303eed6689ea910900785f61278dde47e6672e93a314a5f60e7b682bf0cacde21f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf32acfed749d516d014cef5f98126324e202badc1e5c20d69e576a770000000000005addc0103756b894418e4591c624a9b2ccabbfb888d413d923b0c901973cd7c9d197d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe84f483b15f45b9a1d3af087047c568aef1d8659c6146a793026ebfc0bb5ec10b6290dc757a4903a88fb2c035f9349b6d2f0c051b8b775152786118a1020000fc19928ccb713ff09e179c308fbe9bc543dcf43f731074d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad10e5e9d26631c2f1db3a2882f6e130a79517a88de7596429a20793e12616aa32b3e720c6521fbe933321adde8ca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9605a504bca38627df469cebb7db08358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec1741ceb39a3ecd9e3c325fcabbab3d12f6a759f7ce11dafa387a8077db8a2230d2014a57bc8dd47741270000008000000000b2eebd5e1626cab98499328ff024a240199993433ceb5be20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd11c6320a8d8fc0e78c15a5a4dd567f91dd943f62d167fed1b605965a5c2b32d094a461a990000000000000000000000000000000000000000000200000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd85481743db5d6c2cb6a204d45f88dd4140c8edb598a36e21ad132bf6b88c99c5a5ed047d6589c10a5f6633b01813fc5cd7d048469a966bbfb300fd772cbadf2cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f84a3bb96253717a1f7ac091d0f4632f638b09a0307ff31729857f9e6fe9f19e481a3f77cead663f42456e080952636515c758f1047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c420b035ff7961484a0f62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af61e6b052e473ed26b0309080ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dcec76dcfa0c052feecee18c64c4600a0bc3d4945d4b918865bb7a8a726a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4a1b4ea8b5322f78e9f3048351b550c59a634b47981420081ea4da18b9d318fa001ce660b28bbcf3c1a8893d130b26d25e491f478ae4f95f71ea8897b32858f78d6e25537b959b69a04c5507008b8453f08a5ae1b3b4d8c83053c57637a98ef57e5fa51971eba5e287e9d10cba734336703def181022cb9f1e62079c48c13fe1659b157e5d9de7bfb929e715ed1a9a505a04a8d8474482295afbb9de90de2e918522cac2d5b5ac09d1fdc4147d6393a684ad7234ecb65d0008000000000000560ad146e8b9e9cd9b050edb1f6735c90a76b1ba4dbdee34d0b6750f25ba7251944ada7766c301c65e56351d009a568c782f4438ecba9bee47f25286300e83bd1853076ad52eac84029335b86e7f21e39a1af3d070abef94bc0827db0046dcb7d63bf64bf801c836a40b0100d0961533737c57e9b7337b981a99f63f600f90647703f0640f6594dd9f26436024a1f90f174769bad5a283271e6d7f49dec90a05bd771dd0502dc2170ccf98ade27e858eb5686ac900000000ae1bc4246ae316c6af10bf02088b4bb2ac89c96e58578dc50eddbf01ece3cb8a363ecbeb8198997115d7151f691a2a755d8233e006dd38ed5ba350bd6aad3bf6f5108083f0100f8a20be455d16134d65ce69c4b906b76427224b69750b779d81eb6e37e1db62b1788ff918433787f8026ef5c518113d48419a14a2bd8d4afff527513a2efc8403be48e494b3de33b1deefd9d902e8dc868f30161c2cd13b21b0a20362181186ff8cf4c8d58d74822f92554287ee157e9f1597c3e2e238f382a91bf48b4de88363c841bd7a8cddae3344295bd3d434d9ecf74634ffc9539010f0d36e672b9d668cc6762c0b25e4a22afb4d184ba84498b1367e4b31faf75f1b3dcecfd80c57015d8cd16171507add30833865fc1a42780e9d57bb14a6ebea4018d26e18747546fc7a4a619753fd9ba9c18e746aa9ea132058eb90f9b80549473eea2fb9bc43d38d8719a1cca094bd933ceef87a3ec0c2ac70d5f843425100950000009e000000000008000018779600e4283095c203b1f2ae5ed34f5b7e77278f7ded9f030000002e050000009f95a59418f612dfa87c654043da1a59c3c43c7884ab65d4b34984afe30c67179c4f5a3ba0e491f2b942b754a3c0d5b878c4ad63591c3fc7d3a4d4296d4bab0a88e55ff9c2536654bb2f83e8015fac216119e8ce582698938c9a331a974087b71f07e50300f7ff00d03bf057b408c86a1165bd9a1bdbf3dff88c9b2173a75d5fc82dce6d8a3f297231e33588d7cf183109c1118d94a41d48f8efcf193ff2699a76973f3f1ec1cff64a1b912ededeb080f9a241e07709e6dd6a3a7e18200c9e80b9634e6f0c4d000000000000000000000000000000005e50e77d04fcf8931ad07b38a39957e6b3a3c909000000e9d694e483e848fe0d00ee7c7d6cc30932a9575aa8808d10a4963560250bb4e60e88c726f63662cb143daf4b9ebd0774998a59fbb42dc35f12452cca456a12b7d15cf3ce7ea350e9510e96527cde622998e83e65b235c284543ca32436f9e705dff00f08df1115175628a327876dea291480c2dde8a59d1856eed2b502965038af0d56e49e0e2e9cb0e25104805f386d460e212c27ac7bafe6a0078f8648ff9f1e0257338ae58457fb27b29430cc9ac6a33ea11b88ae8bc95dffa293aa69d6d47f89b28a25a7ec2fce6691549990f93d1f02e1b619813699303b6b1260d5537e85315551adabe00c98282795dc5547aab3dcbd82a06e7f00c8160af19f1fc456b5fc4f099814631024b734c0cd8843c5cb124a21092e6cdd8aa2f4d3f93e92c6d850898890d9449e3f499af92be74ba8ba7928feabbd99d6288dece7513c50b973bab87214415078857d18032ab5adb8d4bf32405cc5f63eba7e60bcd0098fd7957943b3c4cf13de4e049e06ad7ebc236d1088c99d35f40555364ff86cab4542261999bccd3269e51d10900a1c05696b47ff33a159abce6bb1d69193bd01f59f1d3f431b4e0868db623cb8375baa50785b8fcd37ce4c52abe43c1e3368735022e7cc7a9b397b494d0183cbd8dae2ba19b32adc91444f51ff010000000000007ecd3cfc67816eb66b1faa78dd8e3f7e233b6048c53813e6b508dfc713583d8ef8f9cfff5cdae59aa7aca654b1740c90eb75ca000000000000000000000000000000000000000000faa13c07b5f590ee4c8bfbd828e912b150dde95dafe80ee043a107bde9c0bb87155691d640fd000000e4a2d2aa0607b026f78417471e6ea0d10000309b29d0dae2d2c9c730ac21cc2a6213596a784a09775f86a9e6d5b6c7b3c5d10177a873edb630fdf9b1e11005a1ce41d04a2ad3f5d25a1595e7609849033d2e86ac682f2f0cde376f50a88a3ab5e83f56e43a07641b82c077fa1479b79e85c71a9c00000000000000078ce7c4ab383dac0325fa7f4ffb201c479265ff572dd061679c0000000000000f4f6b4ef8eb757ac80dc44711ae17816e32e38d7c894ab51238b2d7051ee26121404c0ade6faea7e72449cf38be7173b066f3a7835a31f1516c4cb1fda57ec8c19bc2800e246c1b64cf278c7afb3c9a5e346bdb259ac6788eefd5086e45554c8e2bdde8a3ac990dd929277a6af1876940c7c012f4b7d3d7aa68f2f07d83e925b326b05f130000000000000000000000000000000003572023092306e73a16f4b362f725b22b32be04e53a2219e3b08d75537c158ea4c4821d17d3b844dbe87408c34bb0f26ba43bd4530afb769d45b93b8f2b6c194afc197f77bfb136dfd38c265479bd4f74b9d0b5c2f37eaacb2894370ab02abe06b823a2753ca82ea8888f2a5063212212772dcc541de26c97c1312fc247b56a9cd3e05bcb8bc93363edfa05f9c76e94190f917c3af6884c8742371f25eb0000000000000000000000004ae9afd11c62a57a29a163acc55ca9fe6da9ce6d59bdd87adec5ba4052a5edcd9999720e8b2a08b69f79f78c78b9f720bcf6a2ab411d420db8231780cdf52d44985768353ce1bc587700adf3a307ff11be0ca772f1bcc565070ef9345c2d55f0506d9059fff65ca75c9809c8e5e423f6f210a195e9b59a08c43dab5b025b1dc33cfdafe62aa8f13c38341267a920fc0be4e61fe9d8bed61524ad62896e3dfba3091cf028cdb3fabb530f1d0d4bdf391c5dda4b8b248ea58cb56aed4d968d506a108626e2423c506cc11bc2ec9de3b793fec489d08085e8c582cf6fc06c20eb57f7a1ba7315c67bd0e50f529a01211f8add5f28fd65fcd373982ae902e67966990cf34be5ed5dcf39b9e44fb0165fa40fcc5643678bab244a3a76f43dd267db562efe5156b85f6e909066b8f37b81b756eeeeee4598195e70d74bd1e221c5e0cf111b816f8bd5c2ac451fabd160815b9e81b9c4abffef4b12d82e401a0cce36fbfedaec4ab6a89e128ef71e63f2239792338e87e4c7d571d6e4bc165ea1d476531b4ddfbb698101e8563f7c25b4d527240dafb074437aa96f66e293df5e132fa95aa09c08ee57f089afc0522b438480aa3dc9f41330dcd3b25703feb85777de8fd5ac57464a31ae5924745f797a0c852ddf67e01dd5736b4826e16f885afb91b6a7f226e0d0aaabd0c01a8262cb35e501ddb3c191797560c91717a2215012da9e717ec8d65887138e3bc3886e5b6f3058e58fb4320338d6413ce94012c293e0042a2f5dd86b78d05efd9e44bbbccfae8b9361072af38c1aa3c030196d72d01a160a19c0060900e8bb2f3613a7ddacf2b878aa6b2952556d79bd183ae195e14d32ffd398ae01dbd20b034da17f5a78ceb03a16e39181a07b14e54f4e2061049569046877b9f5478106f6ac76e56213ec2e85a4dcd5960ad486e7c05a21e52e5c688c1f315169452b1b6a795dd837867899c64a04ec08a4b2d5455d93f6d5baf14ffced8576bfde19de2903835607505b4af824a0a69aee28fe65683dc83c19f6d253a5824442530c85d354c05c8b95030e629fb817697f746b9dd02fb40edf4f9886a758e0741ca2711e425f2f5be70a7fa600718fa7af2eb416a2b774f5d36f5632d791e0ba01f58f2165e6d5e564aef11dbc558170cf47c5934d41f558b02dc04d3ae4aee08aa5ad7d1e5ad92cdb90db79e73524d97ca3ce0828513c74fb0a1543eba7d17d37cc1f1f2d937bfd5fafeb23f691b326554b92d8b97e76e2cbbcb858a16287c2090727334096e574b6bb937ec9f048e041f178e8d3a3543c6862fc8b63f968501fabd17cbc81db1ad47d37d3e371913f2e8c5bfad0fe02190fde2af3ac5c9a2d64ec4db0c8b211dbdf4d7b7401248de7269c0b8d4c374d9fecb9fdff846c4e57d7d976c3f571474e4f65a87954e31e67c8cf6ac7823451b448ec90ca0b36405f6d2eef4055b5d2f4dad1aa89216f6d89bd43c4de92d8f61781a9349626fb65952dfa3c68aada76c3105d65bde2bddb981f753407c7696b767aeb3707606d0d9930b79f449557d6c3088c740f2a08c68b67f8dbbf93da08544ca2f923b58b76248e4d9d326ee62fd6e5d9bedee38b0e8da3cff3ba22e92e800b28c2693ecd1a32b7aae2d762e776d66f08d78666364a2fc154fadfd105b28495e8702400a53f5191908b98a4d109a9d44107369cdf864fa8be46f52d88b01bcd795025a90669e55fc634692e554fe3a73ae6db0a5aa706c830616327a2521d3d4294115d9c4b44f949ae465d5aa24e3911520658e542e85023552e91dd39d98065dabfec69691c868bfc45f5830de8089ae1074b6ff56b7dd8e9029b7e5ab8e500b970cb391b14302315f99ab3bc102fbcc8d911c931c662c2a53c7a7bce275bb76b4096ee6d21acb49b088c7b7e05f70e6ed4cade99d907717b43b958390caec36fdb71fb1a5f374e86d3181ae1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 10:41:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffffb0}, 0x80) 10:41:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x40000000}, 0x80) [ 2370.670311][ T3588] FAULT_INJECTION: forcing a failure. [ 2370.670311][ T3588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2370.723937][ T3588] CPU: 1 PID: 3588 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2370.734033][ T3588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2370.743976][ T3588] Call Trace: [ 2370.747049][ T3588] [ 2370.749828][ T3588] dump_stack_lvl+0x151/0x1b7 [ 2370.754341][ T3588] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2370.759900][ T3588] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2370.765535][ T3588] dump_stack+0x15/0x17 [ 2370.769527][ T3588] should_fail+0x3c6/0x510 [ 2370.773784][ T3588] should_fail_alloc_page+0x5a/0x80 [ 2370.778812][ T3588] prepare_alloc_pages+0x15c/0x700 [ 2370.783762][ T3588] ? __alloc_pages+0x5e0/0x5e0 [ 2370.788364][ T3588] ? __alloc_pages_bulk+0xe60/0xe60 [ 2370.793403][ T3588] __alloc_pages+0x138/0x5e0 [ 2370.797822][ T3588] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2370.803463][ T3588] ? prep_new_page+0x110/0x110 [ 2370.808070][ T3588] ? 0xffffffffa00186f8 [ 2370.812059][ T3588] ? is_bpf_text_address+0x172/0x190 [ 2370.817180][ T3588] pte_alloc_one+0x73/0x1b0 [ 2370.821513][ T3588] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2370.826554][ T3588] ? irqentry_exit+0x30/0x40 [ 2370.830979][ T3588] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2370.836964][ T3588] __pte_alloc+0x86/0x350 [ 2370.841132][ T3588] ? add_mm_rss_vec+0xb0/0x240 [ 2370.845728][ T3588] ? add_mm_rss_vec+0xdc/0x240 [ 2370.850379][ T3588] ? free_pgtables+0x280/0x280 [ 2370.855021][ T3588] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 2370.860401][ T3588] ? __kasan_check_write+0x14/0x20 [ 2370.865350][ T3588] copy_page_range+0x28a8/0x2f90 [ 2370.870124][ T3588] ? __kasan_slab_alloc+0xb1/0xe0 [ 2370.874990][ T3588] ? pfn_valid+0x1e0/0x1e0 [ 2370.879235][ T3588] ? irqentry_exit+0x30/0x40 [ 2370.883664][ T3588] ? sysvec_call_function_single+0xb0/0xb0 [ 2370.889735][ T3588] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2370.895724][ T3588] ? up_write+0x27/0x1f0 [ 2370.899809][ T3588] copy_mm+0xc7e/0x13e0 [ 2370.903799][ T3588] ? copy_signal+0x610/0x610 [ 2370.908222][ T3588] ? __init_rwsem+0xd6/0x1c0 [ 2370.912656][ T3588] ? copy_signal+0x4e3/0x610 [ 2370.917076][ T3588] copy_process+0x12bc/0x3260 [ 2370.921590][ T3588] ? timerqueue_add+0x250/0x270 [ 2370.926277][ T3588] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2370.931220][ T3588] ? enqueue_hrtimer+0xca/0x240 [ 2370.935909][ T3588] ? __hrtimer_run_queues+0x46b/0xad0 [ 2370.941119][ T3588] kernel_clone+0x21e/0x9e0 [ 2370.945454][ T3588] ? create_io_thread+0x1e0/0x1e0 [ 2370.950314][ T3588] ? clockevents_program_event+0x22f/0x300 [ 2370.955958][ T3588] __x64_sys_clone+0x23f/0x290 [ 2370.960564][ T3588] ? __do_sys_vfork+0x130/0x130 [ 2370.965249][ T3588] ? debug_smp_processor_id+0x17/0x20 [ 2370.970453][ T3588] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2370.976352][ T3588] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2370.981824][ T3588] do_syscall_64+0x3d/0xb0 [ 2370.986072][ T3588] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2370.991715][ T3588] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2370.997446][ T3588] RIP: 0033:0x7f977f216ae9 [ 2371.001697][ T3588] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 10:41:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x90) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x90) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="950000000000000085001f0060000000850000002b00000b"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xa, &(0x7f0000000d40)=ANY=[@ANYBLOB="852000000100000018000000010000000000000000000000183a0000010000000000000000000000181600004a045668a48b9af2ad566d62286b4ac5282ea732c84b435c32c1473feb791e7e9a643262eedd452476212beba913a24cff8a1e9167f67450f89cd13d6c441a6fe08ecfaf0d1bee9ebbe1d17ad6a821318a131567caaeafc1733fa24a1a7cda2a6b79f114885ce5f9edd9f8094331c32e0f0c2a6647d934763ade43eb64678c84e9c1bab3c5b9679a6882b1c51cb9733ca3b5fec9be526ed6146203838b3724dc8de01a9be9fdf4c8fb43e63a976a50b4226d25da69c110834f5ca38c", @ANYRES32=0x1, @ANYBLOB="0000000000000000dbb60c010400000085000000d30000008500000011000000"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x9c, &(0x7f0000000340)=""/156, 0x41100, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0x9, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0x1, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x0, 0xb}, {0x5, 0x1, 0xa}, {0x1, 0x5, 0xc, 0xa}, {0x4, 0x1, 0x3, 0x7}, {0x3, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x5, 0x7}, {0x1, 0x3, 0x4, 0x8}, {0x0, 0x1, 0x10, 0x5}], 0x10, 0x15}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x12}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40086602, &(0x7f0000000040)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) [ 2371.021139][ T3588] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2371.029386][ T3588] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2371.037197][ T3588] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2371.045005][ T3588] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2371.052816][ T3588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2371.060627][ T3588] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2371.068445][ T3588] 10:41:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) r0 = gettid() r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r11, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffffc0}, 0x80) 10:41:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x408501a0}, 0x80) 10:41:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 60) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x90) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 64) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x90) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="950000000000000085001f0060000000850000002b00000b"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xa, &(0x7f0000000d40)=ANY=[@ANYBLOB="852000000100000018000000010000000000000000000000183a0000010000000000000000000000181600004a045668a48b9af2ad566d62286b4ac5282ea732c84b435c32c1473feb791e7e9a643262eedd452476212beba913a24cff8a1e9167f67450f89cd13d6c441a6fe08ecfaf0d1bee9ebbe1d17ad6a821318a131567caaeafc1733fa24a1a7cda2a6b79f114885ce5f9edd9f8094331c32e0f0c2a6647d934763ade43eb64678c84e9c1bab3c5b9679a6882b1c51cb9733ca3b5fec9be526ed6146203838b3724dc8de01a9be9fdf4c8fb43e63a976a50b4226d25da69c110834f5ca38c", @ANYRES32=0x1, @ANYBLOB="0000000000000000dbb60c010400000085000000d30000008500000011000000"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x9c, &(0x7f0000000340)=""/156, 0x41100, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0x9, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0x1, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x0, 0xb}, {0x5, 0x1, 0xa}, {0x1, 0x5, 0xc, 0xa}, {0x4, 0x1, 0x3, 0x7}, {0x3, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x5, 0x7}, {0x1, 0x3, 0x4, 0x8}, {0x0, 0x1, 0x10, 0x5}], 0x10, 0x15}, 0x90) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x12}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40086602, &(0x7f0000000040)) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) 10:41:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x40ffffff}, 0x80) 10:41:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x90) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 32) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 32) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) (rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x90) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="950000000000000085001f0060000000850000002b00000b"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0xa, &(0x7f0000000d40)=ANY=[@ANYBLOB="852000000100000018000000010000000000000000000000183a0000010000000000000000000000181600004a045668a48b9af2ad566d62286b4ac5282ea732c84b435c32c1473feb791e7e9a643262eedd452476212beba913a24cff8a1e9167f67450f89cd13d6c441a6fe08ecfaf0d1bee9ebbe1d17ad6a821318a131567caaeafc1733fa24a1a7cda2a6b79f114885ce5f9edd9f8094331c32e0f0c2a6647d934763ade43eb64678c84e9c1bab3c5b9679a6882b1c51cb9733ca3b5fec9be526ed6146203838b3724dc8de01a9be9fdf4c8fb43e63a976a50b4226d25da69c110834f5ca38c", @ANYRES32=0x1, @ANYBLOB="0000000000000000dbb60c010400000085000000d30000008500000011000000"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x9c, &(0x7f0000000340)=""/156, 0x41100, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0x9, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0x1, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x0, 0xb}, {0x5, 0x1, 0xa}, {0x1, 0x5, 0xc, 0xa}, {0x4, 0x1, 0x3, 0x7}, {0x3, 0x4, 0x7, 0x8}, {0x0, 0x3, 0x5, 0x7}, {0x1, 0x3, 0x4, 0x8}, {0x0, 0x1, 0x10, 0x5}], 0x10, 0x15}, 0x90) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x12}, 0x90) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40086602, &(0x7f0000000040)) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) [ 2371.445055][ T3643] FAULT_INJECTION: forcing a failure. [ 2371.445055][ T3643] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.475987][ T3643] CPU: 0 PID: 3643 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2371.486077][ T3643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2371.495975][ T3643] Call Trace: [ 2371.499096][ T3643] [ 2371.501873][ T3643] dump_stack_lvl+0x151/0x1b7 [ 2371.506384][ T3643] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2371.511855][ T3643] dump_stack+0x15/0x17 [ 2371.515846][ T3643] should_fail+0x3c6/0x510 [ 2371.520103][ T3643] __should_failslab+0xa4/0xe0 [ 2371.524700][ T3643] ? vm_area_dup+0x26/0x230 [ 2371.529039][ T3643] should_failslab+0x9/0x20 [ 2371.533377][ T3643] slab_pre_alloc_hook+0x37/0xd0 [ 2371.538152][ T3643] ? vm_area_dup+0x26/0x230 [ 2371.542491][ T3643] kmem_cache_alloc+0x44/0x200 [ 2371.547091][ T3643] vm_area_dup+0x26/0x230 [ 2371.551258][ T3643] copy_mm+0x9a1/0x13e0 [ 2371.555251][ T3643] ? copy_signal+0x610/0x610 [ 2371.559673][ T3643] ? __init_rwsem+0xd6/0x1c0 [ 2371.564103][ T3643] ? copy_signal+0x4e3/0x610 [ 2371.568526][ T3643] copy_process+0x12bc/0x3260 [ 2371.573047][ T3643] ? timerqueue_add+0x250/0x270 [ 2371.577727][ T3643] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2371.582674][ T3643] ? enqueue_hrtimer+0xca/0x240 [ 2371.587371][ T3643] ? __hrtimer_run_queues+0x46b/0xad0 [ 2371.592570][ T3643] kernel_clone+0x21e/0x9e0 [ 2371.596907][ T3643] ? irqentry_exit+0x30/0x40 [ 2371.601334][ T3643] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2371.606986][ T3643] ? create_io_thread+0x1e0/0x1e0 [ 2371.611844][ T3643] __x64_sys_clone+0x23f/0x290 [ 2371.616443][ T3643] ? __do_sys_vfork+0x130/0x130 [ 2371.621129][ T3643] ? debug_smp_processor_id+0x17/0x20 [ 2371.626330][ T3643] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2371.632231][ T3643] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2371.637708][ T3643] do_syscall_64+0x3d/0xb0 [ 2371.641953][ T3643] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2371.647593][ T3643] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2371.653320][ T3643] RIP: 0033:0x7f977f216ae9 [ 2371.657575][ T3643] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2371.677020][ T3643] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2371.685265][ T3643] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 10:41:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffffd0}, 0x80) 10:41:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x9) openat$cgroup_ro(r1, &(0x7f0000000b40)='cpuacct.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 10:41:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000006476cbe0f20800000011cce1fa0000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r1, r0, 0x1f, 0x1, r1, @link_fd=r12}, 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x41ffffff}, 0x80) [ 2371.693160][ T3643] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2371.700968][ T3643] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2371.708782][ T3643] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2371.716595][ T3643] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2371.724413][ T3643] 10:41:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) r0 = gettid() (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r11, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x42ffffff}, 0x80) 10:41:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffffff}, 0x80) 10:41:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 61) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x43ffffff}, 0x80) 10:41:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x44ffffff}, 0x80) 10:41:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = gettid() (async, rerun: 64) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 64) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 64) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r11, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00'}, 0x80) [ 2372.239786][ T3707] FAULT_INJECTION: forcing a failure. [ 2372.239786][ T3707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2372.283225][ T3707] CPU: 0 PID: 3707 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2372.293523][ T3707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2372.303419][ T3707] Call Trace: [ 2372.306537][ T3707] [ 2372.309315][ T3707] dump_stack_lvl+0x151/0x1b7 [ 2372.313925][ T3707] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2372.319384][ T3707] dump_stack+0x15/0x17 [ 2372.323372][ T3707] should_fail+0x3c6/0x510 [ 2372.327627][ T3707] should_fail_alloc_page+0x5a/0x80 [ 2372.332661][ T3707] prepare_alloc_pages+0x15c/0x700 [ 2372.337608][ T3707] ? __alloc_pages_bulk+0xe60/0xe60 [ 2372.342646][ T3707] __alloc_pages+0x138/0x5e0 [ 2372.347073][ T3707] ? prep_new_page+0x110/0x110 [ 2372.351672][ T3707] ? 0xffffffffa001a000 [ 2372.355659][ T3707] ? is_bpf_text_address+0x172/0x190 [ 2372.360785][ T3707] pte_alloc_one+0x73/0x1b0 [ 2372.365122][ T3707] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2372.370158][ T3707] __pte_alloc+0x86/0x350 [ 2372.374320][ T3707] ? irqentry_exit+0x30/0x40 [ 2372.378745][ T3707] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2372.384390][ T3707] ? free_pgtables+0x280/0x280 [ 2372.388989][ T3707] ? copy_page_range+0x27d0/0x2f90 [ 2372.393937][ T3707] copy_page_range+0x28a8/0x2f90 [ 2372.398711][ T3707] ? __kasan_slab_alloc+0xb1/0xe0 [ 2372.403582][ T3707] ? pfn_valid+0x1e0/0x1e0 [ 2372.407826][ T3707] ? irqentry_exit+0x30/0x40 [ 2372.412248][ T3707] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 2372.417808][ T3707] ? __rb_insert_augmented+0x5de/0x610 [ 2372.423101][ T3707] copy_mm+0xc7e/0x13e0 [ 2372.427089][ T3707] ? irqentry_exit+0x30/0x40 [ 2372.431522][ T3707] ? copy_signal+0x610/0x610 [ 2372.435938][ T3707] ? __init_rwsem+0xd6/0x1c0 [ 2372.440361][ T3707] ? copy_signal+0x4e3/0x610 [ 2372.444789][ T3707] copy_process+0x12bc/0x3260 [ 2372.449307][ T3707] ? timerqueue_add+0x250/0x270 [ 2372.453988][ T3707] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2372.458938][ T3707] ? enqueue_hrtimer+0xca/0x240 [ 2372.463623][ T3707] ? __hrtimer_run_queues+0x46b/0xad0 [ 2372.468832][ T3707] kernel_clone+0x21e/0x9e0 [ 2372.473174][ T3707] ? create_io_thread+0x1e0/0x1e0 [ 2372.478032][ T3707] ? clockevents_program_event+0x22f/0x300 [ 2372.483673][ T3707] __x64_sys_clone+0x23f/0x290 [ 2372.488275][ T3707] ? __do_sys_vfork+0x130/0x130 [ 2372.492961][ T3707] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2372.498777][ T3707] do_syscall_64+0x3d/0xb0 [ 2372.503028][ T3707] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2372.508672][ T3707] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2372.514399][ T3707] RIP: 0033:0x7f977f216ae9 [ 2372.518657][ T3707] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2372.538092][ T3707] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2372.546336][ T3707] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2372.554147][ T3707] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2372.561959][ T3707] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2372.569772][ T3707] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 10:41:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x45ffffff}, 0x80) [ 2372.577584][ T3707] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2372.585397][ T3707] 10:41:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/47, 0x2f}], 0x1}, 0x40002040) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8ffffffffff18470000ffffffff0000000000000000183300000400000000000013000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x3, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, r4, 0x1], 0x0, 0x10, 0x3}, 0x90) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x4, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0xffffffff}, 0x90) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xfffffffe, 0x18}, 0xfffffffffffffd9e) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x4002b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x90) close(r7) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={0x0, 0x2, [@remote, @dev]}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1fb, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x8}, 0x140, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) close(r2) 10:41:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000006476cbe0f20800000011cce1fa0000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) (rerun: 64) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 32) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r1, r0, 0x1f, 0x1, r1, @link_fd=r12}, 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x2}, 0x80) 10:41:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46ffffff}, 0x80) [ 2372.772009][ T3741] device team0 entered promiscuous mode 10:41:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000006476cbe0f20800000011cce1fa0000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) (async, rerun: 32) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r1, r0, 0x1f, 0x1, r1, @link_fd=r12}, 0x20) (rerun: 32) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (rerun: 64) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x47ffffff}, 0x80) 10:41:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 62) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, 0x1, 0x1, 0x1]}, 0x80) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x1]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000180)=0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0xc020660b, &(0x7f0000000040)) 10:41:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x3}, 0x80) 10:41:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x18}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/47, 0x2f}], 0x1}, 0x40002040) (async) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8ffffffffff18470000ffffffff0000000000000000183300000400000000000013000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x3, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, r4, 0x1], 0x0, 0x10, 0x3}, 0x90) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x4, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0xffffffff}, 0x90) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) (rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xfffffffe, 0x18}, 0xfffffffffffffd9e) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x4002b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x90) (async) close(r7) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={0x0, 0x2, [@remote, @dev]}) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1fb, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x8}, 0x140, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) (async) close(r2) 10:41:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd287}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x3, 0x9, 0x0, 0xc2, 0x2010, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp, 0x88438, 0x1f, 0x0, 0x8, 0x5fe4983e, 0x1, 0x0, 0x0, 0xfff, 0x0, 0x926}, r0, 0x7, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x48ffffff}, 0x80) 10:41:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, 0x1, 0x1, 0x1]}, 0x80) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x1]}, 0x80) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000180)=0x2) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) (async) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0xc020660b, &(0x7f0000000040)) [ 2373.177009][ T3783] FAULT_INJECTION: forcing a failure. [ 2373.177009][ T3783] name failslab, interval 1, probability 0, space 0, times 0 [ 2373.232139][ T3783] CPU: 0 PID: 3783 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2373.242233][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2373.242377][ T3791] device team0 entered promiscuous mode [ 2373.252121][ T3783] Call Trace: [ 2373.252130][ T3783] [ 2373.252139][ T3783] dump_stack_lvl+0x151/0x1b7 [ 2373.252172][ T3783] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2373.273393][ T3783] dump_stack+0x15/0x17 [ 2373.277384][ T3783] should_fail+0x3c6/0x510 [ 2373.281639][ T3783] __should_failslab+0xa4/0xe0 [ 2373.286237][ T3783] ? vm_area_dup+0x26/0x230 [ 2373.290576][ T3783] should_failslab+0x9/0x20 [ 2373.294916][ T3783] slab_pre_alloc_hook+0x37/0xd0 [ 2373.299688][ T3783] ? vm_area_dup+0x26/0x230 [ 2373.304027][ T3783] kmem_cache_alloc+0x44/0x200 [ 2373.308632][ T3783] vm_area_dup+0x26/0x230 [ 2373.312855][ T3783] copy_mm+0x9a1/0x13e0 [ 2373.316786][ T3783] ? irqentry_exit+0x30/0x40 [ 2373.321217][ T3783] ? copy_signal+0x610/0x610 [ 2373.325636][ T3783] ? __init_rwsem+0xd6/0x1c0 [ 2373.330066][ T3783] ? copy_signal+0x4e3/0x610 [ 2373.335023][ T3783] copy_process+0x12bc/0x3260 [ 2373.339538][ T3783] ? timerqueue_add+0x250/0x270 [ 2373.344220][ T3783] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2373.349166][ T3783] ? enqueue_hrtimer+0xca/0x240 [ 2373.353851][ T3783] ? __hrtimer_run_queues+0x46b/0xad0 [ 2373.359062][ T3783] kernel_clone+0x21e/0x9e0 [ 2373.363404][ T3783] ? create_io_thread+0x1e0/0x1e0 [ 2373.368260][ T3783] ? clockevents_program_event+0x22f/0x300 [ 2373.373903][ T3783] __x64_sys_clone+0x23f/0x290 [ 2373.378501][ T3783] ? __do_sys_vfork+0x130/0x130 [ 2373.383193][ T3783] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2373.389005][ T3783] do_syscall_64+0x3d/0xb0 [ 2373.393253][ T3783] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2373.398898][ T3783] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2373.404623][ T3783] RIP: 0033:0x7f977f216ae9 [ 2373.408878][ T3783] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 10:41:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd287}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x3, 0x9, 0x0, 0xc2, 0x2010, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp, 0x88438, 0x1f, 0x0, 0x8, 0x5fe4983e, 0x1, 0x0, 0x0, 0xfff, 0x0, 0x926}, r0, 0x7, 0xffffffffffffffff, 0x8) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2373.428319][ T3783] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2373.436565][ T3783] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2373.444377][ T3783] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2373.452307][ T3783] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2373.460086][ T3783] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2373.467895][ T3783] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2373.475715][ T3783] 10:41:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, 0x1, 0x1, 0x1]}, 0x80) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x1]}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000180)=0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) write$cgroup_subtree(r7, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0xc020660b, &(0x7f0000000040)) 10:41:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x49ffffff}, 0x80) 10:41:12 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/47, 0x2f}], 0x1}, 0x40002040) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8ffffffffff18470000ffffffff0000000000000000183300000400000000000013000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x3, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, r4, 0x1], 0x0, 0x10, 0x3}, 0x90) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x4, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0xffffffff}, 0x90) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xfffffffe, 0x18}, 0xfffffffffffffd9e) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x4002b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x90) (async, rerun: 64) close(r7) (async, rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async, rerun: 32) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={0x0, 0x2, [@remote, @dev]}) (rerun: 32) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1fb, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x8}, 0x140, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) close(r2) 10:41:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x4}, 0x80) [ 2373.670479][ T3829] device team0 entered promiscuous mode 10:41:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 63) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4affffff}, 0x80) 10:41:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x3}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) 10:41:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000200), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/47, 0x2f}], 0x1}, 0x40002040) ioctl$TUNSETNOCSUM(r3, 0x8914, 0x20000000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8ffffffffff18470000ffffffff0000000000000000183300000400000000000013000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x3, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, r4, 0x1], 0x0, 0x10, 0x3}, 0x90) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x4, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0xffffffff}, 0x90) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xfffffffe, 0x18}, 0xfffffffffffffd9e) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x4002b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x90) close(r7) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={0x0, 0x2, [@remote, @dev]}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1fb, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x8}, 0x140, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) close(r2) 10:41:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x5}, 0x80) [ 2374.064625][ T3873] device team0 entered promiscuous mode 10:41:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4bffffff}, 0x80) [ 2374.170948][ T3880] FAULT_INJECTION: forcing a failure. [ 2374.170948][ T3880] name failslab, interval 1, probability 0, space 0, times 0 10:41:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x3}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async, rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (rerun: 64) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) [ 2374.270470][ T3880] CPU: 0 PID: 3880 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2374.280567][ T3880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2374.290471][ T3880] Call Trace: [ 2374.293572][ T3880] [ 2374.296354][ T3880] dump_stack_lvl+0x151/0x1b7 [ 2374.300864][ T3880] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2374.306336][ T3880] dump_stack+0x15/0x17 [ 2374.310322][ T3880] should_fail+0x3c6/0x510 [ 2374.314577][ T3880] __should_failslab+0xa4/0xe0 [ 2374.319178][ T3880] ? vm_area_dup+0x26/0x230 [ 2374.323514][ T3880] should_failslab+0x9/0x20 [ 2374.327856][ T3880] slab_pre_alloc_hook+0x37/0xd0 [ 2374.332628][ T3880] ? vm_area_dup+0x26/0x230 [ 2374.336968][ T3880] kmem_cache_alloc+0x44/0x200 [ 2374.341570][ T3880] vm_area_dup+0x26/0x230 [ 2374.345734][ T3880] copy_mm+0x9a1/0x13e0 [ 2374.349730][ T3880] ? copy_signal+0x610/0x610 [ 2374.354160][ T3880] ? __init_rwsem+0xd6/0x1c0 [ 2374.358581][ T3880] ? copy_signal+0x4e3/0x610 [ 2374.363005][ T3880] copy_process+0x12bc/0x3260 [ 2374.367523][ T3880] ? irqentry_exit+0x30/0x40 [ 2374.371951][ T3880] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2374.376891][ T3880] ? kernel_clone+0x165/0x9e0 [ 2374.381405][ T3880] kernel_clone+0x21e/0x9e0 [ 2374.385748][ T3880] ? create_io_thread+0x1e0/0x1e0 [ 2374.390605][ T3880] ? clockevents_program_event+0x22f/0x300 [ 2374.396333][ T3880] __x64_sys_clone+0x23f/0x290 [ 2374.400935][ T3880] ? __do_sys_vfork+0x130/0x130 [ 2374.405626][ T3880] do_syscall_64+0x3d/0xb0 [ 2374.409874][ T3880] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2374.415513][ T3880] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2374.421245][ T3880] RIP: 0033:0x7f977f216ae9 [ 2374.425496][ T3880] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2374.444938][ T3880] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2374.453182][ T3880] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2374.461288][ T3880] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2374.469066][ T3880] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2374.476877][ T3880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2374.484686][ T3880] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2374.492502][ T3880] 10:41:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd287}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x3, 0x9, 0x0, 0xc2, 0x2010, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp, 0x88438, 0x1f, 0x0, 0x8, 0x5fe4983e, 0x1, 0x0, 0x0, 0xfff, 0x0, 0x926}, r0, 0x7, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x6}, 0x80) 10:41:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4cffffff}, 0x80) 10:41:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4dffffff}, 0x80) 10:41:14 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000063110900f0ff35997b28380c5abb3458bdf8085d740000950000000000000000003cfa351125491dcfe409dec2d37ec8263c01fa313eb8cb09b04c5d8c4b7a9985d717ee08a8b66c7a4bcd92c419274e56357d86d437196cdea214c80e0f3b5cbf0663b0d1a152ffe9faed520f51f90e9b261d8135183da5d20c4a2491d621090b6488fd3e9d212a553ce2ab0d9e"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) 10:41:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:14 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000063110900f0ff35997b28380c5abb3458bdf8085d740000950000000000000000003cfa351125491dcfe409dec2d37ec8263c01fa313eb8cb09b04c5d8c4b7a9985d717ee08a8b66c7a4bcd92c419274e56357d86d437196cdea214c80e0f3b5cbf0663b0d1a152ffe9faed520f51f90e9b261d8135183da5d20c4a2491d621090b6488fd3e9d212a553ce2ab0d9e"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) 10:41:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4effffff}, 0x80) 10:41:14 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = syz_clone(0x80100400, &(0x7f0000000140)="c6e9e45db23d05c2c9aaf843608a2f44ec95e318ec955a97e979baed", 0x1c, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="d89475f23edd6fb74af2f44c6f2966bb100b4a8be29c7603beda7209a293b4af146e34869eb971c2ab7d984fbaede7b2fc6e2ad0ca92b8e9a44a244162b7807cdb8437ad050f46026b1b2e4f27fce4030bdd217eb79f24f9") r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r4, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r5, r3, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r13, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x0, &(0x7f0000000200), &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r10, 0x8, &(0x7f00000005c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x7, 0xed, 0x5}, 0x10, r11, r9, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x90) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r7, 0xffffffffffffffff, r8, r7, r12, r7, r7, r14, 0x1]}, 0x80) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x6, 0x1, 0x4, 0x20, 0x0, 0x8, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x2010, 0x3, 0xfffffc00, 0x4, 0x3ff, 0x0, 0x6, 0x0, 0x80000000, 0x0, 0xab6}, r2, 0x0, r14, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x80, 0x81, 0x5f, 0x0, 0x3, 0x80020, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xdf1c, 0x0, @perf_config_ext={0x4, 0x8000000000000000}, 0x80202, 0x9, 0x3, 0x3, 0x9, 0x5b0, 0x6, 0x0, 0xdb3, 0x0, 0x2}, r1, 0x3, r0, 0x3) 10:41:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x7}, 0x80) 10:41:14 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000063110900f0ff35997b28380c5abb3458bdf8085d740000950000000000000000003cfa351125491dcfe409dec2d37ec8263c01fa313eb8cb09b04c5d8c4b7a9985d717ee08a8b66c7a4bcd92c419274e56357d86d437196cdea214c80e0f3b5cbf0663b0d1a152ffe9faed520f51f90e9b261d8135183da5d20c4a2491d621090b6488fd3e9d212a553ce2ab0d9e"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) [ 2374.901911][ T3940] FAULT_INJECTION: forcing a failure. [ 2374.901911][ T3940] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2374.926770][ T3940] CPU: 1 PID: 3940 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2374.936861][ T3940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2374.946756][ T3940] Call Trace: [ 2374.949888][ T3940] [ 2374.952653][ T3940] dump_stack_lvl+0x151/0x1b7 [ 2374.957168][ T3940] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2374.962634][ T3940] ? kvm_sched_clock_read+0x18/0x40 [ 2374.967671][ T3940] ? sched_clock+0x9/0x10 [ 2374.971853][ T3940] ? sched_clock_cpu+0x18/0x3b0 [ 2374.976521][ T3940] ? _raw_spin_lock+0xa4/0x1b0 [ 2374.981129][ T3940] dump_stack+0x15/0x17 [ 2374.985132][ T3940] should_fail+0x3c6/0x510 [ 2374.989369][ T3940] should_fail_alloc_page+0x5a/0x80 [ 2374.994449][ T3940] prepare_alloc_pages+0x15c/0x700 [ 2374.999367][ T3940] ? __alloc_pages_bulk+0xe60/0xe60 [ 2375.004387][ T3940] __alloc_pages+0x138/0x5e0 [ 2375.008808][ T3940] ? prep_new_page+0x110/0x110 [ 2375.013411][ T3940] ? 0xffffffffa001a000 [ 2375.017399][ T3940] ? is_bpf_text_address+0x172/0x190 [ 2375.022523][ T3940] pte_alloc_one+0x73/0x1b0 [ 2375.026897][ T3940] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2375.031906][ T3940] __pte_alloc+0x86/0x350 [ 2375.036058][ T3940] ? irqentry_exit+0x30/0x40 [ 2375.040493][ T3940] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2375.046134][ T3940] ? free_pgtables+0x280/0x280 [ 2375.050732][ T3940] ? __kasan_check_write+0x14/0x20 [ 2375.055679][ T3940] copy_page_range+0x28a8/0x2f90 [ 2375.060462][ T3940] ? __kasan_slab_alloc+0xb1/0xe0 [ 2375.065316][ T3940] ? pfn_valid+0x1e0/0x1e0 [ 2375.069645][ T3940] ? __vma_link_rb+0x4c5/0x550 [ 2375.074258][ T3940] ? trace_raw_output_vm_unmapped_area+0x220/0x220 [ 2375.080586][ T3940] ? __rb_insert_augmented+0x14d/0x610 [ 2375.085886][ T3940] copy_mm+0xc7e/0x13e0 [ 2375.089877][ T3940] ? copy_signal+0x610/0x610 [ 2375.094307][ T3940] ? __init_rwsem+0xd6/0x1c0 [ 2375.098727][ T3940] ? copy_signal+0x4e3/0x610 [ 2375.103149][ T3940] copy_process+0x12bc/0x3260 [ 2375.107666][ T3940] ? timerqueue_add+0x250/0x270 [ 2375.112351][ T3940] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2375.117298][ T3940] ? enqueue_hrtimer+0xca/0x240 [ 2375.121986][ T3940] ? __hrtimer_run_queues+0x46b/0xad0 [ 2375.127194][ T3940] kernel_clone+0x21e/0x9e0 [ 2375.131532][ T3940] ? create_io_thread+0x1e0/0x1e0 [ 2375.136390][ T3940] ? clockevents_program_event+0x22f/0x300 [ 2375.142043][ T3940] __x64_sys_clone+0x23f/0x290 [ 2375.146724][ T3940] ? __do_sys_vfork+0x130/0x130 [ 2375.151418][ T3940] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2375.157224][ T3940] do_syscall_64+0x3d/0xb0 [ 2375.161471][ T3940] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2375.167116][ T3940] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2375.172843][ T3940] RIP: 0033:0x7f977f216ae9 [ 2375.177096][ T3940] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 10:41:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x3}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) 10:41:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4400c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x80440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000480)='devices.allow\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x1, 0x20, 0x5, 0x6, 0x0, 0x1, 0xcc00e, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x92a, 0x3, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x8, 0x7ff, 0x0, 0x4, 0x2, 0x7, 0x0, 0x80, 0x0, 0x100}, 0x0, 0x10, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x1ff) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000200)=0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000440)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000004c0)='memory.events\x00') close(r4) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80200, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000040)=0x281) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x34100) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 10:41:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4fffffff}, 0x80) 10:41:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x8}, 0x80) [ 2375.196885][ T3940] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2375.205130][ T3940] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2375.212935][ T3940] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2375.220747][ T3940] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2375.228560][ T3940] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2375.236457][ T3940] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2375.244447][ T3940] 10:41:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r6, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r5, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r6, r4, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r12, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1869f8ffffffffff1847000000000000000054b08f3e3f37743200000400000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x27, r11, 0x8, &(0x7f00000005c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r12, r10, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x90) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="95000000000000008500000060aa00000000000000000006"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r8, 0xffffffffffffffff, r9, r8, r13, r8, r8, r14, 0x1]}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x40082406, &(0x7f0000000000)='#-}&{\x00') ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) 10:41:14 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = gettid() (async) r2 = syz_clone(0x80100400, &(0x7f0000000140)="c6e9e45db23d05c2c9aaf843608a2f44ec95e318ec955a97e979baed", 0x1c, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="d89475f23edd6fb74af2f44c6f2966bb100b4a8be29c7603beda7209a293b4af146e34869eb971c2ab7d984fbaede7b2fc6e2ad0ca92b8e9a44a244162b7807cdb8437ad050f46026b1b2e4f27fce4030bdd217eb79f24f9") (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) (async, rerun: 64) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r4, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r5, r3, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 64) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 32) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (rerun: 32) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async, rerun: 32) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r13, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x0, &(0x7f0000000200), &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r10, 0x8, &(0x7f00000005c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x7, 0xed, 0x5}, 0x10, r11, r9, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x90) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r7, 0xffffffffffffffff, r8, r7, r12, r7, r7, r14, 0x1]}, 0x80) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x6, 0x1, 0x4, 0x20, 0x0, 0x8, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x2010, 0x3, 0xfffffc00, 0x4, 0x3ff, 0x0, 0x6, 0x0, 0x80000000, 0x0, 0xab6}, r2, 0x0, r14, 0x1) (rerun: 64) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x80, 0x81, 0x5f, 0x0, 0x3, 0x80020, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xdf1c, 0x0, @perf_config_ext={0x4, 0x8000000000000000}, 0x80202, 0x9, 0x3, 0x3, 0x9, 0x5b0, 0x6, 0x0, 0xdb3, 0x0, 0x2}, r1, 0x3, r0, 0x3) 10:41:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 65) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x50ffffff}, 0x80) 10:41:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4400c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x80440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4400c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x80440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000480)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000480)='devices.allow\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x5) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x1, 0x20, 0x5, 0x6, 0x0, 0x1, 0xcc00e, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x92a, 0x3, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x8, 0x7ff, 0x0, 0x4, 0x2, 0x7, 0x0, 0x80, 0x0, 0x100}, 0x0, 0x10, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x1ff) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000200)=0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000440)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000004c0)='memory.events\x00') close(r4) (async) close(r4) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80200, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000040)=0x281) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x34100) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 10:41:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r6, 0x4) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r5, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r6, r4, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r12, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1869f8ffffffffff1847000000000000000054b08f3e3f37743200000400000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x27, r11, 0x8, &(0x7f00000005c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r12, r10, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x90) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="95000000000000008500000060aa00000000000000000006"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r8, 0xffffffffffffffff, r9, r8, r13, r8, r8, r14, 0x1]}, 0x80) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x40082406, &(0x7f0000000000)='#-}&{\x00') (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) 10:41:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xa}, 0x80) 10:41:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x51ffffff}, 0x80) 10:41:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r6, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r5, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r6, r4, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r12, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1869f8ffffffffff1847000000000000000054b08f3e3f37743200000400000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x27, r11, 0x8, &(0x7f00000005c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r12, r10, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x90) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="95000000000000008500000060aa00000000000000000006"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r8, 0xffffffffffffffff, r9, r8, r13, r8, r8, r14, 0x1]}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x40082406, &(0x7f0000000000)='#-}&{\x00') ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) [ 2375.587489][ T3989] FAULT_INJECTION: forcing a failure. [ 2375.587489][ T3989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2375.693391][ T3989] CPU: 0 PID: 3989 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2375.703484][ T3989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2375.713379][ T3989] Call Trace: [ 2375.716499][ T3989] [ 2375.719280][ T3989] dump_stack_lvl+0x151/0x1b7 [ 2375.723801][ T3989] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2375.729788][ T3989] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2375.735246][ T3989] ? __wake_up_klogd+0xd5/0x110 [ 2375.739933][ T3989] ? dump_stack+0x9/0x17 [ 2375.744012][ T3989] dump_stack+0x15/0x17 [ 2375.748003][ T3989] should_fail+0x3c6/0x510 [ 2375.752261][ T3989] should_fail_alloc_page+0x5a/0x80 [ 2375.757293][ T3989] prepare_alloc_pages+0x15c/0x700 [ 2375.762236][ T3989] ? __alloc_pages+0x5e0/0x5e0 [ 2375.766839][ T3989] ? __alloc_pages_bulk+0xe60/0xe60 [ 2375.771883][ T3989] __alloc_pages+0x138/0x5e0 [ 2375.776386][ T3989] ? prep_new_page+0x110/0x110 [ 2375.781007][ T3989] ? 0xffffffffa001a000 [ 2375.784977][ T3989] ? is_bpf_text_address+0x172/0x190 [ 2375.790096][ T3989] pte_alloc_one+0x73/0x1b0 [ 2375.794434][ T3989] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2375.799471][ T3989] __pte_alloc+0x86/0x350 [ 2375.803637][ T3989] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2375.809278][ T3989] ? free_pgtables+0x280/0x280 [ 2375.813880][ T3989] ? copy_page_range+0x27d0/0x2f90 [ 2375.818823][ T3989] ? copy_page_range+0x29b2/0x2f90 [ 2375.823776][ T3989] copy_page_range+0x28a8/0x2f90 [ 2375.828550][ T3989] ? __kasan_slab_alloc+0xb1/0xe0 [ 2375.833413][ T3989] ? pfn_valid+0x1e0/0x1e0 [ 2375.837659][ T3989] ? irqentry_exit+0x30/0x40 [ 2375.842083][ T3989] ? sysvec_call_function_single+0xb0/0xb0 [ 2375.847737][ T3989] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2375.853719][ T3989] copy_mm+0xc7e/0x13e0 [ 2375.857722][ T3989] ? copy_signal+0x610/0x610 [ 2375.862133][ T3989] ? __init_rwsem+0xd6/0x1c0 [ 2375.866560][ T3989] ? copy_signal+0x4e3/0x610 [ 2375.870991][ T3989] copy_process+0x12bc/0x3260 [ 2375.875506][ T3989] ? proc_fail_nth_write+0x20b/0x290 [ 2375.880624][ T3989] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2375.885566][ T3989] ? irqentry_exit+0x30/0x40 [ 2375.890263][ T3989] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2375.895901][ T3989] kernel_clone+0x21e/0x9e0 [ 2375.900237][ T3989] ? create_io_thread+0x1e0/0x1e0 [ 2375.905098][ T3989] ? __mutex_lock_slowpath+0x10/0x10 [ 2375.910219][ T3989] __x64_sys_clone+0x23f/0x290 [ 2375.914816][ T3989] ? __do_sys_vfork+0x130/0x130 [ 2375.919504][ T3989] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2375.925318][ T3989] do_syscall_64+0x3d/0xb0 [ 2375.929569][ T3989] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2375.935212][ T3989] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2375.940940][ T3989] RIP: 0033:0x7f977f216ae9 [ 2375.945192][ T3989] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2375.964636][ T3989] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2375.972888][ T3989] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2375.980695][ T3989] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 10:41:15 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4400c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x80440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000480)='devices.allow\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x1, 0x20, 0x5, 0x6, 0x0, 0x1, 0xcc00e, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x92a, 0x3, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x8, 0x7ff, 0x0, 0x4, 0x2, 0x7, 0x0, 0x80, 0x0, 0x100}, 0x0, 0x10, 0xffffffffffffffff, 0x1) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x1ff) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000200)=0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000440)) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000004c0)='memory.events\x00') close(r4) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80200, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000040)=0x281) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x34100) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 10:41:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005000000000000000000004083b84b0bc04b5aa7"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) [ 2375.988500][ T3989] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2375.996311][ T3989] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2376.004123][ T3989] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2376.011938][ T3989] 10:41:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x52ffffff}, 0x80) 10:41:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc}, 0x80) 10:41:15 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = gettid() (rerun: 64) r2 = syz_clone(0x80100400, &(0x7f0000000140)="c6e9e45db23d05c2c9aaf843608a2f44ec95e318ec955a97e979baed", 0x1c, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="d89475f23edd6fb74af2f44c6f2966bb100b4a8be29c7603beda7209a293b4af146e34869eb971c2ab7d984fbaede7b2fc6e2ad0ca92b8e9a44a244162b7807cdb8437ad050f46026b1b2e4f27fce4030bdd217eb79f24f9") (async, rerun: 64) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (rerun: 64) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) (rerun: 32) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r4, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r5, r3, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 32) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 32) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4) (async, rerun: 32) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async, rerun: 32) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r13, 0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x0, &(0x7f0000000200), &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r10, 0x8, &(0x7f00000005c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x7, 0xed, 0x5}, 0x10, r11, r9, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x90) (rerun: 64) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r7, 0xffffffffffffffff, r8, r7, r12, r7, r7, r14, 0x1]}, 0x80) (async) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x6, 0x1, 0x4, 0x20, 0x0, 0x8, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x2010, 0x3, 0xfffffc00, 0x4, 0x3ff, 0x0, 0x6, 0x0, 0x80000000, 0x0, 0xab6}, r2, 0x0, r14, 0x1) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x80, 0x81, 0x5f, 0x0, 0x3, 0x80020, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xdf1c, 0x0, @perf_config_ext={0x4, 0x8000000000000000}, 0x80202, 0x9, 0x3, 0x3, 0x9, 0x5b0, 0x6, 0x0, 0xdb3, 0x0, 0x2}, r1, 0x3, r0, 0x3) (rerun: 64) 10:41:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 66) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:15 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x4}, 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="00ff0f00000004008f671000"], &(0x7f0000000740)='syzkaller\x00', 0x84, 0x22, &(0x7f0000000900)=""/34, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x9, 0x400, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0xd, 0x3}, {0x5, 0x3, 0x9}], 0x10, 0x101}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x0, 0xb0dd, 0xaf, &(0x7f00000002c0)=""/175, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x2, 0x67f7, 0x8}, 0x10, 0xffffffffffffffff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0x0, 0x9, 0x2, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x0, 0x8, 0x5, 0xa, 0x40}, @alu={0x4, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffff4, 0x4eb2aba18b9fbb6d}, @alu={0x4, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffffc, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @ldst={0x2, 0x1, 0x6, 0x3, 0x7, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x1f3, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x0, 0x4, 0x5, 0x7}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0x1000}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfb9a, 0x8, 0x7f, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r2, 0x5, 0x5, 0x2, 0x1}, 0x48) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000002c0)='memory.numa_stat\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r8}, 0x8) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000800)={'nr0\x00', 0x10}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@bloom_filter={0x1e, 0x0, 0x5460, 0xfffffffd, 0x80, r2, 0x1f, '\x00', 0x0, r2, 0x0, 0x4, 0x0, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_lsm={0x1d, 0xb, &(0x7f0000001680)=ANY=[@ANYBLOB="180000003a5400000000000008000000027102000400000018390000050000000000000020000000523a0200fcffffff18250000", @ANYRES32=r4, @ANYBLOB="0000000003000000180000000000000000000000ff0300009500000000000000"], &(0x7f0000001440)='GPL\x00', 0x80000000, 0x33, &(0x7f0000001480)=""/51, 0x41100, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0xb, 0x2}, 0x10, r3, 0x0, 0x0, &(0x7f00000015c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r8, r9, r2]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x6, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @alu={0x0, 0x0, 0x9, 0x4, 0x3, 0x30, 0xffffffffffffffee}, @generic={0x5, 0xa, 0x1, 0x401, 0x1f}, @map_fd], &(0x7f00000000c0)='GPL\x00', 0x1, 0xec, &(0x7f0000000580)=""/236, 0x41100, 0x11, '\x00', 0x0, 0x18, r1, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x9, 0xc0000000}, 0x10, r3, r0}, 0x80) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000003d710a480000004b64ffec850000007d0000008500000007000000611894"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x88, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xf4e7}, 0x2080, 0x0, 0x0, 0x6}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x2, 0x80, 0x4c, 0x0, 0x7, 0x1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x480, 0xffffffff, 0x3f, 0x9, 0xfffffffffffff723, 0x1, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 10:41:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005000000000000000000004083b84b0bc04b5aa7"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x53ffffff}, 0x80) 10:41:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x10}, 0x80) [ 2376.423758][ T4078] FAULT_INJECTION: forcing a failure. [ 2376.423758][ T4078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2376.460315][ T4078] CPU: 1 PID: 4078 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2376.470413][ T4078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2376.480306][ T4078] Call Trace: [ 2376.483429][ T4078] [ 2376.486201][ T4078] dump_stack_lvl+0x151/0x1b7 [ 2376.490719][ T4078] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2376.496193][ T4078] ? ___ratelimit+0xb2/0x5a0 [ 2376.500612][ T4078] dump_stack+0x15/0x17 [ 2376.504602][ T4078] should_fail+0x3c6/0x510 [ 2376.508859][ T4078] should_fail_alloc_page+0x5a/0x80 [ 2376.513887][ T4078] prepare_alloc_pages+0x15c/0x700 [ 2376.518847][ T4078] ? __alloc_pages_bulk+0xe60/0xe60 [ 2376.523911][ T4078] __alloc_pages+0x138/0x5e0 [ 2376.528297][ T4078] ? prep_new_page+0x110/0x110 [ 2376.532898][ T4078] ? 0xffffffffa001a000 [ 2376.536888][ T4078] ? is_bpf_text_address+0x172/0x190 [ 2376.542005][ T4078] pte_alloc_one+0x73/0x1b0 [ 2376.546346][ T4078] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2376.551387][ T4078] __pte_alloc+0x86/0x350 [ 2376.555545][ T4078] ? irqentry_exit+0x30/0x40 [ 2376.559971][ T4078] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2376.565624][ T4078] ? free_pgtables+0x280/0x280 [ 2376.570212][ T4078] ? copy_page_range+0x27d0/0x2f90 [ 2376.575165][ T4078] copy_page_range+0x28a8/0x2f90 [ 2376.579935][ T4078] ? __kasan_slab_alloc+0xb1/0xe0 [ 2376.584798][ T4078] ? pfn_valid+0x1e0/0x1e0 [ 2376.589148][ T4078] ? __vma_link_rb+0x4c5/0x550 [ 2376.593740][ T4078] ? trace_raw_output_vm_unmapped_area+0x220/0x220 [ 2376.600079][ T4078] ? __rb_insert_augmented+0x14d/0x610 [ 2376.605376][ T4078] copy_mm+0xc7e/0x13e0 [ 2376.609364][ T4078] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2376.615356][ T4078] ? copy_signal+0x610/0x610 [ 2376.619780][ T4078] ? __init_rwsem+0xd6/0x1c0 [ 2376.624206][ T4078] ? copy_signal+0x4e3/0x610 [ 2376.628631][ T4078] copy_process+0x12bc/0x3260 [ 2376.633158][ T4078] ? timerqueue_add+0x250/0x270 [ 2376.637848][ T4078] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2376.642777][ T4078] ? enqueue_hrtimer+0xca/0x240 [ 2376.647465][ T4078] ? __hrtimer_run_queues+0x46b/0xad0 [ 2376.652674][ T4078] kernel_clone+0x21e/0x9e0 [ 2376.657014][ T4078] ? create_io_thread+0x1e0/0x1e0 [ 2376.661903][ T4078] ? clockevents_program_event+0x22f/0x300 [ 2376.667517][ T4078] __x64_sys_clone+0x23f/0x290 [ 2376.672115][ T4078] ? __do_sys_vfork+0x130/0x130 [ 2376.676801][ T4078] ? debug_smp_processor_id+0x17/0x20 [ 2376.682007][ T4078] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2376.687911][ T4078] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2376.693378][ T4078] do_syscall_64+0x3d/0xb0 [ 2376.697632][ T4078] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2376.703444][ T4078] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2376.709175][ T4078] RIP: 0033:0x7f977f216ae9 [ 2376.713546][ T4078] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2376.732985][ T4078] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2376.741229][ T4078] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2376.749044][ T4078] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2376.756852][ T4078] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2376.764668][ T4078] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 10:41:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x54ffffff}, 0x80) 10:41:16 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x4}, 0x10}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="00ff0f00000004008f671000"], &(0x7f0000000740)='syzkaller\x00', 0x84, 0x22, &(0x7f0000000900)=""/34, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x9, 0x400, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0xd, 0x3}, {0x5, 0x3, 0x9}], 0x10, 0x101}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="22b79a2895d23e8e3e45c9fcdad1e655e04b6690d0cf4b7e0864da79dcb02629e9a92d71501ca5cd03861de6a8e269f5549c4bc2d1b8f759ead1bd64cc208abde1a71937cca9f4b5a70972d4433440141ccd11a5da0da96c5a35fa2055ff5e9b0134b22e3f42ab13c33cfc6ebc9db002ac4dfc835c3f9eea27680d13fc5c67828447fa0bf64b6876b05026e2d8d5cc6a9016470d0840e957d80d1d89aac1937ef9141fde25613d381d2cc90396abf27cd43167cfcdcf56d6f59d61597cc991097478825adb14c5e232f19512b841649f0e2bb243dd97d544f0b3e5ddd24541db4f89fe1b1d5dd78aae3e0ec4b545944ce193c3d9bd3287025dae4f7377e7e32d2bd8fe815304da971ef217000049"], 0x0, 0xb0dd, 0xaf, &(0x7f00000002c0)=""/175, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x2, 0x67f7, 0x8}, 0x10, 0xffffffffffffffff}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0x0, 0x9, 0x2, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x0, 0x8, 0x5, 0xa, 0x40}, @alu={0x4, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffff4, 0x4eb2aba18b9fbb6d}, @alu={0x4, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffffc, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @ldst={0x2, 0x1, 0x6, 0x3, 0x7, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x1f3, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x0, 0x4, 0x5, 0x7}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0x1000}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfb9a, 0x8, 0x7f, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r2, 0x5, 0x5, 0x2, 0x1}, 0x48) (async) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f00000002c0)='memory.numa_stat\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r8}, 0x8) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000800)={'nr0\x00', 0x10}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@bloom_filter={0x1e, 0x0, 0x5460, 0xfffffffd, 0x80, r2, 0x1f, '\x00', 0x0, r2, 0x0, 0x4, 0x0, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_lsm={0x1d, 0xb, &(0x7f0000001680)=ANY=[@ANYBLOB="180000003a5400000000000008000000027102000400000018390000050000000000000020000000523a0200fcffffff18250000", @ANYRES32=r4, @ANYBLOB="0000000003000000180000000000000000000000ff0300009500000000000000"], &(0x7f0000001440)='GPL\x00', 0x80000000, 0x33, &(0x7f0000001480)=""/51, 0x41100, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0xb, 0x2}, 0x10, r3, 0x0, 0x0, &(0x7f00000015c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r8, r9, r2]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x6, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @alu={0x0, 0x0, 0x9, 0x4, 0x3, 0x30, 0xffffffffffffffee}, @generic={0x5, 0xa, 0x1, 0x401, 0x1f}, @map_fd], &(0x7f00000000c0)='GPL\x00', 0x1, 0xec, &(0x7f0000000580)=""/236, 0x41100, 0x11, '\x00', 0x0, 0x18, r1, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x9, 0xc0000000}, 0x10, r3, r0}, 0x80) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000003d710a480000004b64ffec850000007d0000008500000007000000611894"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x88, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xf4e7}, 0x2080, 0x0, 0x0, 0x6}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x2, 0x80, 0x4c, 0x0, 0x7, 0x1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x480, 0xffffffff, 0x3f, 0x9, 0xfffffffffffff723, 0x1, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) [ 2376.772477][ T4078] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2376.780290][ T4078] 10:41:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005000000000000000000004083b84b0bc04b5aa7"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x11}, 0x80) 10:41:16 executing program 5: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000050000000000009500000000000000a6c950952b7ef23a9d8df8e9cd059b0d493d4f33d8d07de535108756affbb32788309077ed5e87fac1e6f3f4eac8a6e54900e104428697f91cbe65e313f0cc372ec1827f978553fb75732238504d4e258520f8689a536468ec17acf5273e48b68e3a7a6b078d9983ea65e0347cc2507718fd2dd02b528635613e55dc29d1ccbfe64e73ba47456cfa93e7dbe011f6b1411dddf2e8"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0xfffffec9, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x1, 0xed}, 0x10, 0xffffffffffffffff}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="0000850000002b00"/24], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1]}, 0x80) r5 = openat$cgroup_ro(r0, &(0x7f00000007c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={0xffffffffffffffff, 0x3ff}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={0x0, 0x3d, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x7, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xd, 0x1, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x2, 0x4, 0x8, 0xc, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0xb, 0x6, 0xffffffffffffffff}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000880)=""/4096, 0x1f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x1f, 0xc6d, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001900)=[r5, r6, r7, r0], &(0x7f0000001940)=[{0x2, 0x1, 0x3, 0xa}, {0x1, 0x1, 0x1, 0xe}, {0x5, 0x1, 0xd, 0x6}], 0x10, 0x40}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x20, 0x6, 0x1, 0x5, 0x0, 0x3, 0x119, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fff, 0x3}, 0x110, 0x6d7, 0x2c, 0x8, 0x8, 0x400, 0x1, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r8, 0x8) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a40)=r2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x8, 0x7d4e, 0x400, 0x0, 0x240b, r7, 0x40, '\x00', 0x0, r10, 0x5, 0x0, 0x4}, 0x48) r11 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xd1, 0xb9, 0x80, 0x2, 0x0, 0x0, 0x44, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x2fb5, 0x6}, 0x14000, 0x2, 0x2, 0x1, 0xfffffffffffff6af, 0x4, 0x3ff, 0x0, 0x5e5, 0x0, 0x7}, 0xffffffffffffffff, 0xd, r9, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x2, 0x5, 0x7, 0x5, 0x0, 0x8, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfa8, 0x1, @perf_config_ext={0x7, 0x6}, 0x6080, 0xdbaa, 0x4, 0x1, 0x400, 0x7, 0x800, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r11, 0xa) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0xc020660b, &(0x7f0000000040)) 10:41:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x55ffffff}, 0x80) 10:41:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x83308480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:16 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x4}, 0x10}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="00ff0f00000004008f671000"], &(0x7f0000000740)='syzkaller\x00', 0x84, 0x22, &(0x7f0000000900)=""/34, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x9, 0x400, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0xd, 0x3}, {0x5, 0x3, 0x9}], 0x10, 0x101}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x0, 0xb0dd, 0xaf, &(0x7f00000002c0)=""/175, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x2, 0x67f7, 0x8}, 0x10, 0xffffffffffffffff}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0x0, 0x9, 0x2, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x0, 0x8, 0x5, 0xa, 0x40}, @alu={0x4, 0x0, 0x0, 0x6, 0x2, 0xfffffffffffffff4, 0x4eb2aba18b9fbb6d}, @alu={0x4, 0x1, 0x0, 0x9, 0xb, 0xfffffffffffffffc, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @ldst={0x2, 0x1, 0x6, 0x3, 0x7, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x1f3, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x0, 0x4, 0x5, 0x7}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0x1000}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfb9a, 0x8, 0x7f, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r2, 0x5, 0x5, 0x2, 0x1}, 0x48) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000002c0)='memory.numa_stat\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r8}, 0x8) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000800)={'nr0\x00', 0x10}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@bloom_filter={0x1e, 0x0, 0x5460, 0xfffffffd, 0x80, r2, 0x1f, '\x00', 0x0, r2, 0x0, 0x4, 0x0, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_lsm={0x1d, 0xb, &(0x7f0000001680)=ANY=[@ANYBLOB="180000003a5400000000000008000000027102000400000018390000050000000000000020000000523a0200fcffffff18250000", @ANYRES32=r4, @ANYBLOB="0000000003000000180000000000000000000000ff0300009500000000000000"], &(0x7f0000001440)='GPL\x00', 0x80000000, 0x33, &(0x7f0000001480)=""/51, 0x41100, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0xb, 0x2}, 0x10, r3, 0x0, 0x0, &(0x7f00000015c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r8, r9, r2]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x6, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @alu={0x0, 0x0, 0x9, 0x4, 0x3, 0x30, 0xffffffffffffffee}, @generic={0x5, 0xa, 0x1, 0x401, 0x1f}, @map_fd], &(0x7f00000000c0)='GPL\x00', 0x1, 0xec, &(0x7f0000000580)=""/236, 0x41100, 0x11, '\x00', 0x0, 0x18, r1, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x9, 0xc0000000}, 0x10, r3, r0}, 0x80) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000003d710a480000004b64ffec850000007d0000008500000007000000611894"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x88, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xf4e7}, 0x2080, 0x0, 0x0, 0x6}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x2, 0x80, 0x4c, 0x0, 0x7, 0x1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x480, 0xffffffff, 0x3f, 0x9, 0xfffffffffffff723, 0x1, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 10:41:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x14}, 0x80) 10:41:16 executing program 5: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000050000000000009500000000000000a6c950952b7ef23a9d8df8e9cd059b0d493d4f33d8d07de535108756affbb32788309077ed5e87fac1e6f3f4eac8a6e54900e104428697f91cbe65e313f0cc372ec1827f978553fb75732238504d4e258520f8689a536468ec17acf5273e48b68e3a7a6b078d9983ea65e0347cc2507718fd2dd02b528635613e55dc29d1ccbfe64e73ba47456cfa93e7dbe011f6b1411dddf2e8"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0xfffffec9, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x1, 0xed}, 0x10, 0xffffffffffffffff}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000050000000000009500000000000000a6c950952b7ef23a9d8df8e9cd059b0d493d4f33d8d07de535108756affbb32788309077ed5e87fac1e6f3f4eac8a6e54900e104428697f91cbe65e313f0cc372ec1827f978553fb75732238504d4e258520f8689a536468ec17acf5273e48b68e3a7a6b078d9983ea65e0347cc2507718fd2dd02b528635613e55dc29d1ccbfe64e73ba47456cfa93e7dbe011f6b1411dddf2e8"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0xfffffec9, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x1, 0xed}, 0x10, 0xffffffffffffffff}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="0000850000002b00"/24], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="0000850000002b00"/24], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1]}, 0x80) r5 = openat$cgroup_ro(r0, &(0x7f00000007c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={0xffffffffffffffff, 0x3ff}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={0xffffffffffffffff, 0x3ff}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={0x0, 0x3d, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x7, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xd, 0x1, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x2, 0x4, 0x8, 0xc, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0xb, 0x6, 0xffffffffffffffff}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000880)=""/4096, 0x1f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x1f, 0xc6d, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001900)=[r5, r6, r7, r0], &(0x7f0000001940)=[{0x2, 0x1, 0x3, 0xa}, {0x1, 0x1, 0x1, 0xe}, {0x5, 0x1, 0xd, 0x6}], 0x10, 0x40}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x20, 0x6, 0x1, 0x5, 0x0, 0x3, 0x119, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fff, 0x3}, 0x110, 0x6d7, 0x2c, 0x8, 0x8, 0x400, 0x1, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r8, 0x8) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a40)=r2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x8, 0x7d4e, 0x400, 0x0, 0x240b, r7, 0x40, '\x00', 0x0, r10, 0x5, 0x0, 0x4}, 0x48) r11 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xd1, 0xb9, 0x80, 0x2, 0x0, 0x0, 0x44, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x2fb5, 0x6}, 0x14000, 0x2, 0x2, 0x1, 0xfffffffffffff6af, 0x4, 0x3ff, 0x0, 0x5e5, 0x0, 0x7}, 0xffffffffffffffff, 0xd, r9, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x2, 0x5, 0x7, 0x5, 0x0, 0x8, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfa8, 0x1, @perf_config_ext={0x7, 0x6}, 0x6080, 0xdbaa, 0x4, 0x1, 0x400, 0x7, 0x800, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r11, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0xc020660b, &(0x7f0000000040)) 10:41:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x56ffffff}, 0x80) 10:41:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 67) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:16 executing program 5: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000050000000000009500000000000000a6c950952b7ef23a9d8df8e9cd059b0d493d4f33d8d07de535108756affbb32788309077ed5e87fac1e6f3f4eac8a6e54900e104428697f91cbe65e313f0cc372ec1827f978553fb75732238504d4e258520f8689a536468ec17acf5273e48b68e3a7a6b078d9983ea65e0347cc2507718fd2dd02b528635613e55dc29d1ccbfe64e73ba47456cfa93e7dbe011f6b1411dddf2e8"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0xfffffec9, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x1, 0xed}, 0x10, 0xffffffffffffffff}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r1, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="0000850000002b00"/24], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1]}, 0x80) (async) r5 = openat$cgroup_ro(r0, &(0x7f00000007c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={0xffffffffffffffff, 0x3ff}, 0xc) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={0x0, 0x3d, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x7, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xd, 0x1, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x2, 0x4, 0x8, 0xc, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0xb, 0x6, 0xffffffffffffffff}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000880)=""/4096, 0x1f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x1f, 0xc6d, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001900)=[r5, r6, r7, r0], &(0x7f0000001940)=[{0x2, 0x1, 0x3, 0xa}, {0x1, 0x1, 0x1, 0xe}, {0x5, 0x1, 0xd, 0x6}], 0x10, 0x40}, 0x90) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x20, 0x6, 0x1, 0x5, 0x0, 0x3, 0x119, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fff, 0x3}, 0x110, 0x6d7, 0x2c, 0x8, 0x8, 0x400, 0x1, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r8, 0x8) (async) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a40)=r2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x8, 0x7d4e, 0x400, 0x0, 0x240b, r7, 0x40, '\x00', 0x0, r10, 0x5, 0x0, 0x4}, 0x48) (async) r11 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xd1, 0xb9, 0x80, 0x2, 0x0, 0x0, 0x44, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x2fb5, 0x6}, 0x14000, 0x2, 0x2, 0x1, 0xfffffffffffff6af, 0x4, 0x3ff, 0x0, 0x5e5, 0x0, 0x7}, 0xffffffffffffffff, 0xd, r9, 0x3) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x2, 0x5, 0x7, 0x5, 0x0, 0x8, 0x2000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfa8, 0x1, @perf_config_ext={0x7, 0x6}, 0x6080, 0xdbaa, 0x4, 0x1, 0x400, 0x7, 0x800, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r11, 0xa) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0xc020660b, &(0x7f0000000040)) 10:41:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57ffffff}, 0x80) 10:41:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) r4 = getpid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r4, 0x6, r5, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='block_bio_complete\x00', r0}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x80, 0x1f, 0x3f, 0x0, 0x2caa, 0x80004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x57580000, 0x2, @perf_config_ext={0x2, 0x3a}, 0x40, 0x1, 0x7, 0x7, 0x84, 0x100, 0x0, 0x0, 0x4, 0x0, 0x8000000000000000}, r4, 0xa, r6, 0xb) 10:41:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x58ffffff}, 0x80) [ 2377.593819][ T4164] FAULT_INJECTION: forcing a failure. [ 2377.593819][ T4164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:41:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x18}, 0x80) [ 2377.655395][ T4164] CPU: 0 PID: 4164 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2377.665486][ T4164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2377.675383][ T4164] Call Trace: [ 2377.678507][ T4164] [ 2377.681281][ T4164] dump_stack_lvl+0x151/0x1b7 [ 2377.685793][ T4164] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2377.691262][ T4164] ? kvm_sched_clock_read+0x18/0x40 [ 2377.696293][ T4164] ? sched_clock+0x9/0x10 [ 2377.700460][ T4164] ? sched_clock_cpu+0x18/0x3b0 [ 2377.705145][ T4164] ? _raw_spin_lock+0xa4/0x1b0 [ 2377.709748][ T4164] dump_stack+0x15/0x17 [ 2377.713743][ T4164] should_fail+0x3c6/0x510 [ 2377.717993][ T4164] should_fail_alloc_page+0x5a/0x80 [ 2377.723026][ T4164] prepare_alloc_pages+0x15c/0x700 [ 2377.727976][ T4164] ? __alloc_pages_bulk+0xe60/0xe60 [ 2377.733007][ T4164] __alloc_pages+0x138/0x5e0 [ 2377.737437][ T4164] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2377.743076][ T4164] ? prep_new_page+0x110/0x110 [ 2377.747675][ T4164] ? 0xffffffffa001a000 [ 2377.751668][ T4164] ? is_bpf_text_address+0x172/0x190 [ 2377.756789][ T4164] pte_alloc_one+0x73/0x1b0 [ 2377.761129][ T4164] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2377.766162][ T4164] __pte_alloc+0x86/0x350 [ 2377.770326][ T4164] ? irqentry_exit+0x30/0x40 [ 2377.774755][ T4164] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2377.780396][ T4164] ? free_pgtables+0x280/0x280 [ 2377.784997][ T4164] ? __kasan_check_write+0x14/0x20 [ 2377.789949][ T4164] copy_page_range+0x28a8/0x2f90 [ 2377.794716][ T4164] ? __kasan_slab_alloc+0xb1/0xe0 [ 2377.799673][ T4164] ? pfn_valid+0x1e0/0x1e0 [ 2377.803914][ T4164] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2377.809472][ T4164] ? __rb_insert_augmented+0x5de/0x610 [ 2377.814780][ T4164] copy_mm+0xc7e/0x13e0 [ 2377.818754][ T4164] ? irqentry_exit+0x30/0x40 [ 2377.823201][ T4164] ? copy_signal+0x610/0x610 [ 2377.827613][ T4164] ? __init_rwsem+0xd6/0x1c0 [ 2377.832035][ T4164] ? copy_signal+0x4e3/0x610 [ 2377.836465][ T4164] copy_process+0x12bc/0x3260 [ 2377.840982][ T4164] ? timerqueue_add+0x250/0x270 [ 2377.845659][ T4164] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2377.850603][ T4164] ? enqueue_hrtimer+0xca/0x240 [ 2377.855290][ T4164] ? __hrtimer_run_queues+0x46b/0xad0 [ 2377.860502][ T4164] kernel_clone+0x21e/0x9e0 [ 2377.864842][ T4164] ? create_io_thread+0x1e0/0x1e0 [ 2377.869699][ T4164] ? clockevents_program_event+0x22f/0x300 [ 2377.875343][ T4164] __x64_sys_clone+0x23f/0x290 [ 2377.879942][ T4164] ? __do_sys_vfork+0x130/0x130 [ 2377.884631][ T4164] ? syscall_enter_from_user_mode+0x1d/0x1b0 [ 2377.890445][ T4164] do_syscall_64+0x3d/0xb0 [ 2377.894693][ T4164] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2377.900333][ T4164] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2377.906062][ T4164] RIP: 0033:0x7f977f216ae9 [ 2377.910317][ T4164] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2377.929759][ T4164] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2377.938005][ T4164] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2377.945812][ T4164] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 10:41:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x30}, 0x80) [ 2377.953624][ T4164] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2377.961436][ T4164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2377.969245][ T4164] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2377.977074][ T4164] 10:41:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x83308480, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:17 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x58}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x1]}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x2, 0x3, 0x3f, 0xc00, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0xd}, 0x48) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r13, 0x1, 0x1, 0x1]}, 0x80) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r16, 0x4) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r15, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r16, r14, 0x0, &(0x7f0000000680)=[r17, 0x1, 0x1, 0x1]}, 0x80) r18 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r12, 0xffffffffffffffff, r13, r12, r17, r12, r12, r18, 0x1]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x58bd, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, @ldst={0x2, 0x0, 0x6, 0x4, 0x9, 0xfffffffffffffefc, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000480)='syzkaller\x00', 0x20, 0xf, &(0x7f00000004c0)=""/15, 0x40f00, 0x40, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0xfff, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r7, 0x1, r12, 0x1], &(0x7f0000000680)=[{0x1, 0x1, 0x7, 0x256aebacdf42ff50}, {0x2, 0x2, 0xb}, {0x0, 0x1, 0xd, 0x9}], 0x10, 0x7}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x4, &(0x7f0000000080)=@raw=[@generic={0x2, 0xa, 0x4, 0x4, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2246767a}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x67, &(0x7f0000000200)=""/103, 0x41000, 0x34a14b74f923309a, '\x00', 0x0, 0x7, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x4, 0xfffffff8, 0x6}, 0x10, 0xffffffffffffffff, r0, 0xa, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x10}, {0x4, 0x1, 0x5, 0x7}, {0x5, 0x3, 0xf, 0x5}, {0x5, 0x2, 0x6, 0x6}, {0x2, 0x1, 0xf}, {0x1, 0x2, 0x9, 0x7}, {0x3, 0x4, 0xd, 0xb}, {0x0, 0x4, 0x0, 0x32cc9b1ff846c55f}, {0x5, 0x5, 0x1, 0x4}, {0x3, 0x2, 0x7}], 0x10, 0xff}, 0x90) 10:41:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x59ffffff}, 0x80) 10:41:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async, rerun: 64) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (rerun: 64) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) r4 = getpid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r4, 0x6, r5, 0x0) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='block_bio_complete\x00', r0}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x80, 0x1f, 0x3f, 0x0, 0x2caa, 0x80004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x57580000, 0x2, @perf_config_ext={0x2, 0x3a}, 0x40, 0x1, 0x7, 0x7, 0x84, 0x100, 0x0, 0x0, 0x4, 0x0, 0x8000000000000000}, r4, 0xa, r6, 0xb) 10:41:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x60}, 0x80) 10:41:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 68) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5affffff}, 0x80) 10:41:17 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x58}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x1]}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x2, 0x3, 0x3f, 0xc00, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0xd}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x2, 0x3, 0x3f, 0xc00, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0xd}, 0x48) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r13, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r16, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r15, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r16, r14, 0x0, &(0x7f0000000680)=[r17, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r15, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r16, r14, 0x0, &(0x7f0000000680)=[r17, 0x1, 0x1, 0x1]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r18 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r12, 0xffffffffffffffff, r13, r12, r17, r12, r12, r18, 0x1]}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x58bd, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, @ldst={0x2, 0x0, 0x6, 0x4, 0x9, 0xfffffffffffffefc, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000480)='syzkaller\x00', 0x20, 0xf, &(0x7f00000004c0)=""/15, 0x40f00, 0x40, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0xfff, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r7, 0x1, r12, 0x1], &(0x7f0000000680)=[{0x1, 0x1, 0x7, 0x256aebacdf42ff50}, {0x2, 0x2, 0xb}, {0x0, 0x1, 0xd, 0x9}], 0x10, 0x7}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x4, &(0x7f0000000080)=@raw=[@generic={0x2, 0xa, 0x4, 0x4, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2246767a}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x67, &(0x7f0000000200)=""/103, 0x41000, 0x34a14b74f923309a, '\x00', 0x0, 0x7, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x4, 0xfffffff8, 0x6}, 0x10, 0xffffffffffffffff, r0, 0xa, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x10}, {0x4, 0x1, 0x5, 0x7}, {0x5, 0x3, 0xf, 0x5}, {0x5, 0x2, 0x6, 0x6}, {0x2, 0x1, 0xf}, {0x1, 0x2, 0x9, 0x7}, {0x3, 0x4, 0xd, 0xb}, {0x0, 0x4, 0x0, 0x32cc9b1ff846c55f}, {0x5, 0x5, 0x1, 0x4}, {0x3, 0x2, 0x7}], 0x10, 0xff}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x4, &(0x7f0000000080)=@raw=[@generic={0x2, 0xa, 0x4, 0x4, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2246767a}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x67, &(0x7f0000000200)=""/103, 0x41000, 0x34a14b74f923309a, '\x00', 0x0, 0x7, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x4, 0xfffffff8, 0x6}, 0x10, 0xffffffffffffffff, r0, 0xa, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x10}, {0x4, 0x1, 0x5, 0x7}, {0x5, 0x3, 0xf, 0x5}, {0x5, 0x2, 0x6, 0x6}, {0x2, 0x1, 0xf}, {0x1, 0x2, 0x9, 0x7}, {0x3, 0x4, 0xd, 0xb}, {0x0, 0x4, 0x0, 0x32cc9b1ff846c55f}, {0x5, 0x5, 0x1, 0x4}, {0x3, 0x2, 0x7}], 0x10, 0xff}, 0x90) [ 2378.661929][ T4212] FAULT_INJECTION: forcing a failure. [ 2378.661929][ T4212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:41:18 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5bffffff}, 0x80) 10:41:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x70}, 0x80) 10:41:18 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x58}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 64) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 64) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x1]}, 0x80) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x2, 0x3, 0x3f, 0xc00, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0xd}, 0x48) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r13, 0x1, 0x1, 0x1]}, 0x80) (async) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r16, 0x4) (async, rerun: 32) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r15, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r16, r14, 0x0, &(0x7f0000000680)=[r17, 0x1, 0x1, 0x1]}, 0x80) (async) r18 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r12, 0xffffffffffffffff, r13, r12, r17, r12, r12, r18, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x58bd, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, @ldst={0x2, 0x0, 0x6, 0x4, 0x9, 0xfffffffffffffefc, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000480)='syzkaller\x00', 0x20, 0xf, &(0x7f00000004c0)=""/15, 0x40f00, 0x40, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0xfff, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r7, 0x1, r12, 0x1], &(0x7f0000000680)=[{0x1, 0x1, 0x7, 0x256aebacdf42ff50}, {0x2, 0x2, 0xb}, {0x0, 0x1, 0xd, 0x9}], 0x10, 0x7}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x4, &(0x7f0000000080)=@raw=[@generic={0x2, 0xa, 0x4, 0x4, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2246767a}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x67, &(0x7f0000000200)=""/103, 0x41000, 0x34a14b74f923309a, '\x00', 0x0, 0x7, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x4, 0xfffffff8, 0x6}, 0x10, 0xffffffffffffffff, r0, 0xa, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x10}, {0x4, 0x1, 0x5, 0x7}, {0x5, 0x3, 0xf, 0x5}, {0x5, 0x2, 0x6, 0x6}, {0x2, 0x1, 0xf}, {0x1, 0x2, 0x9, 0x7}, {0x3, 0x4, 0xd, 0xb}, {0x0, 0x4, 0x0, 0x32cc9b1ff846c55f}, {0x5, 0x5, 0x1, 0x4}, {0x3, 0x2, 0x7}], 0x10, 0xff}, 0x90) [ 2378.747413][ T4212] CPU: 1 PID: 4212 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2378.757512][ T4212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2378.767402][ T4212] Call Trace: [ 2378.770570][ T4212] [ 2378.773323][ T4212] dump_stack_lvl+0x151/0x1b7 [ 2378.777812][ T4212] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2378.783284][ T4212] dump_stack+0x15/0x17 [ 2378.787274][ T4212] should_fail+0x3c6/0x510 [ 2378.791533][ T4212] should_fail_alloc_page+0x5a/0x80 [ 2378.796561][ T4212] prepare_alloc_pages+0x15c/0x700 [ 2378.801507][ T4212] ? __alloc_pages_bulk+0xe60/0xe60 [ 2378.806540][ T4212] ? native_set_ldt+0x360/0x360 [ 2378.811231][ T4212] __alloc_pages+0x138/0x5e0 [ 2378.815656][ T4212] ? _raw_spin_unlock+0x4d/0x70 [ 2378.820345][ T4212] ? prep_new_page+0x110/0x110 [ 2378.824946][ T4212] pte_alloc_one+0x73/0x1b0 [ 2378.829279][ T4212] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2378.834325][ T4212] __pte_alloc+0x86/0x350 [ 2378.838480][ T4212] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2378.844131][ T4212] ? free_pgtables+0x280/0x280 [ 2378.848721][ T4212] ? copy_page_range+0xe6d/0x2f90 [ 2378.853582][ T4212] copy_page_range+0x28a8/0x2f90 [ 2378.858357][ T4212] ? __kasan_slab_alloc+0xb1/0xe0 [ 2378.863228][ T4212] ? pfn_valid+0x1e0/0x1e0 [ 2378.867470][ T4212] ? irqentry_exit+0x30/0x40 [ 2378.871906][ T4212] ? sysvec_call_function_single+0xb0/0xb0 [ 2378.877537][ T4212] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 2378.883095][ T4212] ? __rb_insert_augmented+0x5de/0x610 [ 2378.888407][ T4212] copy_mm+0xc7e/0x13e0 [ 2378.892407][ T4212] ? copy_signal+0x610/0x610 [ 2378.896801][ T4212] ? __init_rwsem+0xd6/0x1c0 [ 2378.901231][ T4212] ? copy_signal+0x4e3/0x610 [ 2378.905656][ T4212] copy_process+0x12bc/0x3260 [ 2378.910172][ T4212] ? timerqueue_add+0x250/0x270 [ 2378.914886][ T4212] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2378.919806][ T4212] ? enqueue_hrtimer+0xca/0x240 [ 2378.924489][ T4212] ? __hrtimer_run_queues+0x46b/0xad0 [ 2378.929699][ T4212] kernel_clone+0x21e/0x9e0 [ 2378.934035][ T4212] ? create_io_thread+0x1e0/0x1e0 [ 2378.938896][ T4212] ? clockevents_program_event+0x22f/0x300 [ 2378.944556][ T4212] __x64_sys_clone+0x23f/0x290 [ 2378.949139][ T4212] ? __do_sys_vfork+0x130/0x130 [ 2378.953829][ T4212] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2378.959641][ T4212] do_syscall_64+0x3d/0xb0 [ 2378.963892][ T4212] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2378.969618][ T4212] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2378.975349][ T4212] RIP: 0033:0x7f977f216ae9 [ 2378.979603][ T4212] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2378.999045][ T4212] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2379.007289][ T4212] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2379.015097][ T4212] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2379.022909][ T4212] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2379.030721][ T4212] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2379.038541][ T4212] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2379.046698][ T4212] 10:41:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0xfe2, 0x80000001, 0x0, 0x0, 0x3, 0x6, 0x0, 0x6, 0x0, 0xa39}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r4, 0x6, r5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x108, 0x5}, 0x0, 0x202}, r4, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0xf5, 0x1, 0xff, 0x0, 0x0, 0x44c, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x84400, 0x9, 0xfff, 0x8, 0x0, 0x1, 0x7fff, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xe, r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0xd, &(0x7f0000000800)=[{&(0x7f0000000840)="dac7483746748f452d99125b6a12699d5bec720a22c08a8c279f15b557cb0e3315bc0608b46225e890782c3dd50919abd8415d03876735eb7610493589c03606a9b0b98efb5965f3ca9590e8e67be329099e7b09c702f6a253f0098a861ccf24393094d6324334a3e9bce94c803bc3080f48551c43937a52f3bf635289041fb9b36ae2", 0x83}, {&(0x7f0000000380)="8c24797a06523ff46644bca0870b2a4b334e9772621207be85f3e72195d1429b2bd4762738ce8375bc987b7eaa816e13418286edefc984c9c9d79e99e02ccfa0cc7a813e2c1b9019", 0x48}, {&(0x7f0000000700)="826b9547ccc04960db334ccc7f73651eaf0e2993cd068c395ff8a60819c1b02c1e38765b8f462c6d6c2904d9e97d6084e701d50705b5cddf89662bdf0c35700e1cce814172d7adcbcf65ceb00263f819", 0x50}, {&(0x7f0000000780)}], 0x4}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0xaf, 0x20, 0x3, 0x1, 0x0, 0x8000000000000000, 0x19804, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xff, 0x2}, 0x10180, 0xffffffff00000001, 0x0, 0xb, 0x7, 0x3, 0x9, 0x0, 0x6, 0x0, 0x81}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000180)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) 10:41:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x83308480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5cffffff}, 0x80) 10:41:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 69) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x89}, 0x80) 10:41:19 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) r4 = getpid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r4, 0x6, r5, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r4, 0x6, r5, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='block_bio_complete\x00', r0}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x80, 0x1f, 0x3f, 0x0, 0x2caa, 0x80004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x57580000, 0x2, @perf_config_ext={0x2, 0x3a}, 0x40, 0x1, 0x7, 0x7, 0x84, 0x100, 0x0, 0x0, 0x4, 0x0, 0x8000000000000000}, r4, 0xa, r6, 0xb) 10:41:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0xfe2, 0x80000001, 0x0, 0x0, 0x3, 0x6, 0x0, 0x6, 0x0, 0xa39}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r4, 0x6, r5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x108, 0x5}, 0x0, 0x202}, r4, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0xf5, 0x1, 0xff, 0x0, 0x0, 0x44c, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x84400, 0x9, 0xfff, 0x8, 0x0, 0x1, 0x7fff, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xe, r1, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) (async) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0xd, &(0x7f0000000800)=[{&(0x7f0000000840)="dac7483746748f452d99125b6a12699d5bec720a22c08a8c279f15b557cb0e3315bc0608b46225e890782c3dd50919abd8415d03876735eb7610493589c03606a9b0b98efb5965f3ca9590e8e67be329099e7b09c702f6a253f0098a861ccf24393094d6324334a3e9bce94c803bc3080f48551c43937a52f3bf635289041fb9b36ae2", 0x83}, {&(0x7f0000000380)="8c24797a06523ff46644bca0870b2a4b334e9772621207be85f3e72195d1429b2bd4762738ce8375bc987b7eaa816e13418286edefc984c9c9d79e99e02ccfa0cc7a813e2c1b9019", 0x48}, {&(0x7f0000000700)="826b9547ccc04960db334ccc7f73651eaf0e2993cd068c395ff8a60819c1b02c1e38765b8f462c6d6c2904d9e97d6084e701d50705b5cddf89662bdf0c35700e1cce814172d7adcbcf65ceb00263f819", 0x50}, {&(0x7f0000000780)}], 0x4}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0xaf, 0x20, 0x3, 0x1, 0x0, 0x8000000000000000, 0x19804, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xff, 0x2}, 0x10180, 0xffffffff00000001, 0x0, 0xb, 0x7, 0x3, 0x9, 0x0, 0x6, 0x0, 0x81}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xa) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000180)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) [ 2380.051258][ T4294] FAULT_INJECTION: forcing a failure. [ 2380.051258][ T4294] name failslab, interval 1, probability 0, space 0, times 0 10:41:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5dffffff}, 0x80) [ 2380.124107][ T4294] CPU: 1 PID: 4294 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2380.134205][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2380.144093][ T4294] Call Trace: [ 2380.147216][ T4294] [ 2380.149993][ T4294] dump_stack_lvl+0x151/0x1b7 [ 2380.154509][ T4294] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2380.159979][ T4294] dump_stack+0x15/0x17 [ 2380.163982][ T4294] should_fail+0x3c6/0x510 [ 2380.168224][ T4294] __should_failslab+0xa4/0xe0 [ 2380.172820][ T4294] ? vm_area_dup+0x26/0x230 [ 2380.177249][ T4294] should_failslab+0x9/0x20 [ 2380.181719][ T4294] slab_pre_alloc_hook+0x37/0xd0 [ 2380.186486][ T4294] ? vm_area_dup+0x26/0x230 [ 2380.190826][ T4294] kmem_cache_alloc+0x44/0x200 [ 2380.195427][ T4294] vm_area_dup+0x26/0x230 [ 2380.199594][ T4294] copy_mm+0x9a1/0x13e0 [ 2380.203586][ T4294] ? copy_signal+0x610/0x610 [ 2380.208183][ T4294] ? __init_rwsem+0xd6/0x1c0 [ 2380.212613][ T4294] ? copy_signal+0x4e3/0x610 [ 2380.217130][ T4294] copy_process+0x12bc/0x3260 [ 2380.221640][ T4294] ? timerqueue_add+0x250/0x270 [ 2380.226322][ T4294] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2380.231269][ T4294] ? enqueue_hrtimer+0xca/0x240 [ 2380.235954][ T4294] ? __hrtimer_run_queues+0x46b/0xad0 [ 2380.241165][ T4294] kernel_clone+0x21e/0x9e0 [ 2380.245505][ T4294] ? create_io_thread+0x1e0/0x1e0 [ 2380.250363][ T4294] ? clockevents_program_event+0x22f/0x300 [ 2380.256028][ T4294] __x64_sys_clone+0x23f/0x290 [ 2380.260604][ T4294] ? __do_sys_vfork+0x130/0x130 [ 2380.265296][ T4294] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2380.271107][ T4294] do_syscall_64+0x3d/0xb0 [ 2380.275359][ T4294] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2380.281001][ T4294] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2380.286731][ T4294] RIP: 0033:0x7f977f216ae9 [ 2380.290993][ T4294] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2380.310424][ T4294] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2380.318668][ T4294] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2380.326487][ T4294] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2380.334292][ T4294] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2380.342100][ T4294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2380.349912][ T4294] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2380.357731][ T4294] 10:41:19 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0xd5, 0x3, 0x7, 0x0, 0xfff, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x631, 0x0, @perf_config_ext={0x7, 0x40}, 0x20, 0x1, 0x4, 0x9, 0x7, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1000}, 0x0, 0x0, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0xfe2, 0x80000001, 0x0, 0x0, 0x3, 0x6, 0x0, 0x6, 0x0, 0xa39}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = getpid() (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x32600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r4, 0x6, r5, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x108, 0x5}, 0x0, 0x202}, r4, 0xb, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0xf5, 0x1, 0xff, 0x0, 0x0, 0x44c, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x84400, 0x9, 0xfff, 0x8, 0x0, 0x1, 0x7fff, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xe, r1, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) (async) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0xd, &(0x7f0000000800)=[{&(0x7f0000000840)="dac7483746748f452d99125b6a12699d5bec720a22c08a8c279f15b557cb0e3315bc0608b46225e890782c3dd50919abd8415d03876735eb7610493589c03606a9b0b98efb5965f3ca9590e8e67be329099e7b09c702f6a253f0098a861ccf24393094d6324334a3e9bce94c803bc3080f48551c43937a52f3bf635289041fb9b36ae2", 0x83}, {&(0x7f0000000380)="8c24797a06523ff46644bca0870b2a4b334e9772621207be85f3e72195d1429b2bd4762738ce8375bc987b7eaa816e13418286edefc984c9c9d79e99e02ccfa0cc7a813e2c1b9019", 0x48}, {&(0x7f0000000700)="826b9547ccc04960db334ccc7f73651eaf0e2993cd068c395ff8a60819c1b02c1e38765b8f462c6d6c2904d9e97d6084e701d50705b5cddf89662bdf0c35700e1cce814172d7adcbcf65ceb00263f819", 0x50}, {&(0x7f0000000780)}], 0x4}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0xaf, 0x20, 0x3, 0x1, 0x0, 0x8000000000000000, 0x19804, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xff, 0x2}, 0x10180, 0xffffffff00000001, 0x0, 0xb, 0x7, 0x3, 0x9, 0x0, 0x6, 0x0, 0x81}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xa) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000180)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) 10:41:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x130}, 0x80) 10:41:19 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x1ff}, 0x0, 0x0, 0x0, 0x7, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000c5650000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000032c0)={0x5, 0x80, 0x40, 0x3, 0x1, 0x9, 0x0, 0xffffffff, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x3, 0x3f}, 0x80000, 0x8, 0x10001, 0x9, 0x0, 0x0, 0xfffa, 0x0, 0x87d2, 0x0, 0x2}, r3, 0x4, r2, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x0, 0x7, 0x1, 0x0, 0x0, 0x20000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, r4, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}) r6 = gettid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x57, 0x80, 0xfc, 0x4, 0x0, 0x4, 0x1809, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe1, 0x4, @perf_config_ext={0x0, 0x517}, 0x800, 0x8, 0x5, 0x2, 0x1, 0xfffffffe, 0x0, 0x0, 0x5, 0x0, 0x8}, r6, 0x10, r0, 0x0) 10:41:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5effffff}, 0x80) 10:41:20 executing program 2: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r10, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0x2e, 0xfd, 0x80, 0x0, 0x6, 0x1265, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x3, @perf_config_ext={0x3, 0x1}, 0x10000, 0x3, 0x5, 0x3, 0x3, 0x7, 0x2c, 0x0, 0x3, 0x0, 0x49}, r12, 0x7, 0xffffffffffffffff, 0x2) r13 = getpid() perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xde6, 0x1f3}, 0x831, 0x1, 0x4, 0x8, 0xf5f4, 0xfff, 0x8, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r13, r11, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) 10:41:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 70) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0xd5, 0x3, 0x7, 0x0, 0xfff, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x631, 0x0, @perf_config_ext={0x7, 0x40}, 0x20, 0x1, 0x4, 0x9, 0x7, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1000}, 0x0, 0x0, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0xd5, 0x3, 0x7, 0x0, 0xfff, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x631, 0x0, @perf_config_ext={0x7, 0x40}, 0x20, 0x1, 0x4, 0x9, 0x7, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1000}, 0x0, 0x0, r0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) (async) 10:41:20 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x1ff}, 0x0, 0x0, 0x0, 0x7, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000c5650000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000032c0)={0x5, 0x80, 0x40, 0x3, 0x1, 0x9, 0x0, 0xffffffff, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x3, 0x3f}, 0x80000, 0x8, 0x10001, 0x9, 0x0, 0x0, 0xfffa, 0x0, 0x87d2, 0x0, 0x2}, r3, 0x4, r2, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x0, 0x7, 0x1, 0x0, 0x0, 0x20000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, r4, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}) r6 = gettid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x57, 0x80, 0xfc, 0x4, 0x0, 0x4, 0x1809, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe1, 0x4, @perf_config_ext={0x0, 0x517}, 0x800, 0x8, 0x5, 0x2, 0x1, 0xfffffffe, 0x0, 0x0, 0x5, 0x0, 0x8}, r6, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x1ff}, 0x0, 0x0, 0x0, 0x7, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000c5650000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000032c0)={0x5, 0x80, 0x40, 0x3, 0x1, 0x9, 0x0, 0xffffffff, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x3, 0x3f}, 0x80000, 0x8, 0x10001, 0x9, 0x0, 0x0, 0xfffa, 0x0, 0x87d2, 0x0, 0x2}, r3, 0x4, r2, 0x9) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x0, 0x7, 0x1, 0x0, 0x0, 0x20000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, r4, 0x8) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}) (async) gettid() (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x57, 0x80, 0xfc, 0x4, 0x0, 0x4, 0x1809, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe1, 0x4, @perf_config_ext={0x0, 0x517}, 0x800, 0x8, 0x5, 0x2, 0x1, 0xfffffffe, 0x0, 0x0, 0x5, 0x0, 0x8}, r6, 0x10, r0, 0x0) (async) 10:41:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x138}, 0x80) 10:41:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5fffffff}, 0x80) [ 2381.002160][ T4358] FAULT_INJECTION: forcing a failure. [ 2381.002160][ T4358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 10:41:20 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x1ff}, 0x0, 0x0, 0x0, 0x7, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000c5650000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) r3 = syz_clone(0x75848400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000032c0)={0x5, 0x80, 0x40, 0x3, 0x1, 0x9, 0x0, 0xffffffff, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x3, 0x3f}, 0x80000, 0x8, 0x10001, 0x9, 0x0, 0x0, 0xfffa, 0x0, 0x87d2, 0x0, 0x2}, r3, 0x4, r2, 0x9) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0x248800) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x0, 0x7, 0x1, 0x0, 0x0, 0x20000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, r4, 0x8) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}) (async) r6 = gettid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x57, 0x80, 0xfc, 0x4, 0x0, 0x4, 0x1809, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe1, 0x4, @perf_config_ext={0x0, 0x517}, 0x800, 0x8, 0x5, 0x2, 0x1, 0xfffffffe, 0x0, 0x0, 0x5, 0x0, 0x8}, r6, 0x10, r0, 0x0) [ 2381.101029][ T4358] CPU: 1 PID: 4358 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2381.111125][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2381.121019][ T4358] Call Trace: [ 2381.124138][ T4358] [ 2381.126914][ T4358] dump_stack_lvl+0x151/0x1b7 [ 2381.131427][ T4358] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2381.136896][ T4358] dump_stack+0x15/0x17 [ 2381.140886][ T4358] should_fail+0x3c6/0x510 [ 2381.145146][ T4358] should_fail_alloc_page+0x5a/0x80 [ 2381.150175][ T4358] prepare_alloc_pages+0x15c/0x700 [ 2381.155121][ T4358] ? __alloc_pages+0x5e0/0x5e0 [ 2381.159722][ T4358] ? __alloc_pages_bulk+0xe60/0xe60 [ 2381.164754][ T4358] __alloc_pages+0x138/0x5e0 [ 2381.169181][ T4358] ? prep_new_page+0x110/0x110 [ 2381.173785][ T4358] ? 0xffffffffa0002ef8 [ 2381.177771][ T4358] ? is_bpf_text_address+0x172/0x190 [ 2381.182895][ T4358] pte_alloc_one+0x73/0x1b0 [ 2381.187231][ T4358] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2381.192267][ T4358] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2381.198257][ T4358] __pte_alloc+0x86/0x350 [ 2381.202467][ T4358] ? kasan_check_range+0x1bc/0x2a0 [ 2381.207374][ T4358] ? free_pgtables+0x280/0x280 [ 2381.211974][ T4358] ? __kasan_check_write+0x14/0x20 [ 2381.216919][ T4358] copy_page_range+0x28a8/0x2f90 [ 2381.221692][ T4358] ? __kasan_slab_alloc+0xb1/0xe0 [ 2381.226555][ T4358] ? pfn_valid+0x1e0/0x1e0 [ 2381.230803][ T4358] ? syscall_exit_to_user_mode+0x130/0x160 [ 2381.236569][ T4358] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2381.242209][ T4358] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2381.247765][ T4358] ? __rb_insert_augmented+0x5de/0x610 [ 2381.253065][ T4358] copy_mm+0xc7e/0x13e0 [ 2381.257048][ T4358] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2381.263045][ T4358] ? copy_signal+0x610/0x610 [ 2381.267466][ T4358] ? __init_rwsem+0xd6/0x1c0 [ 2381.271895][ T4358] ? copy_signal+0x4e3/0x610 [ 2381.276324][ T4358] copy_process+0x12bc/0x3260 [ 2381.280835][ T4358] ? timerqueue_add+0x250/0x270 [ 2381.285517][ T4358] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2381.290553][ T4358] ? enqueue_hrtimer+0xca/0x240 [ 2381.295245][ T4358] ? __hrtimer_run_queues+0x46b/0xad0 [ 2381.300446][ T4358] kernel_clone+0x21e/0x9e0 [ 2381.304792][ T4358] ? create_io_thread+0x1e0/0x1e0 [ 2381.309735][ T4358] ? clockevents_program_event+0x22f/0x300 [ 2381.315374][ T4358] __x64_sys_clone+0x23f/0x290 [ 2381.319977][ T4358] ? __do_sys_vfork+0x130/0x130 [ 2381.324662][ T4358] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2381.330477][ T4358] do_syscall_64+0x3d/0xb0 [ 2381.334726][ T4358] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2381.340373][ T4358] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2381.346100][ T4358] RIP: 0033:0x7f977f216ae9 [ 2381.350350][ T4358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2381.369795][ T4358] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2381.378037][ T4358] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2381.385850][ T4358] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2381.393779][ T4358] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 10:41:20 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0xd5, 0x3, 0x7, 0x0, 0xfff, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x631, 0x0, @perf_config_ext={0x7, 0x40}, 0x20, 0x1, 0x4, 0x9, 0x7, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1000}, 0x0, 0x0, r0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) [ 2381.401610][ T4358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2381.409398][ T4358] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2381.417218][ T4358] 10:41:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x60000000}, 0x80) 10:41:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x13a}, 0x80) 10:41:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0x800}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000217b0000000400000b68002a65ccb8904280269780873320273550fede52926e3cfcb4fb755cb6a6349f284f6b2a75174f38199e15ff6ce275cf21136b94b27f7df20cf9c9a01e431572afb21b91fef09ba06b6e5f1e02"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r2}, 0x18) r3 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x9, 0x43, 0x0, 0x0, 0x0, 0x88420, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x629e, 0x1, @perf_config_ext={0xa6, 0xfffffffffffffff8}, 0x2004, 0x7, 0x9, 0x1, 0x982b, 0x3, 0x6, 0x0, 0x4, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xf, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f0000000040)) 10:41:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x60ffffff}, 0x80) 10:41:21 executing program 2: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 64) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) (rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) (async) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r10, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0x2e, 0xfd, 0x80, 0x0, 0x6, 0x1265, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x3, @perf_config_ext={0x3, 0x1}, 0x10000, 0x3, 0x5, 0x3, 0x3, 0x7, 0x2c, 0x0, 0x3, 0x0, 0x49}, r12, 0x7, 0xffffffffffffffff, 0x2) (async, rerun: 32) r13 = getpid() (async) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xde6, 0x1f3}, 0x831, 0x1, 0x4, 0x8, 0xf5f4, 0xfff, 0x8, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r13, r11, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) 10:41:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0x800}) (async, rerun: 32) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000217b0000000400000b68002a65ccb8904280269780873320273550fede52926e3cfcb4fb755cb6a6349f284f6b2a75174f38199e15ff6ce275cf21136b94b27f7df20cf9c9a01e431572afb21b91fef09ba06b6e5f1e02"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r2}, 0x18) (async) r3 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x9, 0x43, 0x0, 0x0, 0x0, 0x88420, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x629e, 0x1, @perf_config_ext={0xa6, 0xfffffffffffffff8}, 0x2004, 0x7, 0x9, 0x1, 0x982b, 0x3, 0x6, 0x0, 0x4, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xf, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000040)) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f0000000040)) 10:41:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 71) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:21 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0xd5, 0x3, 0x7, 0x0, 0xfff, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x631, 0x0, @perf_config_ext={0x7, 0x40}, 0x20, 0x1, 0x4, 0x9, 0x7, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1000}, 0x0, 0x0, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x61ffffff}, 0x80) 10:41:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f2}, 0x80) [ 2381.923439][ T4438] FAULT_INJECTION: forcing a failure. [ 2381.923439][ T4438] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2381.951139][ T4438] CPU: 0 PID: 4438 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2381.961236][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2381.971216][ T4438] Call Trace: [ 2381.974336][ T4438] [ 2381.977124][ T4438] dump_stack_lvl+0x151/0x1b7 [ 2381.981625][ T4438] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2381.987103][ T4438] dump_stack+0x15/0x17 [ 2381.991085][ T4438] should_fail+0x3c6/0x510 [ 2381.995341][ T4438] should_fail_alloc_page+0x5a/0x80 [ 2382.000378][ T4438] prepare_alloc_pages+0x15c/0x700 [ 2382.005323][ T4438] ? __alloc_pages_bulk+0xe60/0xe60 [ 2382.010350][ T4438] ? native_set_ldt+0x360/0x360 [ 2382.015040][ T4438] __alloc_pages+0x138/0x5e0 [ 2382.019466][ T4438] ? _raw_spin_unlock+0x4d/0x70 [ 2382.024149][ T4438] ? prep_new_page+0x110/0x110 [ 2382.028846][ T4438] pte_alloc_one+0x73/0x1b0 [ 2382.033174][ T4438] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2382.038212][ T4438] __pte_alloc+0x86/0x350 [ 2382.042388][ T4438] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2382.048364][ T4438] ? free_pgtables+0x280/0x280 [ 2382.052966][ T4438] ? __kasan_check_write+0x14/0x20 [ 2382.057913][ T4438] copy_page_range+0x28a8/0x2f90 [ 2382.062687][ T4438] ? __kasan_slab_alloc+0xb1/0xe0 [ 2382.067555][ T4438] ? pfn_valid+0x1e0/0x1e0 [ 2382.071800][ T4438] ? __vma_link_rb+0x4c5/0x550 [ 2382.076398][ T4438] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2382.081954][ T4438] ? __rb_insert_augmented+0x5de/0x610 [ 2382.087247][ T4438] copy_mm+0xc7e/0x13e0 [ 2382.091239][ T4438] ? irqentry_exit+0x30/0x40 [ 2382.095754][ T4438] ? copy_signal+0x610/0x610 [ 2382.100180][ T4438] ? __init_rwsem+0xd6/0x1c0 [ 2382.104606][ T4438] ? copy_signal+0x4e3/0x610 [ 2382.109029][ T4438] copy_process+0x12bc/0x3260 [ 2382.113550][ T4438] ? irqentry_exit+0x30/0x40 [ 2382.117971][ T4438] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2382.123009][ T4438] ? kernel_clone+0x7a/0x9e0 [ 2382.127606][ T4438] kernel_clone+0x21e/0x9e0 [ 2382.131943][ T4438] ? create_io_thread+0x1e0/0x1e0 [ 2382.136810][ T4438] ? clockevents_program_event+0x22f/0x300 [ 2382.142449][ T4438] __x64_sys_clone+0x23f/0x290 [ 2382.147045][ T4438] ? __do_sys_vfork+0x130/0x130 [ 2382.151735][ T4438] ? debug_smp_processor_id+0x17/0x20 [ 2382.156942][ T4438] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2382.162852][ T4438] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2382.168316][ T4438] do_syscall_64+0x3d/0xb0 [ 2382.172562][ T4438] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2382.178302][ T4438] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2382.184033][ T4438] RIP: 0033:0x7f977f216ae9 [ 2382.188275][ T4438] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2382.207717][ T4438] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2382.215959][ T4438] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 10:41:21 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6ec}, [@alu={0x4, 0x0, 0x0, 0xb, 0x2, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x81, 0x13, &(0x7f0000000280)=""/19, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0x3, 0x3f}, 0x10}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0x0, 0x3f, 0x7, 0x1, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x50bd, 0x6}, 0x2883, 0x1, 0x3f, 0x9, 0xfffffffffffff723, 0x1, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x20000000, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 10:41:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x62ffffff}, 0x80) 10:41:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0x800}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000217b0000000400000b68002a65ccb8904280269780873320273550fede52926e3cfcb4fb755cb6a6349f284f6b2a75174f38199e15ff6ce275cf21136b94b27f7df20cf9c9a01e431572afb21b91fef09ba06b6e5f1e02"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r2}, 0x18) r3 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x9, 0x43, 0x0, 0x0, 0x0, 0x88420, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x629e, 0x1, @perf_config_ext={0xa6, 0xfffffffffffffff8}, 0x2004, 0x7, 0x9, 0x1, 0x982b, 0x3, 0x6, 0x0, 0x4, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xf, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0x800}) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000217b0000000400000b68002a65ccb8904280269780873320273550fede52926e3cfcb4fb755cb6a6349f284f6b2a75174f38199e15ff6ce275cf21136b94b27f7df20cf9c9a01e431572afb21b91fef09ba06b6e5f1e02"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r2}, 0x18) (async) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x9, 0x43, 0x0, 0x0, 0x0, 0x88420, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x629e, 0x1, @perf_config_ext={0xa6, 0xfffffffffffffff8}, 0x2004, 0x7, 0x9, 0x1, 0x982b, 0x3, 0x6, 0x0, 0x4, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xf, r0, 0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000040)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f0000000040)) (async) [ 2382.223767][ T4438] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2382.231580][ T4438] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2382.239392][ T4438] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2382.247206][ T4438] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2382.255076][ T4438] 10:41:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f8}, 0x80) 10:41:21 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:21 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6ec}, [@alu={0x4, 0x0, 0x0, 0xb, 0x2, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x81, 0x13, &(0x7f0000000280)=""/19, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0x3, 0x3f}, 0x10}, 0x80) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0x0, 0x3f, 0x7, 0x1, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x50bd, 0x6}, 0x2883, 0x1, 0x3f, 0x9, 0xfffffffffffff723, 0x1, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x20000000, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) 10:41:22 executing program 2: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r10, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0x2e, 0xfd, 0x80, 0x0, 0x6, 0x1265, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x3, @perf_config_ext={0x3, 0x1}, 0x10000, 0x3, 0x5, 0x3, 0x3, 0x7, 0x2c, 0x0, 0x3, 0x0, 0x49}, r12, 0x7, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3f, 0x2e, 0xfd, 0x80, 0x0, 0x6, 0x1265, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x3, @perf_config_ext={0x3, 0x1}, 0x10000, 0x3, 0x5, 0x3, 0x3, 0x7, 0x2c, 0x0, 0x3, 0x0, 0x49}, r12, 0x7, 0xffffffffffffffff, 0x2) r13 = getpid() perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xde6, 0x1f3}, 0x831, 0x1, 0x4, 0x8, 0xf5f4, 0xfff, 0x8, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) (async) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xde6, 0x1f3}, 0x831, 0x1, 0x4, 0x8, 0xf5f4, 0xfff, 0x8, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r13, r11, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) 10:41:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x63ffffff}, 0x80) 10:41:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 72) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x2ba}, 0x80) 10:41:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6ec}, [@alu={0x4, 0x0, 0x0, 0xb, 0x2, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x81, 0x13, &(0x7f0000000280)=""/19, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0x3, 0x3f}, 0x10}, 0x80) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000007c0)={0x3, 0x80, 0x0, 0x3f, 0x7, 0x1, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x50bd, 0x6}, 0x2883, 0x1, 0x3f, 0x9, 0xfffffffffffff723, 0x1, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x20000000, 0xffffffffffffffff, 0x6) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_clone(0xc0920400, 0x0, 0x1000000, 0x0, 0x0, 0x0) [ 2383.037702][ T4509] FAULT_INJECTION: forcing a failure. [ 2383.037702][ T4509] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.089468][ T4509] CPU: 0 PID: 4509 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2383.099563][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2383.109470][ T4509] Call Trace: [ 2383.112575][ T4509] [ 2383.115353][ T4509] dump_stack_lvl+0x151/0x1b7 [ 2383.119880][ T4509] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2383.125342][ T4509] dump_stack+0x15/0x17 [ 2383.129345][ T4509] should_fail+0x3c6/0x510 [ 2383.133584][ T4509] __should_failslab+0xa4/0xe0 [ 2383.138179][ T4509] ? vm_area_dup+0x26/0x230 [ 2383.142524][ T4509] should_failslab+0x9/0x20 [ 2383.146857][ T4509] slab_pre_alloc_hook+0x37/0xd0 [ 2383.151636][ T4509] ? vm_area_dup+0x26/0x230 [ 2383.155982][ T4509] kmem_cache_alloc+0x44/0x200 [ 2383.160576][ T4509] vm_area_dup+0x26/0x230 [ 2383.164744][ T4509] copy_mm+0x9a1/0x13e0 [ 2383.168736][ T4509] ? copy_signal+0x610/0x610 [ 2383.173157][ T4509] ? __init_rwsem+0xd6/0x1c0 [ 2383.177588][ T4509] ? copy_signal+0x4e3/0x610 [ 2383.182014][ T4509] copy_process+0x12bc/0x3260 [ 2383.186533][ T4509] ? timerqueue_add+0x250/0x270 [ 2383.191222][ T4509] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2383.196159][ T4509] ? enqueue_hrtimer+0xca/0x240 [ 2383.200947][ T4509] ? __hrtimer_run_queues+0x46b/0xad0 [ 2383.206152][ T4509] kernel_clone+0x21e/0x9e0 [ 2383.210490][ T4509] ? create_io_thread+0x1e0/0x1e0 [ 2383.215357][ T4509] ? clockevents_program_event+0x22f/0x300 [ 2383.220993][ T4509] __x64_sys_clone+0x23f/0x290 [ 2383.225592][ T4509] ? __do_sys_vfork+0x130/0x130 [ 2383.230279][ T4509] ? debug_smp_processor_id+0x17/0x20 [ 2383.235483][ T4509] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2383.241472][ T4509] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2383.246942][ T4509] do_syscall_64+0x3d/0xb0 [ 2383.251191][ T4509] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2383.256838][ T4509] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2383.262649][ T4509] RIP: 0033:0x7f977f216ae9 [ 2383.266911][ T4509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2383.286347][ T4509] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2383.294597][ T4509] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2383.302403][ T4509] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2383.310213][ T4509] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2383.318022][ T4509] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2383.325843][ T4509] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2383.333650][ T4509] 10:41:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x64ffffff}, 0x80) 10:41:22 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async, rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async, rerun: 64) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 73) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x65ffffff}, 0x80) 10:41:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x300}, 0x80) 10:41:22 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x66ffffff}, 0x80) [ 2383.689031][ T4549] FAULT_INJECTION: forcing a failure. [ 2383.689031][ T4549] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.776804][ T4549] CPU: 0 PID: 4549 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2383.786900][ T4549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2383.796794][ T4549] Call Trace: [ 2383.799922][ T4549] [ 2383.802692][ T4549] dump_stack_lvl+0x151/0x1b7 [ 2383.807213][ T4549] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2383.812682][ T4549] dump_stack+0x15/0x17 [ 2383.816669][ T4549] should_fail+0x3c6/0x510 [ 2383.820920][ T4549] __should_failslab+0xa4/0xe0 [ 2383.825522][ T4549] ? anon_vma_clone+0x9a/0x500 [ 2383.830125][ T4549] should_failslab+0x9/0x20 [ 2383.834460][ T4549] slab_pre_alloc_hook+0x37/0xd0 [ 2383.839237][ T4549] ? anon_vma_clone+0x9a/0x500 [ 2383.843834][ T4549] kmem_cache_alloc+0x44/0x200 [ 2383.848435][ T4549] anon_vma_clone+0x9a/0x500 [ 2383.852866][ T4549] anon_vma_fork+0x91/0x4e0 [ 2383.857203][ T4549] ? anon_vma_name+0x43/0x70 [ 2383.861628][ T4549] ? vm_area_dup+0x17a/0x230 [ 2383.866056][ T4549] copy_mm+0xa3a/0x13e0 [ 2383.870051][ T4549] ? copy_signal+0x610/0x610 [ 2383.874472][ T4549] ? __init_rwsem+0xd6/0x1c0 [ 2383.878901][ T4549] ? copy_signal+0x4e3/0x610 [ 2383.883323][ T4549] copy_process+0x12bc/0x3260 [ 2383.887851][ T4549] ? timerqueue_add+0x250/0x270 [ 2383.892525][ T4549] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2383.897473][ T4549] ? enqueue_hrtimer+0xca/0x240 [ 2383.902154][ T4549] ? __hrtimer_run_queues+0x46b/0xad0 [ 2383.907369][ T4549] kernel_clone+0x21e/0x9e0 [ 2383.911704][ T4549] ? create_io_thread+0x1e0/0x1e0 [ 2383.916566][ T4549] ? clockevents_program_event+0x22f/0x300 [ 2383.922212][ T4549] __x64_sys_clone+0x23f/0x290 10:41:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x86002100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4000, 0xfffffffffffffffc, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="d4940a761d46836036dd4b58c60b6cf6cac2ee2177061a0d78bc0635766755f660bbf129115b1f0e96458668cf2b4b5c6693562e0bcb3a6672433ac589a82c597bdfed2982ab13c8ed15f7e7a471ead947cd3b949b143571eb10b9b7c94351351ac7e0a26f587ff02c406c2b6e82494416b0243cd9e60afbb058e6e4dcc454fbc3399c8f54582922d0e9") 10:41:23 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) openat$cgroup_ro(r12, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) [ 2383.926838][ T4549] ? __do_sys_vfork+0x130/0x130 [ 2383.931500][ T4549] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2383.937309][ T4549] do_syscall_64+0x3d/0xb0 [ 2383.941558][ T4549] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2383.947201][ T4549] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2383.952935][ T4549] RIP: 0033:0x7f977f216ae9 [ 2383.957185][ T4549] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 10:41:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x356}, 0x80) 10:41:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x67ffffff}, 0x80) [ 2383.976625][ T4549] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2383.984871][ T4549] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2383.992682][ T4549] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2384.000491][ T4549] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2384.008309][ T4549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2384.016118][ T4549] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2384.024146][ T4549] 10:41:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x2ba}, 0x80) 10:41:23 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) (async) openat$cgroup_ro(r12, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) 10:41:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x68ffffff}, 0x80) 10:41:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 74) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:24 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) (async) openat$cgroup_ro(r12, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) 10:41:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x69ffffff}, 0x80) 10:41:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x374}, 0x80) 10:41:24 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000040)) socketpair(0x1d, 0x3, 0x80, &(0x7f00000000c0)) [ 2384.929418][ T4626] FAULT_INJECTION: forcing a failure. [ 2384.929418][ T4626] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.962913][ T4626] CPU: 1 PID: 4626 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2384.973006][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2384.982903][ T4626] Call Trace: [ 2384.986144][ T4626] [ 2384.988917][ T4626] dump_stack_lvl+0x151/0x1b7 [ 2384.993433][ T4626] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2384.998902][ T4626] dump_stack+0x15/0x17 [ 2385.002890][ T4626] should_fail+0x3c6/0x510 [ 2385.007151][ T4626] __should_failslab+0xa4/0xe0 [ 2385.011748][ T4626] ? vm_area_dup+0x26/0x230 [ 2385.016083][ T4626] should_failslab+0x9/0x20 [ 2385.020428][ T4626] slab_pre_alloc_hook+0x37/0xd0 [ 2385.025199][ T4626] ? vm_area_dup+0x26/0x230 [ 2385.029534][ T4626] kmem_cache_alloc+0x44/0x200 [ 2385.034141][ T4626] vm_area_dup+0x26/0x230 [ 2385.038302][ T4626] copy_mm+0x9a1/0x13e0 [ 2385.042303][ T4626] ? copy_signal+0x610/0x610 [ 2385.046727][ T4626] ? __init_rwsem+0xd6/0x1c0 [ 2385.051166][ T4626] ? copy_signal+0x4e3/0x610 [ 2385.055605][ T4626] copy_process+0x12bc/0x3260 [ 2385.060094][ T4626] ? timerqueue_add+0x250/0x270 [ 2385.064781][ T4626] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2385.069724][ T4626] ? enqueue_hrtimer+0xca/0x240 [ 2385.074411][ T4626] ? __hrtimer_run_queues+0x46b/0xad0 [ 2385.079619][ T4626] kernel_clone+0x21e/0x9e0 [ 2385.083956][ T4626] ? create_io_thread+0x1e0/0x1e0 [ 2385.088814][ T4626] ? clockevents_program_event+0x22f/0x300 [ 2385.094454][ T4626] __x64_sys_clone+0x23f/0x290 [ 2385.099052][ T4626] ? __do_sys_vfork+0x130/0x130 [ 2385.103741][ T4626] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2385.109555][ T4626] do_syscall_64+0x3d/0xb0 [ 2385.113807][ T4626] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2385.119450][ T4626] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2385.125183][ T4626] RIP: 0033:0x7f977f216ae9 [ 2385.129433][ T4626] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2385.148874][ T4626] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2385.157117][ T4626] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2385.164926][ T4626] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2385.172746][ T4626] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2385.180548][ T4626] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2385.188369][ T4626] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2385.196206][ T4626] 10:41:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x86002100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4000, 0xfffffffffffffffc, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="d4940a761d46836036dd4b58c60b6cf6cac2ee2177061a0d78bc0635766755f660bbf129115b1f0e96458668cf2b4b5c6693562e0bcb3a6672433ac589a82c597bdfed2982ab13c8ed15f7e7a471ead947cd3b949b143571eb10b9b7c94351351ac7e0a26f587ff02c406c2b6e82494416b0243cd9e60afbb058e6e4dcc454fbc3399c8f54582922d0e9") perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x86002100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x4000, 0xfffffffffffffffc, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="d4940a761d46836036dd4b58c60b6cf6cac2ee2177061a0d78bc0635766755f660bbf129115b1f0e96458668cf2b4b5c6693562e0bcb3a6672433ac589a82c597bdfed2982ab13c8ed15f7e7a471ead947cd3b949b143571eb10b9b7c94351351ac7e0a26f587ff02c406c2b6e82494416b0243cd9e60afbb058e6e4dcc454fbc3399c8f54582922d0e9") (async) 10:41:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6affffff}, 0x80) 10:41:24 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000000)={&(0x7f00000002c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000980)=""/135, 0x87}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x5}, 0x121) 10:41:24 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000040)) (async) socketpair(0x1d, 0x3, 0x80, &(0x7f00000000c0)) 10:41:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x3ec}, 0x80) 10:41:24 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000040)) socketpair(0x1d, 0x3, 0x80, &(0x7f00000000c0)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000040)) (async) socketpair(0x1d, 0x3, 0x80, &(0x7f00000000c0)) (async) 10:41:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6bffffff}, 0x80) 10:41:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 75) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:25 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0xfffffffffffffd1f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r11}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x2802, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = getpid() perf_event_open(&(0x7f0000000400)={0x7, 0x80, 0x5, 0x0, 0x0, 0xff, 0x0, 0xd, 0x73071914393b6e53, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x0, 0x5}, 0x1c404, 0xc9, 0x5, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6d}, r13, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x898, 0x1007}, 0x8006, 0x5f85, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f00000003c0)='memory.numa_stat\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r13, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000680)='\x00'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6cffffff}, 0x80) 10:41:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x3fb}, 0x80) 10:41:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6dffffff}, 0x80) [ 2385.930412][ T4670] FAULT_INJECTION: forcing a failure. [ 2385.930412][ T4670] name failslab, interval 1, probability 0, space 0, times 0 [ 2385.979700][ T4670] CPU: 0 PID: 4670 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2385.989903][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2385.999800][ T4670] Call Trace: [ 2386.002925][ T4670] [ 2386.005704][ T4670] dump_stack_lvl+0x151/0x1b7 [ 2386.010223][ T4670] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2386.015870][ T4670] dump_stack+0x15/0x17 [ 2386.019855][ T4670] should_fail+0x3c6/0x510 [ 2386.024108][ T4670] __should_failslab+0xa4/0xe0 [ 2386.028711][ T4670] ? vm_area_dup+0x26/0x230 [ 2386.033046][ T4670] should_failslab+0x9/0x20 [ 2386.037559][ T4670] slab_pre_alloc_hook+0x37/0xd0 [ 2386.042335][ T4670] ? vm_area_dup+0x26/0x230 [ 2386.046675][ T4670] kmem_cache_alloc+0x44/0x200 [ 2386.051278][ T4670] vm_area_dup+0x26/0x230 [ 2386.055443][ T4670] copy_mm+0x9a1/0x13e0 [ 2386.059437][ T4670] ? copy_signal+0x610/0x610 [ 2386.063868][ T4670] ? __init_rwsem+0xd6/0x1c0 [ 2386.068372][ T4670] ? copy_signal+0x4e3/0x610 [ 2386.072801][ T4670] copy_process+0x12bc/0x3260 [ 2386.077350][ T4670] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2386.082271][ T4670] ? kasan_check_range+0x3a/0x2a0 [ 2386.087121][ T4670] kernel_clone+0x21e/0x9e0 [ 2386.091461][ T4670] ? create_io_thread+0x1e0/0x1e0 [ 2386.096321][ T4670] ? clockevents_program_event+0x22f/0x300 [ 2386.101963][ T4670] __x64_sys_clone+0x23f/0x290 [ 2386.106562][ T4670] ? __do_sys_vfork+0x130/0x130 [ 2386.111248][ T4670] ? debug_smp_processor_id+0x17/0x20 [ 2386.116453][ T4670] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2386.122354][ T4670] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2386.127826][ T4670] do_syscall_64+0x3d/0xb0 [ 2386.132076][ T4670] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2386.137719][ T4670] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2386.143446][ T4670] RIP: 0033:0x7f977f216ae9 [ 2386.147698][ T4670] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2386.167150][ T4670] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2386.175385][ T4670] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2386.183199][ T4670] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2386.191007][ T4670] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2386.199195][ T4670] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2386.207003][ T4670] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2386.214825][ T4670] 10:41:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x86002100, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4000, 0xfffffffffffffffc, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="d4940a761d46836036dd4b58c60b6cf6cac2ee2177061a0d78bc0635766755f660bbf129115b1f0e96458668cf2b4b5c6693562e0bcb3a6672433ac589a82c597bdfed2982ab13c8ed15f7e7a471ead947cd3b949b143571eb10b9b7c94351351ac7e0a26f587ff02c406c2b6e82494416b0243cd9e60afbb058e6e4dcc454fbc3399c8f54582922d0e9") 10:41:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x500}, 0x80) 10:41:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6effffff}, 0x80) 10:41:25 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000000)={&(0x7f00000002c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000980)=""/135, 0x87}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x5}, 0x121) 10:41:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6fffffff}, 0x80) 10:41:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 76) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x70000000}, 0x80) 10:41:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x600}, 0x80) [ 2386.949592][ T4809] FAULT_INJECTION: forcing a failure. [ 2386.949592][ T4809] name failslab, interval 1, probability 0, space 0, times 0 [ 2387.003378][ T4809] CPU: 0 PID: 4809 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2387.013489][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2387.023369][ T4809] Call Trace: [ 2387.026486][ T4809] [ 2387.029352][ T4809] dump_stack_lvl+0x151/0x1b7 [ 2387.033870][ T4809] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2387.039420][ T4809] dump_stack+0x15/0x17 [ 2387.043415][ T4809] should_fail+0x3c6/0x510 [ 2387.047663][ T4809] __should_failslab+0xa4/0xe0 [ 2387.052261][ T4809] ? anon_vma_fork+0x1df/0x4e0 [ 2387.056862][ T4809] should_failslab+0x9/0x20 [ 2387.061206][ T4809] slab_pre_alloc_hook+0x37/0xd0 [ 2387.065976][ T4809] ? anon_vma_fork+0x1df/0x4e0 [ 2387.070575][ T4809] kmem_cache_alloc+0x44/0x200 [ 2387.075177][ T4809] anon_vma_fork+0x1df/0x4e0 [ 2387.079602][ T4809] copy_mm+0xa3a/0x13e0 [ 2387.083592][ T4809] ? irqentry_exit+0x30/0x40 [ 2387.088024][ T4809] ? copy_signal+0x610/0x610 [ 2387.092449][ T4809] ? __init_rwsem+0xd6/0x1c0 [ 2387.096875][ T4809] ? copy_signal+0x4e3/0x610 [ 2387.101306][ T4809] copy_process+0x12bc/0x3260 [ 2387.105819][ T4809] ? vfs_write+0x973/0x1110 [ 2387.110155][ T4809] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2387.115109][ T4809] ? vfs_write+0x9ec/0x1110 [ 2387.119441][ T4809] ? __hrtimer_run_queues+0x46b/0xad0 [ 2387.124649][ T4809] kernel_clone+0x21e/0x9e0 [ 2387.128992][ T4809] ? file_end_write+0x1c0/0x1c0 [ 2387.133673][ T4809] ? create_io_thread+0x1e0/0x1e0 [ 2387.138537][ T4809] ? mutex_unlock+0xb2/0x260 [ 2387.142973][ T4809] ? __mutex_lock_slowpath+0x10/0x10 [ 2387.148082][ T4809] ? __fdget_pos+0x1b5/0x3a0 [ 2387.152508][ T4809] __x64_sys_clone+0x23f/0x290 [ 2387.157112][ T4809] ? __do_sys_vfork+0x130/0x130 [ 2387.161796][ T4809] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2387.167610][ T4809] do_syscall_64+0x3d/0xb0 [ 2387.171859][ T4809] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2387.177504][ T4809] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2387.183230][ T4809] RIP: 0033:0x7f977f216ae9 [ 2387.187500][ T4809] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2387.206932][ T4809] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2387.215181][ T4809] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2387.222986][ T4809] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2387.230892][ T4809] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2387.238721][ T4809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2387.246517][ T4809] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2387.254333][ T4809] 10:41:27 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0xfffffffffffffd1f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r11}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x2802, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r13 = getpid() perf_event_open(&(0x7f0000000400)={0x7, 0x80, 0x5, 0x0, 0x0, 0xff, 0x0, 0xd, 0x73071914393b6e53, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x0, 0x5}, 0x1c404, 0xc9, 0x5, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6d}, r13, 0x3, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x898, 0x1007}, 0x8006, 0x5f85, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f00000003c0)='memory.numa_stat\x00') (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r13, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000680)='\x00'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x700}, 0x80) 10:41:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 77) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x70ffffff}, 0x80) [ 2387.770155][ T4862] FAULT_INJECTION: forcing a failure. [ 2387.770155][ T4862] name failslab, interval 1, probability 0, space 0, times 0 [ 2387.824056][ T4862] CPU: 0 PID: 4862 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2387.834145][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2387.844040][ T4862] Call Trace: [ 2387.847171][ T4862] [ 2387.849939][ T4862] dump_stack_lvl+0x151/0x1b7 [ 2387.854450][ T4862] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2387.859922][ T4862] dump_stack+0x15/0x17 [ 2387.863917][ T4862] should_fail+0x3c6/0x510 [ 2387.868166][ T4862] __should_failslab+0xa4/0xe0 [ 2387.872761][ T4862] ? vm_area_dup+0x26/0x230 [ 2387.877102][ T4862] should_failslab+0x9/0x20 [ 2387.881442][ T4862] slab_pre_alloc_hook+0x37/0xd0 [ 2387.886217][ T4862] ? vm_area_dup+0x26/0x230 [ 2387.890554][ T4862] kmem_cache_alloc+0x44/0x200 [ 2387.895157][ T4862] vm_area_dup+0x26/0x230 [ 2387.899323][ T4862] copy_mm+0x9a1/0x13e0 [ 2387.903317][ T4862] ? copy_signal+0x610/0x610 [ 2387.907742][ T4862] ? __init_rwsem+0xd6/0x1c0 [ 2387.912164][ T4862] ? copy_signal+0x4e3/0x610 [ 2387.916593][ T4862] copy_process+0x12bc/0x3260 [ 2387.921107][ T4862] ? timerqueue_add+0x250/0x270 [ 2387.925793][ T4862] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2387.930741][ T4862] ? enqueue_hrtimer+0xca/0x240 [ 2387.935427][ T4862] ? __hrtimer_run_queues+0x46b/0xad0 [ 2387.940640][ T4862] kernel_clone+0x21e/0x9e0 [ 2387.944975][ T4862] ? create_io_thread+0x1e0/0x1e0 [ 2387.949944][ T4862] ? clockevents_program_event+0x22f/0x300 [ 2387.955587][ T4862] __x64_sys_clone+0x23f/0x290 [ 2387.960189][ T4862] ? __do_sys_vfork+0x130/0x130 [ 2387.964878][ T4862] ? debug_smp_processor_id+0x17/0x20 [ 2387.970078][ T4862] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2387.976070][ T4862] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2387.981536][ T4862] do_syscall_64+0x3d/0xb0 [ 2387.985792][ T4862] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2387.991516][ T4862] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2387.997246][ T4862] RIP: 0033:0x7f977f216ae9 [ 2388.001503][ T4862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2388.020941][ T4862] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2388.029188][ T4862] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2388.036993][ T4862] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2388.044807][ T4862] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2388.052626][ T4862] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2388.060434][ T4862] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2388.068248][ T4862] 10:41:27 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r0, 0x1, 0x1, 0x1]}, 0x80) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8ffffffffff18470000000000000000000000000000183308000000000000000000000000950000000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="9500000000000000850000006c000000850000002b000000"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff0001}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x1, 0x0, 0x6, 0x9, 0xc, 0x8}, @call={0x85, 0x0, 0x0, 0x45}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x7, 0x8, 0x9}, 0x10, 0x0, r1, 0x8, &(0x7f00000005c0)=[r12, 0x1, r13, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x4, 0xb, 0x8}, {0x5, 0x5, 0xd, 0xc}, {0x3, 0x4, 0x9, 0xb}, {0x4, 0x3, 0xd, 0xb}, {0x0, 0x4, 0xb, 0x3}, {0x3, 0x1, 0x6, 0x5}, {0x4, 0x3, 0x5, 0x2}, {0x1, 0x2, 0x4, 0x5}], 0x10, 0x80}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = syz_clone(0x2002400, &(0x7f0000000080)="e2b3dfb1e1232d5853270fea6ac49b66b8b04ce44323d4ca244dece1c77341676973d5a2be1019ab903960aac9e08a603c74f117197f5ff6549eef9a96970259569dfdd2aa0d7210d9fb26bb64a22d72dafc066a16bb138da0f367e3e6b751035878ffc0254286179759285d6b36ea3d1020ad6f11366e0ca94c7b8dbe047bb4edb017d94e8d8a5613d6f632cd882d3bc8334c2925a20fa8c11b1c46bcf9814fc352fef0e6179fcb063a8c2bf5acdc8229ba56cf79d14ea21d3153d86c4f23d35fa195dbde1ba114382d3a7aa3ce9d827eea0cbf129009f9", 0xd8, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="90993ccc8228adc41492cfc301da120b916f707afc438e2dbceb0c4f9029b3864575e253415df9da0b83cf4761c0d941e8ed085fe84fb4e48f054ea2e9f02c8a1bff3d740bc5a70e4d130bfe52ad94b53a12f0f5976cb3a4b768433c62e92eaa538e205ac5d0136d21c528f6ff2f5fa9a663ffe32fc139e39cd0c59ba53c672f7d7f57f02db1ffa60ac5e219fa16b21d303e5f94b882cabe77aec26858a4153822e7f3865864434c2bbe01277630a91c6ec77fd52191d18c1934fcdd168df2faa58eea221ca6e1fc6cbce5ed379619da3ee47647") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x7f, 0x5, 0x1f, 0x0, 0x5, 0x91001, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x68bc, 0x2, @perf_config_ext={0x8, 0x401}, 0x81000, 0x3, 0x1, 0x6, 0x80000000, 0x4, 0xfffc, 0x0, 0x6, 0x0, 0x6}, r14, 0xa, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:27 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000000)={&(0x7f00000002c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000980)=""/135, 0x87}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x5}, 0x121) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) (async) recvmsg$unix(r0, &(0x7f0000000000)={&(0x7f00000002c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000980)=""/135, 0x87}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x5}, 0x121) (async) 10:41:27 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r4, 0x1, 0x1, 0x1]}, 0x80) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r7, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r8, r6, 0x0, &(0x7f0000000680)=[r9, 0x1, 0x1, 0x1]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r4, 0xffffffffffffffff, r5, r4, r9, r4, r4, r10, 0x1]}, 0x80) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0xfffffffffffffd1f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r11}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x2802, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() (async) r13 = getpid() perf_event_open(&(0x7f0000000400)={0x7, 0x80, 0x5, 0x0, 0x0, 0xff, 0x0, 0xd, 0x73071914393b6e53, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x0, 0x5}, 0x1c404, 0xc9, 0x5, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6d}, r13, 0x3, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x7, 0x80, 0x5, 0x0, 0x0, 0xff, 0x0, 0xd, 0x73071914393b6e53, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x0, 0x5}, 0x1c404, 0xc9, 0x5, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6d}, r13, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x898, 0x1007}, 0x8006, 0x5f85, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f00000003c0)='memory.numa_stat\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f00000003c0)='memory.numa_stat\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r13, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000680)='\x00'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xa00}, 0x80) 10:41:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x71ffffff}, 0x80) 10:41:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x72ffffff}, 0x80) 10:41:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x6cffffff}, 0x80) 10:41:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 78) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:27 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.freeze\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x73ffffff}, 0x80) 10:41:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc00}, 0x80) 10:41:27 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.freeze\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) [ 2388.626359][ T4922] FAULT_INJECTION: forcing a failure. [ 2388.626359][ T4922] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.669459][ T4922] CPU: 1 PID: 4922 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2388.679546][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2388.689445][ T4922] Call Trace: [ 2388.692568][ T4922] [ 2388.695346][ T4922] dump_stack_lvl+0x151/0x1b7 [ 2388.699855][ T4922] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2388.705327][ T4922] ? ___ratelimit+0xb2/0x5a0 [ 2388.709747][ T4922] dump_stack+0x15/0x17 [ 2388.713744][ T4922] should_fail+0x3c6/0x510 [ 2388.717995][ T4922] __should_failslab+0xa4/0xe0 [ 2388.722597][ T4922] ? anon_vma_clone+0x9a/0x500 [ 2388.727282][ T4922] should_failslab+0x9/0x20 [ 2388.731623][ T4922] slab_pre_alloc_hook+0x37/0xd0 [ 2388.736398][ T4922] ? anon_vma_clone+0x9a/0x500 [ 2388.741081][ T4922] kmem_cache_alloc+0x44/0x200 [ 2388.745685][ T4922] anon_vma_clone+0x9a/0x500 [ 2388.750107][ T4922] ? kasan_check_range+0x1bf/0x2a0 [ 2388.755057][ T4922] anon_vma_fork+0x91/0x4e0 [ 2388.759393][ T4922] ? anon_vma_name+0x43/0x70 [ 2388.763910][ T4922] ? vm_area_dup+0x17a/0x230 [ 2388.768334][ T4922] copy_mm+0xa3a/0x13e0 [ 2388.772326][ T4922] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2388.777974][ T4922] ? copy_signal+0x610/0x610 [ 2388.782392][ T4922] ? __init_rwsem+0xd6/0x1c0 [ 2388.786825][ T4922] ? copy_signal+0x4e3/0x610 [ 2388.791247][ T4922] copy_process+0x12bc/0x3260 [ 2388.795767][ T4922] ? timerqueue_add+0x250/0x270 [ 2388.800451][ T4922] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2388.805395][ T4922] ? enqueue_hrtimer+0xca/0x240 [ 2388.810081][ T4922] ? __hrtimer_run_queues+0x46b/0xad0 [ 2388.815292][ T4922] kernel_clone+0x21e/0x9e0 [ 2388.819628][ T4922] ? irqentry_exit+0x30/0x40 [ 2388.824053][ T4922] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2388.829699][ T4922] ? create_io_thread+0x1e0/0x1e0 [ 2388.834561][ T4922] __x64_sys_clone+0x23f/0x290 [ 2388.839159][ T4922] ? __do_sys_vfork+0x130/0x130 [ 2388.843847][ T4922] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2388.849660][ T4922] do_syscall_64+0x3d/0xb0 [ 2388.853912][ T4922] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2388.859556][ T4922] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2388.865282][ T4922] RIP: 0033:0x7f977f216ae9 [ 2388.869530][ T4922] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2388.889067][ T4922] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2388.897582][ T4922] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2388.905465][ T4922] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2388.913279][ T4922] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2388.921089][ T4922] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2388.929028][ T4922] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2388.936840][ T4922] 10:41:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.freeze\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x74ffffff}, 0x80) 10:41:28 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x2, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="0565f8ffffffffff184700000000000000000000000000001833009f316311d5e60e31a3f8e11ba70004000000000033b8e6fb0000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r3, 0x1, 0x1, 0x1]}, 0x80) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r6, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18690000100000000000000002ff010091c7a71dddec0180000000000400000000000000000000009500"/54], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r5, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r6, r4, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x90) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8fffffffffffc460000000000000000000000000000183300000400000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r13, 0x1, 0x1, 0x1]}, 0x80) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff, 0xffffffffffffffff, r14, 0x1]}, 0x80) openat$cgroup_ro(r14, &(0x7f0000000780)='memory.numa_stat\x00', 0x0, 0x0) syz_clone(0x80400, 0x0, 0x0, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="b2e3e147094e5007da7317d10a17255349394547e6f9c32c383854b2b94546d62acc408908fc4108d39b1832bf4662c95ea16affd3fca6aa46d0f9ee86d60bc89f7612ee9f2fcadcf795477c4afaa85bcc04ac91888ce6368b4f2badb87f0d368ef5539fe89ea240f4") syz_clone(0x80000, &(0x7f0000000040)="02", 0x1, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)="baada7baea425bad2292120885949a4f51936fe232a3da35af7624b63255faaa49a8c30631a11a7299afd55c4a95a7493314494f6ffe558ccee8e990b44e1e555d023982ffdf10ded0afde526632") sendmsg$unix(r12, &(0x7f00000014c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000430872a0bc53082284e8ecd9731958d3495f036ab65d82ed47a8ba9bb321731db75ee322928f7c3230fade02c66ba24d946c221850d580c046e9fd583ff71687579e6adef8f97508450fd8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="cac6e99cf469abc904934cc21bc3050000002c236be68edcf214eff6d6b90ae5408cef1328a40f932713e8e4705b605f724f8eeb52c2463768e9f9c4b5eb8d687fe80a912df03fdfeaeecf940fcc586d17799f87de02f25ffd26cd7b3dec9f644758a8a602b62b853c6b8b972c778a90901edc000000000000000000"], 0x30, 0x1}, 0x8001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:41:28 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r0, 0x1, 0x1, 0x1]}, 0x80) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8ffffffffff18470000000000000000000000000000183308000000000000000000000000950000000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="9500000000000000850000006c000000850000002b000000"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff0001}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x1, 0x0, 0x6, 0x9, 0xc, 0x8}, @call={0x85, 0x0, 0x0, 0x45}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x7, 0x8, 0x9}, 0x10, 0x0, r1, 0x8, &(0x7f00000005c0)=[r12, 0x1, r13, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x4, 0xb, 0x8}, {0x5, 0x5, 0xd, 0xc}, {0x3, 0x4, 0x9, 0xb}, {0x4, 0x3, 0xd, 0xb}, {0x0, 0x4, 0xb, 0x3}, {0x3, 0x1, 0x6, 0x5}, {0x4, 0x3, 0x5, 0x2}, {0x1, 0x2, 0x4, 0x5}], 0x10, 0x80}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r14 = syz_clone(0x2002400, &(0x7f0000000080)="e2b3dfb1e1232d5853270fea6ac49b66b8b04ce44323d4ca244dece1c77341676973d5a2be1019ab903960aac9e08a603c74f117197f5ff6549eef9a96970259569dfdd2aa0d7210d9fb26bb64a22d72dafc066a16bb138da0f367e3e6b751035878ffc0254286179759285d6b36ea3d1020ad6f11366e0ca94c7b8dbe047bb4edb017d94e8d8a5613d6f632cd882d3bc8334c2925a20fa8c11b1c46bcf9814fc352fef0e6179fcb063a8c2bf5acdc8229ba56cf79d14ea21d3153d86c4f23d35fa195dbde1ba114382d3a7aa3ce9d827eea0cbf129009f9", 0xd8, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="90993ccc8228adc41492cfc301da120b916f707afc438e2dbceb0c4f9029b3864575e253415df9da0b83cf4761c0d941e8ed085fe84fb4e48f054ea2e9f02c8a1bff3d740bc5a70e4d130bfe52ad94b53a12f0f5976cb3a4b768433c62e92eaa538e205ac5d0136d21c528f6ff2f5fa9a663ffe32fc139e39cd0c59ba53c672f7d7f57f02db1ffa60ac5e219fa16b21d303e5f94b882cabe77aec26858a4153822e7f3865864434c2bbe01277630a91c6ec77fd52191d18c1934fcdd168df2faa58eea221ca6e1fc6cbce5ed379619da3ee47647") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x7f, 0x5, 0x1f, 0x0, 0x5, 0x91001, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x68bc, 0x2, @perf_config_ext={0x8, 0x401}, 0x81000, 0x3, 0x1, 0x6, 0x80000000, 0x4, 0xfffc, 0x0, 0x6, 0x0, 0x6}, r14, 0xa, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1100}, 0x80) 10:41:28 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x2, 0x0}, 0x8) (rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="0565f8ffffffffff184700000000000000000000000000001833009f316311d5e60e31a3f8e11ba70004000000000033b8e6fb0000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r3, 0x1, 0x1, 0x1]}, 0x80) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r6, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18690000100000000000000002ff010091c7a71dddec0180000000000400000000000000000000009500"/54], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r5, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r6, r4, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x90) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async, rerun: 32) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8fffffffffffc460000000000000000000000000000183300000400000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r13, 0x1, 0x1, 0x1]}, 0x80) (async) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff, 0xffffffffffffffff, r14, 0x1]}, 0x80) openat$cgroup_ro(r14, &(0x7f0000000780)='memory.numa_stat\x00', 0x0, 0x0) (async) syz_clone(0x80400, 0x0, 0x0, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="b2e3e147094e5007da7317d10a17255349394547e6f9c32c383854b2b94546d62acc408908fc4108d39b1832bf4662c95ea16affd3fca6aa46d0f9ee86d60bc89f7612ee9f2fcadcf795477c4afaa85bcc04ac91888ce6368b4f2badb87f0d368ef5539fe89ea240f4") (async) syz_clone(0x80000, &(0x7f0000000040)="02", 0x1, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)="baada7baea425bad2292120885949a4f51936fe232a3da35af7624b63255faaa49a8c30631a11a7299afd55c4a95a7493314494f6ffe558ccee8e990b44e1e555d023982ffdf10ded0afde526632") (async) sendmsg$unix(r12, &(0x7f00000014c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000430872a0bc53082284e8ecd9731958d3495f036ab65d82ed47a8ba9bb321731db75ee322928f7c3230fade02c66ba24d946c221850d580c046e9fd583ff71687579e6adef8f97508450fd8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="cac6e99cf469abc904934cc21bc3050000002c236be68edcf214eff6d6b90ae5408cef1328a40f932713e8e4705b605f724f8eeb52c2463768e9f9c4b5eb8d687fe80a912df03fdfeaeecf940fcc586d17799f87de02f25ffd26cd7b3dec9f644758a8a602b62b853c6b8b972c778a90901edc000000000000000000"], 0x30, 0x1}, 0x8001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:41:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000051d000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) openat$cgroup_ro(r0, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) 10:41:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 79) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x75ffffff}, 0x80) 10:41:28 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x2}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x2, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r2, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="0565f8ffffffffff184700000000000000000000000000001833009f316311d5e60e31a3f8e11ba70004000000000033b8e6fb0000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r1, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r2, r0, 0x0, &(0x7f0000000680)=[r3, 0x1, 0x1, 0x1]}, 0x80) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r6, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18690000100000000000000002ff010091c7a71dddec0180000000000400000000000000000000009500"/54], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r5, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r6, r4, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18690000100000000000000002ff010091c7a71dddec0180000000000400000000000000000000009500"/54], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r5, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r6, r4, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x90) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8fffffffffffc460000000000000000000000000000183300000400000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r13, 0x1, 0x1, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r13, 0x1, 0x1, 0x1]}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff, 0xffffffffffffffff, r14, 0x1]}, 0x80) openat$cgroup_ro(r14, &(0x7f0000000780)='memory.numa_stat\x00', 0x0, 0x0) syz_clone(0x80400, 0x0, 0x0, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="b2e3e147094e5007da7317d10a17255349394547e6f9c32c383854b2b94546d62acc408908fc4108d39b1832bf4662c95ea16affd3fca6aa46d0f9ee86d60bc89f7612ee9f2fcadcf795477c4afaa85bcc04ac91888ce6368b4f2badb87f0d368ef5539fe89ea240f4") (async) syz_clone(0x80400, 0x0, 0x0, &(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)="b2e3e147094e5007da7317d10a17255349394547e6f9c32c383854b2b94546d62acc408908fc4108d39b1832bf4662c95ea16affd3fca6aa46d0f9ee86d60bc89f7612ee9f2fcadcf795477c4afaa85bcc04ac91888ce6368b4f2badb87f0d368ef5539fe89ea240f4") syz_clone(0x80000, &(0x7f0000000040)="02", 0x1, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)="baada7baea425bad2292120885949a4f51936fe232a3da35af7624b63255faaa49a8c30631a11a7299afd55c4a95a7493314494f6ffe558ccee8e990b44e1e555d023982ffdf10ded0afde526632") sendmsg$unix(r12, &(0x7f00000014c0)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000430872a0bc53082284e8ecd9731958d3495f036ab65d82ed47a8ba9bb321731db75ee322928f7c3230fade02c66ba24d946c221850d580c046e9fd583ff71687579e6adef8f97508450fd8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="cac6e99cf469abc904934cc21bc3050000002c236be68edcf214eff6d6b90ae5408cef1328a40f932713e8e4705b605f724f8eeb52c2463768e9f9c4b5eb8d687fe80a912df03fdfeaeecf940fcc586d17799f87de02f25ffd26cd7b3dec9f644758a8a602b62b853c6b8b972c778a90901edc000000000000000000"], 0x30, 0x1}, 0x8001) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:41:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000051d000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) openat$cgroup_ro(r0, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) 10:41:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1400}, 0x80) 10:41:28 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r0, 0x1, 0x1, 0x1]}, 0x80) bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0565f8ffffffffff18470000000000000000000000000000183308000000000000000000000000950000000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r3, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r4, r2, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r9, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r10, r8, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x80) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="9500000000000000850000006c000000850000002b000000"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="9500000000000000850000006c000000850000002b000000"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r6, 0xffffffffffffffff, r7, r6, r11, r6, r6, r12, 0x1]}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff0001}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x1, 0x0, 0x6, 0x9, 0xc, 0x8}, @call={0x85, 0x0, 0x0, 0x45}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x7, 0x8, 0x9}, 0x10, 0x0, r1, 0x8, &(0x7f00000005c0)=[r12, 0x1, r13, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x4, 0xb, 0x8}, {0x5, 0x5, 0xd, 0xc}, {0x3, 0x4, 0x9, 0xb}, {0x4, 0x3, 0xd, 0xb}, {0x0, 0x4, 0xb, 0x3}, {0x3, 0x1, 0x6, 0x5}, {0x4, 0x3, 0x5, 0x2}, {0x1, 0x2, 0x4, 0x5}], 0x10, 0x80}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = syz_clone(0x2002400, &(0x7f0000000080)="e2b3dfb1e1232d5853270fea6ac49b66b8b04ce44323d4ca244dece1c77341676973d5a2be1019ab903960aac9e08a603c74f117197f5ff6549eef9a96970259569dfdd2aa0d7210d9fb26bb64a22d72dafc066a16bb138da0f367e3e6b751035878ffc0254286179759285d6b36ea3d1020ad6f11366e0ca94c7b8dbe047bb4edb017d94e8d8a5613d6f632cd882d3bc8334c2925a20fa8c11b1c46bcf9814fc352fef0e6179fcb063a8c2bf5acdc8229ba56cf79d14ea21d3153d86c4f23d35fa195dbde1ba114382d3a7aa3ce9d827eea0cbf129009f9", 0xd8, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="90993ccc8228adc41492cfc301da120b916f707afc438e2dbceb0c4f9029b3864575e253415df9da0b83cf4761c0d941e8ed085fe84fb4e48f054ea2e9f02c8a1bff3d740bc5a70e4d130bfe52ad94b53a12f0f5976cb3a4b768433c62e92eaa538e205ac5d0136d21c528f6ff2f5fa9a663ffe32fc139e39cd0c59ba53c672f7d7f57f02db1ffa60ac5e219fa16b21d303e5f94b882cabe77aec26858a4153822e7f3865864434c2bbe01277630a91c6ec77fd52191d18c1934fcdd168df2faa58eea221ca6e1fc6cbce5ed379619da3ee47647") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x7f, 0x5, 0x1f, 0x0, 0x5, 0x91001, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x68bc, 0x2, @perf_config_ext={0x8, 0x401}, 0x81000, 0x3, 0x1, 0x6, 0x80000000, 0x4, 0xfffc, 0x0, 0x6, 0x0, 0x6}, r14, 0xa, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:28 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000051d000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) openat$cgroup_ro(r0, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000051d000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) openat$cgroup_ro(r0, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) (async) 10:41:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x76ffffff}, 0x80) [ 2389.665937][ T5005] FAULT_INJECTION: forcing a failure. [ 2389.665937][ T5005] name failslab, interval 1, probability 0, space 0, times 0 [ 2389.732917][ T5005] CPU: 0 PID: 5005 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2389.743013][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2389.752910][ T5005] Call Trace: [ 2389.756026][ T5005] [ 2389.758807][ T5005] dump_stack_lvl+0x151/0x1b7 [ 2389.763317][ T5005] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2389.768786][ T5005] dump_stack+0x15/0x17 [ 2389.772789][ T5005] should_fail+0x3c6/0x510 [ 2389.777034][ T5005] __should_failslab+0xa4/0xe0 10:41:29 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0xb3b7c38a196986e, 0x80, 0x9, 0x81, 0xa3, 0x7, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x8a1a2, 0x8000000000000001, 0xd0, 0x1, 0x4, 0x3, 0x400, 0x0, 0x8, 0x0, 0x4}, r3, 0xf, r0, 0x1) perf_event_open(0x0, r2, 0xa, r1, 0x0) perf_event_open(0x0, r2, 0x2, r0, 0xa) syz_clone(0x54042000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x0, 0x4}, 0xc) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x7ff, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x40, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x90) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r15, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r14, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r15, r13, 0x0, &(0x7f0000000340)=[r16, 0x1, 0x1, 0x1]}, 0x90) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r11, 0xffffffffffffffff, r12, r11, r16, r11, r11, r17, 0x1]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit], &(0x7f0000000280)='syzkaller\x00', 0x7f, 0x74, &(0x7f00000002c0)=""/116, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x1, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1, r5, 0xffffffffffffffff, r6, r11], &(0x7f00000007c0)=[{0x3, 0x4, 0xd, 0x9}], 0x10, 0x43a02992}, 0x90) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x9, 0x7, 0x7, 0x0, 0x256d, 0x2a0, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff6d, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x9041, 0x0, 0x4, 0x0, 0x4, 0x2, 0xffff, 0x0, 0xfffffffa, 0x0, 0x80000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000800)='.)9\xf7\xa2^\\\x00}My\xe5\"\xd0\xdf\xf9\xd9\xe3tY[/\xe9x|\xbc\xbe*\xb3z\x91\x19s\xa9\xb2\xd1\x94|\xb3\xa9\xf7\xa6n\x7ft\x8b\x90\x96\r\xb9\xda\xc0\xda\xadjF\x06\x8dE\x99\x16\xc9C\xd9\xfc\xf0\xf8@\xee\xfe\x1f\xae-\xe3P') 10:41:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1800}, 0x80) [ 2389.781632][ T5005] ? anon_vma_clone+0x9a/0x500 [ 2389.786231][ T5005] should_failslab+0x9/0x20 [ 2389.790571][ T5005] slab_pre_alloc_hook+0x37/0xd0 [ 2389.795346][ T5005] ? anon_vma_clone+0x9a/0x500 [ 2389.799947][ T5005] kmem_cache_alloc+0x44/0x200 [ 2389.804550][ T5005] anon_vma_clone+0x9a/0x500 [ 2389.808974][ T5005] anon_vma_fork+0x91/0x4e0 [ 2389.813308][ T5005] ? anon_vma_name+0x43/0x70 [ 2389.817741][ T5005] ? vm_area_dup+0x17a/0x230 [ 2389.822166][ T5005] copy_mm+0xa3a/0x13e0 [ 2389.826155][ T5005] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2389.832148][ T5005] ? copy_signal+0x610/0x610 [ 2389.836580][ T5005] ? __init_rwsem+0xd6/0x1c0 [ 2389.840997][ T5005] ? copy_signal+0x4e3/0x610 [ 2389.845424][ T5005] copy_process+0x12bc/0x3260 [ 2389.849941][ T5005] ? timerqueue_add+0x250/0x270 [ 2389.854623][ T5005] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2389.859566][ T5005] ? enqueue_hrtimer+0xca/0x240 [ 2389.864259][ T5005] ? __hrtimer_run_queues+0x46b/0xad0 [ 2389.869468][ T5005] kernel_clone+0x21e/0x9e0 [ 2389.873806][ T5005] ? create_io_thread+0x1e0/0x1e0 [ 2389.878666][ T5005] ? clockevents_program_event+0x22f/0x300 [ 2389.884309][ T5005] __x64_sys_clone+0x23f/0x290 [ 2389.888908][ T5005] ? __do_sys_vfork+0x130/0x130 [ 2389.893682][ T5005] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2389.899496][ T5005] do_syscall_64+0x3d/0xb0 [ 2389.903746][ T5005] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2389.909387][ T5005] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2389.915116][ T5005] RIP: 0033:0x7f977f216ae9 [ 2389.919370][ T5005] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2389.938810][ T5005] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2389.947059][ T5005] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2389.954869][ T5005] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2389.962680][ T5005] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2389.970498][ T5005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 10:41:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x77ffffff}, 0x80) [ 2389.978300][ T5005] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2389.986118][ T5005] 10:41:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x3, 0x9, 0xae, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x1000, 0x100}, 0x1, 0x7, 0x0, 0x6, 0x0, 0xb2d, 0x8000, 0x0, 0x5, 0x0, 0x8000}, 0x0, 0x4, r11, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f00000002c0)}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40086602, &(0x7f0000000040)) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x78ffffff}, 0x80) 10:41:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x2000}, 0x80) 10:41:29 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = getpid() r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0xb3b7c38a196986e, 0x80, 0x9, 0x81, 0xa3, 0x7, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x8a1a2, 0x8000000000000001, 0xd0, 0x1, 0x4, 0x3, 0x400, 0x0, 0x8, 0x0, 0x4}, r3, 0xf, r0, 0x1) perf_event_open(0x0, r2, 0xa, r1, 0x0) perf_event_open(0x0, r2, 0x2, r0, 0xa) syz_clone(0x54042000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x0, 0x4}, 0xc) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x7ff, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x40, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x90) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) (async) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r15, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r14, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r15, r13, 0x0, &(0x7f0000000340)=[r16, 0x1, 0x1, 0x1]}, 0x90) (async) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r11, 0xffffffffffffffff, r12, r11, r16, r11, r11, r17, 0x1]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit], &(0x7f0000000280)='syzkaller\x00', 0x7f, 0x74, &(0x7f00000002c0)=""/116, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x1, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1, r5, 0xffffffffffffffff, r6, r11], &(0x7f00000007c0)=[{0x3, 0x4, 0xd, 0x9}], 0x10, 0x43a02992}, 0x90) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x9, 0x7, 0x7, 0x0, 0x256d, 0x2a0, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff6d, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x9041, 0x0, 0x4, 0x0, 0x4, 0x2, 0xffff, 0x0, 0xfffffffa, 0x0, 0x80000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000800)='.)9\xf7\xa2^\\\x00}My\xe5\"\xd0\xdf\xf9\xd9\xe3tY[/\xe9x|\xbc\xbe*\xb3z\x91\x19s\xa9\xb2\xd1\x94|\xb3\xa9\xf7\xa6n\x7ft\x8b\x90\x96\r\xb9\xda\xc0\xda\xadjF\x06\x8dE\x99\x16\xc9C\xd9\xfc\xf0\xf8@\xee\xfe\x1f\xae-\xe3P') 10:41:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) (rerun: 32) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) (async, rerun: 32) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x3, 0x9, 0xae, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x1000, 0x100}, 0x1, 0x7, 0x0, 0x6, 0x0, 0xb2d, 0x8000, 0x0, 0x5, 0x0, 0x8000}, 0x0, 0x4, r11, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f00000002c0)}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40086602, &(0x7f0000000040)) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (rerun: 64) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:29 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x10, 0x6, 0x200, &(0x7f0000000100)) r1 = syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x10, 0x1, 0x5, 0x1, 0x0, 0x7b, 0x40040, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x23, 0x0, @perf_bp={&(0x7f0000000340), 0x1}, 0x4201, 0x5, 0x81, 0x1, 0x975c, 0x80, 0x9, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r1, 0x4, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r1, r0, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) syz_clone(0x102000, &(0x7f0000000000)="657b2f57094a44c5b92bac24e362a76adfb6d2aa6a5db4eea1cae2be13026da9eff01694266c3024aad6ffe1566b57e903be52b4a56780b30d1bb1e0fc8a5161de0f01f968a8021a029caaf3c22f7db0828e12c61e247eed074d35be1c985575434c3389", 0x64, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)="38012ab052ffeb3b0cee02e8e6b48d25614f7237d9433d9a95f96b9da4538a937a7ab671682cc02a76468093d4394036451a03e2bb75a2be99e32586671478c173ec9c26d0caa1c5430eecaa10375b61c2cb0c4e40d128ce899909bc4ba7221eb26dd482fdc2dd233e203e5b2542449be5d4745e419ac16a26180781aa38a63f65002d59b84f8592057e561d7aca3357daa5afd7e88c4a03c0ca0d6a8e2a716d114035ce1fd8a7143fe007b0c67976f0ee98e2253ef20fca39e5bb1f4a66299a7fb8def65d6bdaa4fc1def3581fcdf009d5d03c98865b38480262d1aa3116846f71aeae197") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x3, 0x9, 0xae, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x1000, 0x100}, 0x1, 0x7, 0x0, 0x6, 0x0, 0xb2d, 0x8000, 0x0, 0x5, 0x0, 0x8000}, 0x0, 0x4, r11, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f00000002c0)}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40086602, &(0x7f0000000040)) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r13, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0xc020660b, &(0x7f0000000040)) 10:41:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x79ffffff}, 0x80) [ 2390.590802][ T5091] FAULT_INJECTION: forcing a failure. [ 2390.590802][ T5091] name failslab, interval 1, probability 0, space 0, times 0 10:41:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7affffff}, 0x80) 10:41:30 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = getpid() (async) r3 = gettid() r4 = perf_event_open(&(0x7f0000000200)={0xb3b7c38a196986e, 0x80, 0x9, 0x81, 0xa3, 0x7, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x8a1a2, 0x8000000000000001, 0xd0, 0x1, 0x4, 0x3, 0x400, 0x0, 0x8, 0x0, 0x4}, r3, 0xf, r0, 0x1) (async) perf_event_open(0x0, r2, 0xa, r1, 0x0) perf_event_open(0x0, r2, 0x2, r0, 0xa) syz_clone(0x54042000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1]}, 0x80) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x0, 0x4}, 0xc) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x7ff, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x40, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r11, 0x1, 0x1, 0x1]}, 0x90) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r15, 0x4) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r14, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r15, r13, 0x0, &(0x7f0000000340)=[r16, 0x1, 0x1, 0x1]}, 0x90) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r11, 0xffffffffffffffff, r12, r11, r16, r11, r11, r17, 0x1]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit], &(0x7f0000000280)='syzkaller\x00', 0x7f, 0x74, &(0x7f00000002c0)=""/116, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x1, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x1, r5, 0xffffffffffffffff, r6, r11], &(0x7f00000007c0)=[{0x3, 0x4, 0xd, 0x9}], 0x10, 0x43a02992}, 0x90) (async) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x9, 0x7, 0x7, 0x0, 0x256d, 0x2a0, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff6d, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x9041, 0x0, 0x4, 0x0, 0x4, 0x2, 0xffff, 0x0, 0xfffffffa, 0x0, 0x80000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xc) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000800)='.)9\xf7\xa2^\\\x00}My\xe5\"\xd0\xdf\xf9\xd9\xe3tY[/\xe9x|\xbc\xbe*\xb3z\x91\x19s\xa9\xb2\xd1\x94|\xb3\xa9\xf7\xa6n\x7ft\x8b\x90\x96\r\xb9\xda\xc0\xda\xadjF\x06\x8dE\x99\x16\xc9C\xd9\xfc\xf0\xf8@\xee\xfe\x1f\xae-\xe3P') 10:41:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) socketpair(0x10, 0x6, 0x200, &(0x7f0000000100)) r1 = syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x10, 0x1, 0x5, 0x1, 0x0, 0x7b, 0x40040, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x23, 0x0, @perf_bp={&(0x7f0000000340), 0x1}, 0x4201, 0x5, 0x81, 0x1, 0x975c, 0x80, 0x9, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r1, 0x4, 0xffffffffffffffff, 0x8) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r1, r0, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) (async) syz_clone(0x102000, &(0x7f0000000000)="657b2f57094a44c5b92bac24e362a76adfb6d2aa6a5db4eea1cae2be13026da9eff01694266c3024aad6ffe1566b57e903be52b4a56780b30d1bb1e0fc8a5161de0f01f968a8021a029caaf3c22f7db0828e12c61e247eed074d35be1c985575434c3389", 0x64, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)="38012ab052ffeb3b0cee02e8e6b48d25614f7237d9433d9a95f96b9da4538a937a7ab671682cc02a76468093d4394036451a03e2bb75a2be99e32586671478c173ec9c26d0caa1c5430eecaa10375b61c2cb0c4e40d128ce899909bc4ba7221eb26dd482fdc2dd233e203e5b2542449be5d4745e419ac16a26180781aa38a63f65002d59b84f8592057e561d7aca3357daa5afd7e88c4a03c0ca0d6a8e2a716d114035ce1fd8a7143fe007b0c67976f0ee98e2253ef20fca39e5bb1f4a66299a7fb8def65d6bdaa4fc1def3581fcdf009d5d03c98865b38480262d1aa3116846f71aeae197") (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) [ 2390.659025][ T5091] CPU: 0 PID: 5091 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2390.669107][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2390.679000][ T5091] Call Trace: [ 2390.682120][ T5091] [ 2390.684900][ T5091] dump_stack_lvl+0x151/0x1b7 [ 2390.689416][ T5091] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2390.695402][ T5091] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2390.700867][ T5091] ? __wake_up_klogd+0xd5/0x110 [ 2390.705561][ T5091] ? dump_stack+0x9/0x17 [ 2390.709641][ T5091] dump_stack+0x15/0x17 [ 2390.713627][ T5091] should_fail+0x3c6/0x510 [ 2390.717877][ T5091] __should_failslab+0xa4/0xe0 [ 2390.722482][ T5091] ? anon_vma_clone+0x9a/0x500 [ 2390.727084][ T5091] should_failslab+0x9/0x20 [ 2390.731416][ T5091] slab_pre_alloc_hook+0x37/0xd0 [ 2390.736188][ T5091] ? anon_vma_clone+0x9a/0x500 [ 2390.740792][ T5091] kmem_cache_alloc+0x44/0x200 [ 2390.745403][ T5091] anon_vma_clone+0x9a/0x500 [ 2390.749816][ T5091] anon_vma_fork+0x91/0x4e0 [ 2390.754165][ T5091] ? anon_vma_name+0x4c/0x70 [ 2390.758583][ T5091] ? vm_area_dup+0x17a/0x230 [ 2390.763008][ T5091] copy_mm+0xa3a/0x13e0 [ 2390.767785][ T5091] ? copy_signal+0x610/0x610 [ 2390.772208][ T5091] ? __init_rwsem+0xd6/0x1c0 [ 2390.776720][ T5091] ? copy_signal+0x4e3/0x610 [ 2390.781154][ T5091] copy_process+0x12bc/0x3260 [ 2390.785663][ T5091] ? timerqueue_add+0x250/0x270 [ 2390.790348][ T5091] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2390.795295][ T5091] ? enqueue_hrtimer+0xca/0x240 [ 2390.799981][ T5091] ? __hrtimer_run_queues+0x46b/0xad0 [ 2390.805193][ T5091] kernel_clone+0x21e/0x9e0 [ 2390.809530][ T5091] ? create_io_thread+0x1e0/0x1e0 [ 2390.814387][ T5091] ? clockevents_program_event+0x22f/0x300 [ 2390.820028][ T5091] __x64_sys_clone+0x23f/0x290 [ 2390.824627][ T5091] ? __do_sys_vfork+0x130/0x130 [ 2390.829322][ T5091] do_syscall_64+0x3d/0xb0 [ 2390.833571][ T5091] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2390.839209][ T5091] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2390.844952][ T5091] RIP: 0033:0x7f977f216ae9 [ 2390.849192][ T5091] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2390.868634][ T5091] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2390.876876][ T5091] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2390.884687][ T5091] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2390.892499][ T5091] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2390.900311][ T5091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 10:41:30 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000000100009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd2, 0x7, 0x20, 0x3, 0x0, 0x5, 0x4515, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x18}, 0x2, 0x401, 0x9, 0x3, 0x2, 0x1f, 0xbf4, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r11, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) [ 2390.908128][ T5091] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2390.915939][ T5091] 10:41:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 81) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x3000}, 0x80) 10:41:30 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000000100009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd2, 0x7, 0x20, 0x3, 0x0, 0x5, 0x4515, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x18}, 0x2, 0x401, 0x9, 0x3, 0x2, 0x1f, 0xbf4, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r11, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) 10:41:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7bffffff}, 0x80) 10:41:30 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000effffffffffffff7f0000002733a8148f54f974c0f45b2aae4e713f9a048854a12ccb9c268335b6ee73dc923b1567894c757d8f190be0d1d919e90ce9e59575b8cba9afbbd2fdc6cc570d57ea2269f92b21f9062182546f1e920711b08b2be05db961e234a525915b944b96523a8f570edfc7e67cf033dbc1ae83adab723ae532b6560fec73990dba1974bff2c3fef1b496e73c284f0c7921a7cbc9747b89cd3567f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:41:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x10, 0x6, 0x200, &(0x7f0000000100)) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x10, 0x1, 0x5, 0x1, 0x0, 0x7b, 0x40040, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x23, 0x0, @perf_bp={&(0x7f0000000340), 0x1}, 0x4201, 0x5, 0x81, 0x1, 0x975c, 0x80, 0x9, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r1, 0x4, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x10, 0x1, 0x5, 0x1, 0x0, 0x7b, 0x40040, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x23, 0x0, @perf_bp={&(0x7f0000000340), 0x1}, 0x4201, 0x5, 0x81, 0x1, 0x975c, 0x80, 0x9, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r1, 0x4, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r1, r0, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) syz_clone(0x102000, &(0x7f0000000000)="657b2f57094a44c5b92bac24e362a76adfb6d2aa6a5db4eea1cae2be13026da9eff01694266c3024aad6ffe1566b57e903be52b4a56780b30d1bb1e0fc8a5161de0f01f968a8021a029caaf3c22f7db0828e12c61e247eed074d35be1c985575434c3389", 0x64, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)="38012ab052ffeb3b0cee02e8e6b48d25614f7237d9433d9a95f96b9da4538a937a7ab671682cc02a76468093d4394036451a03e2bb75a2be99e32586671478c173ec9c26d0caa1c5430eecaa10375b61c2cb0c4e40d128ce899909bc4ba7221eb26dd482fdc2dd233e203e5b2542449be5d4745e419ac16a26180781aa38a63f65002d59b84f8592057e561d7aca3357daa5afd7e88c4a03c0ca0d6a8e2a716d114035ce1fd8a7143fe007b0c67976f0ee98e2253ef20fca39e5bb1f4a66299a7fb8def65d6bdaa4fc1def3581fcdf009d5d03c98865b38480262d1aa3116846f71aeae197") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:30 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000000000000100009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) (rerun: 32) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 32) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) (async) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd2, 0x7, 0x20, 0x3, 0x0, 0x5, 0x4515, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x18}, 0x2, 0x401, 0x9, 0x3, 0x2, 0x1f, 0xbf4, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r11, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0xc020660b, &(0x7f0000000040)) 10:41:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7cffffff}, 0x80) 10:41:30 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000008100000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r2, 0x6, r3, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3, 0x0, 0x3, 0x1f, 0x0, 0x5, 0x30050, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x300, 0x2, 0x1, 0x2, 0x2f70, 0x8, 0x1ff, 0x0, 0x2, 0x0, 0x3b}, r2, 0x2, r4, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f0000000040)) [ 2391.487000][ T5156] FAULT_INJECTION: forcing a failure. [ 2391.487000][ T5156] name failslab, interval 1, probability 0, space 0, times 0 [ 2391.550205][ T5156] CPU: 1 PID: 5156 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2391.560296][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2391.570186][ T5156] Call Trace: [ 2391.573304][ T5156] [ 2391.576085][ T5156] dump_stack_lvl+0x151/0x1b7 [ 2391.580596][ T5156] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2391.586070][ T5156] dump_stack+0x15/0x17 [ 2391.590056][ T5156] should_fail+0x3c6/0x510 [ 2391.594311][ T5156] __should_failslab+0xa4/0xe0 [ 2391.598910][ T5156] ? anon_vma_fork+0xf7/0x4e0 [ 2391.603421][ T5156] should_failslab+0x9/0x20 [ 2391.607765][ T5156] slab_pre_alloc_hook+0x37/0xd0 [ 2391.612537][ T5156] ? anon_vma_fork+0xf7/0x4e0 [ 2391.617046][ T5156] kmem_cache_alloc+0x44/0x200 [ 2391.621646][ T5156] anon_vma_fork+0xf7/0x4e0 [ 2391.625997][ T5156] copy_mm+0xa3a/0x13e0 [ 2391.629982][ T5156] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2391.636003][ T5156] ? copy_signal+0x610/0x610 [ 2391.640399][ T5156] ? copy_process+0x127f/0x3260 [ 2391.645086][ T5156] copy_process+0x12bc/0x3260 [ 2391.649598][ T5156] ? timerqueue_add+0x250/0x270 [ 2391.654316][ T5156] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2391.659236][ T5156] ? enqueue_hrtimer+0xca/0x240 [ 2391.663928][ T5156] ? __hrtimer_run_queues+0x46b/0xad0 [ 2391.669123][ T5156] kernel_clone+0x21e/0x9e0 [ 2391.673464][ T5156] ? create_io_thread+0x1e0/0x1e0 [ 2391.678321][ T5156] ? clockevents_program_event+0x22f/0x300 [ 2391.683977][ T5156] __x64_sys_clone+0x23f/0x290 [ 2391.688566][ T5156] ? __do_sys_vfork+0x130/0x130 [ 2391.693253][ T5156] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2391.699066][ T5156] do_syscall_64+0x3d/0xb0 [ 2391.703317][ T5156] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2391.708967][ T5156] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2391.714688][ T5156] RIP: 0033:0x7f977f216ae9 [ 2391.719039][ T5156] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2391.738468][ T5156] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 10:41:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7dffffff}, 0x80) [ 2391.746713][ T5156] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2391.754524][ T5156] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2391.762334][ T5156] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2391.770149][ T5156] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2391.777965][ T5156] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2391.785777][ T5156] 10:41:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x3001}, 0x80) 10:41:31 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000008100000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) r2 = getpid() (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r2, 0x6, r3, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3, 0x0, 0x3, 0x1f, 0x0, 0x5, 0x30050, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x300, 0x2, 0x1, 0x2, 0x2f70, 0x8, 0x1ff, 0x0, 0x2, 0x0, 0x3b}, r2, 0x2, r4, 0x8) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f0000000040)) 10:41:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 82) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:31 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000500000000008100000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) r2 = getpid() (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x4d, 0x1f, 0xff, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4000, 0x7, 0x2f, 0x8, 0x2, 0xffff, 0x0, 0x0, 0xfffeffff, 0x0, 0x4}, r2, 0x6, r3, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3, 0x0, 0x3, 0x1f, 0x0, 0x5, 0x30050, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x300, 0x2, 0x1, 0x2, 0x2f70, 0x8, 0x1ff, 0x0, 0x2, 0x0, 0x3b}, r2, 0x2, r4, 0x8) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f0000000040)) 10:41:31 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7effffff}, 0x80) 10:41:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x3801}, 0x80) [ 2392.265470][ T5206] FAULT_INJECTION: forcing a failure. [ 2392.265470][ T5206] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.299422][ T5206] CPU: 1 PID: 5206 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2392.309514][ T5206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2392.319417][ T5206] Call Trace: [ 2392.322524][ T5206] [ 2392.325304][ T5206] dump_stack_lvl+0x151/0x1b7 [ 2392.329816][ T5206] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2392.335287][ T5206] ? avc_denied+0x1b0/0x1b0 [ 2392.339622][ T5206] dump_stack+0x15/0x17 [ 2392.343614][ T5206] should_fail+0x3c6/0x510 [ 2392.347868][ T5206] __should_failslab+0xa4/0xe0 [ 2392.352467][ T5206] ? vm_area_dup+0x26/0x230 [ 2392.356809][ T5206] should_failslab+0x9/0x20 [ 2392.361148][ T5206] slab_pre_alloc_hook+0x37/0xd0 [ 2392.366008][ T5206] ? vm_area_dup+0x26/0x230 [ 2392.370347][ T5206] kmem_cache_alloc+0x44/0x200 [ 2392.374945][ T5206] vm_area_dup+0x26/0x230 [ 2392.379123][ T5206] copy_mm+0x9a1/0x13e0 [ 2392.383106][ T5206] ? copy_signal+0x610/0x610 [ 2392.387529][ T5206] ? __init_rwsem+0xd6/0x1c0 [ 2392.391968][ T5206] ? copy_signal+0x4e3/0x610 [ 2392.396385][ T5206] copy_process+0x12bc/0x3260 [ 2392.400904][ T5206] ? timerqueue_add+0x250/0x270 [ 2392.405590][ T5206] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2392.410532][ T5206] ? enqueue_hrtimer+0xca/0x240 [ 2392.415219][ T5206] ? __hrtimer_run_queues+0x46b/0xad0 [ 2392.420425][ T5206] kernel_clone+0x21e/0x9e0 [ 2392.424763][ T5206] ? create_io_thread+0x1e0/0x1e0 [ 2392.429622][ T5206] ? clockevents_program_event+0x22f/0x300 [ 2392.435266][ T5206] __x64_sys_clone+0x23f/0x290 [ 2392.439864][ T5206] ? __do_sys_vfork+0x130/0x130 [ 2392.444561][ T5206] ? debug_smp_processor_id+0x17/0x20 [ 2392.449759][ T5206] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2392.455660][ T5206] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2392.461128][ T5206] do_syscall_64+0x3d/0xb0 [ 2392.465379][ T5206] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2392.471020][ T5206] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2392.476750][ T5206] RIP: 0033:0x7f977f216ae9 [ 2392.481005][ T5206] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2392.500444][ T5206] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2392.508687][ T5206] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2392.516500][ T5206] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2392.524312][ T5206] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2392.532120][ T5206] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2392.539937][ T5206] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2392.547748][ T5206] 10:41:31 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000effffffffffffff7f0000002733a8148f54f974c0f45b2aae4e713f9a048854a12ccb9c268335b6ee73dc923b1567894c757d8f190be0d1d919e90ce9e59575b8cba9afbbd2fdc6cc570d57ea2269f92b21f9062182546f1e920711b08b2be05db961e234a525915b944b96523a8f570edfc7e67cf033dbc1ae83adab723ae532b6560fec73990dba1974bff2c3fef1b496e73c284f0c7921a7cbc9747b89cd3567f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) (async) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000effffffffffffff7f0000002733a8148f54f974c0f45b2aae4e713f9a048854a12ccb9c268335b6ee73dc923b1567894c757d8f190be0d1d919e90ce9e59575b8cba9afbbd2fdc6cc570d57ea2269f92b21f9062182546f1e920711b08b2be05db961e234a525915b944b96523a8f570edfc7e67cf033dbc1ae83adab723ae532b6560fec73990dba1974bff2c3fef1b496e73c284f0c7921a7cbc9747b89cd3567f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) 10:41:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x81, 0x2, 0x30, 0x5, 0x0, 0x1, 0x20005, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x81205, 0x1, 0x70f, 0x0, 0xc000000000, 0xd1, 0xf4c5, 0x0, 0x5, 0x0, 0x9}, r0, 0x0, r11, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r9, 0x4) 10:41:32 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="f21ed55a8818000000050000000000000000000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x80ffffff}, 0x80) 10:41:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x3a01}, 0x80) 10:41:32 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000effffffffffffff7f0000002733a8148f54f974c0f45b2aae4e713f9a048854a12ccb9c268335b6ee73dc923b1567894c757d8f190be0d1d919e90ce9e59575b8cba9afbbd2fdc6cc570d57ea2269f92b21f9062182546f1e920711b08b2be05db961e234a525915b944b96523a8f570edfc7e67cf033dbc1ae83adab723ae532b6560fec73990dba1974bff2c3fef1b496e73c284f0c7921a7cbc9747b89cd3567f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:41:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 83) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:32 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="f21ed55a8818000000050000000000000000000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x81ffffff}, 0x80) [ 2393.126872][ T5249] FAULT_INJECTION: forcing a failure. [ 2393.126872][ T5249] name failslab, interval 1, probability 0, space 0, times 0 [ 2393.184089][ T5249] CPU: 1 PID: 5249 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2393.194180][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2393.204079][ T5249] Call Trace: [ 2393.207200][ T5249] [ 2393.209981][ T5249] dump_stack_lvl+0x151/0x1b7 [ 2393.214493][ T5249] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2393.220078][ T5249] dump_stack+0x15/0x17 [ 2393.224072][ T5249] should_fail+0x3c6/0x510 [ 2393.228322][ T5249] __should_failslab+0xa4/0xe0 [ 2393.232930][ T5249] ? anon_vma_fork+0x1df/0x4e0 [ 2393.237517][ T5249] should_failslab+0x9/0x20 [ 2393.241857][ T5249] slab_pre_alloc_hook+0x37/0xd0 [ 2393.246632][ T5249] ? anon_vma_fork+0x1df/0x4e0 [ 2393.251231][ T5249] kmem_cache_alloc+0x44/0x200 [ 2393.255834][ T5249] anon_vma_fork+0x1df/0x4e0 [ 2393.260262][ T5249] copy_mm+0xa3a/0x13e0 [ 2393.264351][ T5249] ? copy_signal+0x610/0x610 [ 2393.268775][ T5249] copy_process+0x12bc/0x3260 [ 2393.273389][ T5249] ? timerqueue_add+0x250/0x270 [ 2393.278060][ T5249] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2393.283005][ T5249] ? enqueue_hrtimer+0xca/0x240 [ 2393.287694][ T5249] ? __hrtimer_run_queues+0x46b/0xad0 [ 2393.292903][ T5249] kernel_clone+0x21e/0x9e0 [ 2393.297241][ T5249] ? irqentry_exit+0x30/0x40 [ 2393.301664][ T5249] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2393.307306][ T5249] ? create_io_thread+0x1e0/0x1e0 [ 2393.312175][ T5249] __x64_sys_clone+0x23f/0x290 [ 2393.316773][ T5249] ? __do_sys_vfork+0x130/0x130 [ 2393.321461][ T5249] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2393.327276][ T5249] do_syscall_64+0x3d/0xb0 [ 2393.331520][ T5249] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2393.337198][ T5249] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2393.342891][ T5249] RIP: 0033:0x7f977f216ae9 [ 2393.347150][ T5249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2393.366586][ T5249] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2393.374835][ T5249] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 10:41:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x3f00}, 0x80) [ 2393.382641][ T5249] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2393.390552][ T5249] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2393.398369][ T5249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2393.406174][ T5249] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2393.413992][ T5249] [ 2393.493293][ T5249] ================================================================== [ 2393.501205][ T5249] BUG: KASAN: use-after-free in vm_area_free_no_check+0x7e/0x130 [ 2393.508752][ T5249] Write of size 4 at addr ffff8881172e6d10 by task syz-executor.4/5249 [ 2393.516916][ T5249] [ 2393.519087][ T5249] CPU: 1 PID: 5249 Comm: syz-executor.4 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2393.529156][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2393.539048][ T5249] Call Trace: [ 2393.542168][ T5249] [ 2393.544948][ T5249] dump_stack_lvl+0x151/0x1b7 [ 2393.549461][ T5249] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2393.554930][ T5249] ? panic+0x751/0x751 [ 2393.558834][ T5249] ? slab_free_freelist_hook+0xbd/0x190 [ 2393.564213][ T5249] print_address_description+0x87/0x3b0 [ 2393.569603][ T5249] kasan_report+0x179/0x1c0 [ 2393.573936][ T5249] ? vm_area_free_no_check+0x7e/0x130 [ 2393.579140][ T5249] ? vm_area_free_no_check+0x7e/0x130 [ 2393.584350][ T5249] kasan_check_range+0x293/0x2a0 [ 2393.589121][ T5249] __kasan_check_write+0x14/0x20 [ 2393.593894][ T5249] vm_area_free_no_check+0x7e/0x130 [ 2393.598933][ T5249] copy_mm+0xefb/0x13e0 [ 2393.602927][ T5249] ? copy_signal+0x610/0x610 [ 2393.607351][ T5249] copy_process+0x12bc/0x3260 [ 2393.611875][ T5249] ? timerqueue_add+0x250/0x270 [ 2393.616685][ T5249] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2393.621585][ T5249] ? enqueue_hrtimer+0xca/0x240 [ 2393.626267][ T5249] ? __hrtimer_run_queues+0x46b/0xad0 [ 2393.631477][ T5249] kernel_clone+0x21e/0x9e0 [ 2393.635820][ T5249] ? irqentry_exit+0x30/0x40 [ 2393.640243][ T5249] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2393.645884][ T5249] ? create_io_thread+0x1e0/0x1e0 [ 2393.650747][ T5249] __x64_sys_clone+0x23f/0x290 [ 2393.655350][ T5249] ? __do_sys_vfork+0x130/0x130 [ 2393.660032][ T5249] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2393.665848][ T5249] do_syscall_64+0x3d/0xb0 [ 2393.670097][ T5249] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2393.675913][ T5249] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2393.681639][ T5249] RIP: 0033:0x7f977f216ae9 [ 2393.685898][ T5249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2393.705339][ T5249] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2393.713584][ T5249] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2393.721392][ T5249] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2393.729206][ T5249] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2393.737032][ T5249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2393.744826][ T5249] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2393.752645][ T5249] [ 2393.755499][ T5249] [ 2393.757672][ T5249] Allocated by task 5206: [ 2393.761840][ T5249] __kasan_slab_alloc+0xb1/0xe0 [ 2393.766524][ T5249] slab_post_alloc_hook+0x53/0x2c0 [ 2393.771469][ T5249] kmem_cache_alloc+0xf5/0x200 [ 2393.776069][ T5249] vm_area_dup+0x26/0x230 [ 2393.780237][ T5249] copy_mm+0x9a1/0x13e0 [ 2393.784248][ T5249] copy_process+0x12bc/0x3260 [ 2393.788742][ T5249] kernel_clone+0x21e/0x9e0 [ 2393.793080][ T5249] __x64_sys_clone+0x23f/0x290 [ 2393.797687][ T5249] do_syscall_64+0x3d/0xb0 [ 2393.801934][ T5249] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2393.807665][ T5249] [ 2393.809831][ T5249] Freed by task 5270: [ 2393.813648][ T5249] kasan_set_track+0x4b/0x70 [ 2393.818076][ T5249] kasan_set_free_info+0x23/0x40 [ 2393.822848][ T5249] ____kasan_slab_free+0x126/0x160 [ 2393.827823][ T5249] __kasan_slab_free+0x11/0x20 [ 2393.832398][ T5249] slab_free_freelist_hook+0xbd/0x190 [ 2393.837602][ T5249] kmem_cache_free+0x116/0x2e0 [ 2393.842202][ T5249] __free_vm_area_struct+0x1c/0x20 [ 2393.847150][ T5249] rcu_do_batch+0x57a/0xc10 [ 2393.851493][ T5249] rcu_core+0x517/0x1020 [ 2393.855575][ T5249] rcu_core_si+0x9/0x10 [ 2393.859563][ T5249] __do_softirq+0x26d/0x5bf [ 2393.863905][ T5249] [ 2393.866071][ T5249] Last potentially related work creation: [ 2393.871629][ T5249] kasan_save_stack+0x3b/0x60 [ 2393.876286][ T5249] __kasan_record_aux_stack+0xd3/0xf0 [ 2393.881480][ T5249] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2393.887112][ T5249] call_rcu+0x133/0x12a0 [ 2393.891191][ T5249] vm_area_free_no_check+0xff/0x130 [ 2393.896227][ T5249] vm_area_free+0x53/0x60 [ 2393.900389][ T5249] exit_mmap+0x50d/0x6f0 [ 2393.904465][ T5249] __mmput+0x95/0x310 [ 2393.908299][ T5249] mmput+0x5b/0x170 [ 2393.911929][ T5249] do_exit+0xbb4/0x2b60 [ 2393.915921][ T5249] __ia32_sys_exit+0x0/0x40 [ 2393.920551][ T5249] do_syscall_64+0x3d/0xb0 [ 2393.924789][ T5249] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2393.930514][ T5249] [ 2393.932693][ T5249] Second to last potentially related work creation: [ 2393.939288][ T5249] kasan_save_stack+0x3b/0x60 [ 2393.943796][ T5249] __kasan_record_aux_stack+0xd3/0xf0 [ 2393.949000][ T5249] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2393.954640][ T5249] call_rcu+0x133/0x12a0 [ 2393.958719][ T5249] vm_area_free_no_check+0xff/0x130 [ 2393.963754][ T5249] vm_area_free+0x53/0x60 [ 2393.967925][ T5249] exit_mmap+0x50d/0x6f0 [ 2393.972005][ T5249] __mmput+0x95/0x310 [ 2393.975818][ T5249] mmput+0x5b/0x170 [ 2393.979550][ T5249] do_exit+0xbb4/0x2b60 [ 2393.983542][ T5249] do_group_exit+0x141/0x310 [ 2393.987969][ T5249] get_signal+0x7a3/0x1630 [ 2393.992220][ T5249] arch_do_signal_or_restart+0xbd/0x1680 [ 2393.997693][ T5249] exit_to_user_mode_loop+0xa0/0xe0 [ 2394.002736][ T5249] exit_to_user_mode_prepare+0x5a/0xa0 [ 2394.008024][ T5249] irqentry_exit_to_user_mode+0x9/0x20 [ 2394.013311][ T5249] irqentry_exit+0x12/0x40 [ 2394.017567][ T5249] sysvec_apic_timer_interrupt+0x55/0xc0 [ 2394.023033][ T5249] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2394.028846][ T5249] [ 2394.031016][ T5249] The buggy address belongs to the object at ffff8881172e6cb8 [ 2394.031016][ T5249] which belongs to the cache vm_area_struct of size 232 [ 2394.045165][ T5249] The buggy address is located 88 bytes inside of [ 2394.045165][ T5249] 232-byte region [ffff8881172e6cb8, ffff8881172e6da0) [ 2394.058272][ T5249] The buggy address belongs to the page: [ 2394.063747][ T5249] page:ffffea00045cb980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1172e6 [ 2394.073812][ T5249] flags: 0x4000000000000200(slab|zone=1) [ 2394.079295][ T5249] raw: 4000000000000200 0000000000000000 0000000400000001 ffff8881001bd380 [ 2394.087788][ T5249] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 2394.096199][ T5249] page dumped because: kasan: bad access detected [ 2394.102447][ T5249] page_owner tracks the page as allocated [ 2394.108000][ T5249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 11697, ts 2372640230988, free_ts 2372633712245 [ 2394.124241][ T5249] post_alloc_hook+0x1a3/0x1b0 [ 2394.128832][ T5249] prep_new_page+0x1b/0x110 [ 2394.133169][ T5249] get_page_from_freelist+0x3550/0x35d0 [ 2394.138559][ T5249] __alloc_pages+0x206/0x5e0 [ 2394.142985][ T5249] new_slab+0x9a/0x4e0 [ 2394.146891][ T5249] ___slab_alloc+0x39e/0x830 [ 2394.151309][ T5249] __slab_alloc+0x4a/0x90 [ 2394.155481][ T5249] kmem_cache_alloc+0x134/0x200 [ 2394.160280][ T5249] vm_area_dup+0x26/0x230 [ 2394.164442][ T5249] copy_mm+0x9a1/0x13e0 [ 2394.168434][ T5249] copy_process+0x12bc/0x3260 [ 2394.172956][ T5249] kernel_clone+0x21e/0x9e0 [ 2394.177292][ T5249] __x64_sys_clone+0x23f/0x290 [ 2394.181889][ T5249] do_syscall_64+0x3d/0xb0 [ 2394.186143][ T5249] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2394.191872][ T5249] page last free stack trace: [ 2394.196393][ T5249] free_unref_page_prepare+0x7c8/0x7d0 [ 2394.201677][ T5249] free_unref_page_list+0x14b/0xa60 [ 2394.206716][ T5249] release_pages+0x1310/0x1370 [ 2394.211317][ T5249] free_pages_and_swap_cache+0x8a/0xa0 [ 2394.216609][ T5249] tlb_finish_mmu+0x177/0x320 [ 2394.221126][ T5249] exit_mmap+0x3ef/0x6f0 [ 2394.225206][ T5249] __mmput+0x95/0x310 [ 2394.229192][ T5249] mmput+0x5b/0x170 [ 2394.232837][ T5249] do_exit+0xbb4/0x2b60 [ 2394.236833][ T5249] __ia32_sys_exit+0x0/0x40 [ 2394.241167][ T5249] do_syscall_64+0x3d/0xb0 [ 2394.245417][ T5249] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2394.251156][ T5249] [ 2394.253318][ T5249] Memory state around the buggy address: [ 2394.258792][ T5249] ffff8881172e6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 2394.266687][ T5249] ffff8881172e6c80: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 2394.275046][ T5249] >ffff8881172e6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2394.282928][ T5249] ^ [ 2394.287360][ T5249] ffff8881172e6d80: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb [ 2394.295274][ T5249] ffff8881172e6e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2394.303151][ T5249] ================================================================== [ 2394.311045][ T5249] Disabling lock debugging due to kernel taint 10:41:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x82ffffff}, 0x80) 10:41:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x81, 0x2, 0x30, 0x5, 0x0, 0x1, 0x20005, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x81205, 0x1, 0x70f, 0x0, 0xc000000000, 0xd1, 0xf4c5, 0x0, 0x5, 0x0, 0x9}, r0, 0x0, r11, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r9, 0x4) 10:41:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x4000}, 0x80) 10:41:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x83ffffff}, 0x80) 10:41:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2394.663352][ T5297] FAULT_INJECTION: forcing a failure. [ 2394.663352][ T5297] name failslab, interval 1, probability 0, space 0, times 0 [ 2394.695268][ T5297] CPU: 0 PID: 5297 Comm: syz-executor.4 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2394.706752][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2394.716643][ T5297] Call Trace: [ 2394.719770][ T5297] [ 2394.722556][ T5297] dump_stack_lvl+0x151/0x1b7 [ 2394.727059][ T5297] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2394.732530][ T5297] dump_stack+0x15/0x17 [ 2394.736518][ T5297] should_fail+0x3c6/0x510 [ 2394.740775][ T5297] __should_failslab+0xa4/0xe0 [ 2394.745372][ T5297] ? vm_area_dup+0x26/0x230 [ 2394.749710][ T5297] should_failslab+0x9/0x20 [ 2394.754053][ T5297] slab_pre_alloc_hook+0x37/0xd0 [ 2394.758825][ T5297] ? vm_area_dup+0x26/0x230 10:41:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x5603}, 0x80) 10:41:34 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='syzkaller\x00'}, 0x90) [ 2394.763162][ T5297] kmem_cache_alloc+0x44/0x200 [ 2394.767771][ T5297] vm_area_dup+0x26/0x230 [ 2394.771931][ T5297] copy_mm+0x9a1/0x13e0 [ 2394.776011][ T5297] ? copy_signal+0x610/0x610 [ 2394.780435][ T5297] ? __init_rwsem+0xd6/0x1c0 [ 2394.784863][ T5297] ? copy_signal+0x4e3/0x610 [ 2394.789295][ T5297] copy_process+0x12bc/0x3260 [ 2394.793803][ T5297] ? timerqueue_add+0x250/0x270 [ 2394.798494][ T5297] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2394.803434][ T5297] ? enqueue_hrtimer+0xca/0x240 [ 2394.808120][ T5297] ? __hrtimer_run_queues+0x46b/0xad0 [ 2394.813336][ T5297] kernel_clone+0x21e/0x9e0 [ 2394.817682][ T5297] ? create_io_thread+0x1e0/0x1e0 [ 2394.822531][ T5297] ? clockevents_program_event+0x22f/0x300 [ 2394.828178][ T5297] __x64_sys_clone+0x23f/0x290 [ 2394.832770][ T5297] ? __do_sys_vfork+0x130/0x130 [ 2394.837459][ T5297] ? debug_smp_processor_id+0x17/0x20 [ 2394.842662][ T5297] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2394.848569][ T5297] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2394.854034][ T5297] do_syscall_64+0x3d/0xb0 [ 2394.858286][ T5297] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2394.863929][ T5297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2394.869655][ T5297] RIP: 0033:0x7f977f216ae9 [ 2394.873908][ T5297] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2394.893357][ T5297] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2394.901595][ T5297] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 10:41:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x84ffffff}, 0x80) [ 2394.909407][ T5297] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2394.917219][ T5297] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2394.925030][ T5297] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2394.932929][ T5297] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2394.940747][ T5297] 10:41:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x85ffffff}, 0x80) 10:41:34 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="f21ed55a8818000000050000000000000000000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x6000}, 0x80) 10:41:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r3, 0x4) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r2, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r3, r1, 0x0, &(0x7f0000000680)=[r5, 0x1, 0x1, 0x1]}, 0x80) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r6, 0x1, 0x1, 0x1]}, 0x80) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r8, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r9, r7, 0x0, &(0x7f0000000680)=[r10, 0x1, 0x1, 0x1]}, 0x80) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r5, 0xffffffffffffffff, r6, r5, r10, r5, r5, r11, 0x1]}, 0x80) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x81, 0x2, 0x30, 0x5, 0x0, 0x1, 0x20005, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x81205, 0x1, 0x70f, 0x0, 0xc000000000, 0xd1, 0xf4c5, 0x0, 0x5, 0x0, 0x9}, r0, 0x0, r11, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r9, 0x4) 10:41:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000100)) 10:41:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x86ffffff}, 0x80) 10:41:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003140)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}, 0x2001) 10:41:34 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) 10:41:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 85) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:34 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x90) 10:41:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x87ffffff}, 0x80) 10:41:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x7000}, 0x80) 10:41:34 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x200000, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200), 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000380)}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3f, 0x3f, 0x4, 0x1, 0x0, 0x8000000000000001, 0x9179dd040ca81511, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x4, 0x6}, 0x1a0a, 0xd805, 0x3, 0x6, 0x401, 0xff, 0x7f, 0x0, 0x10001, 0x0, 0x9}, r1, 0x2, r0, 0x2) [ 2395.587936][ T5368] FAULT_INJECTION: forcing a failure. [ 2395.587936][ T5368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2395.631473][ T5368] CPU: 1 PID: 5368 Comm: syz-executor.4 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2395.642954][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2395.652848][ T5368] Call Trace: [ 2395.655972][ T5368] [ 2395.658746][ T5368] dump_stack_lvl+0x151/0x1b7 [ 2395.663264][ T5368] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2395.668751][ T5368] ? kvm_sched_clock_read+0x18/0x40 [ 2395.673760][ T5368] ? sched_clock+0x9/0x10 [ 2395.677931][ T5368] ? sched_clock_cpu+0x18/0x3b0 [ 2395.682618][ T5368] ? _raw_spin_lock+0xa4/0x1b0 [ 2395.687217][ T5368] dump_stack+0x15/0x17 [ 2395.691209][ T5368] should_fail+0x3c6/0x510 [ 2395.695467][ T5368] should_fail_alloc_page+0x5a/0x80 [ 2395.700495][ T5368] prepare_alloc_pages+0x15c/0x700 [ 2395.705457][ T5368] ? __alloc_pages_bulk+0xe60/0xe60 [ 2395.710477][ T5368] ? native_set_ldt+0x360/0x360 [ 2395.715162][ T5368] __alloc_pages+0x138/0x5e0 [ 2395.719586][ T5368] ? _raw_spin_unlock+0x4d/0x70 [ 2395.724279][ T5368] ? prep_new_page+0x110/0x110 [ 2395.729053][ T5368] pte_alloc_one+0x73/0x1b0 [ 2395.733387][ T5368] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2395.738422][ T5368] ? preempt_schedule+0xd9/0xe0 [ 2395.743111][ T5368] ? preempt_schedule_common+0xbe/0xf0 [ 2395.748405][ T5368] __pte_alloc+0x86/0x350 [ 2395.752572][ T5368] ? free_pgtables+0x280/0x280 [ 2395.757167][ T5368] ? preempt_schedule_thunk+0x16/0x18 [ 2395.762379][ T5368] copy_page_range+0x28a8/0x2f90 [ 2395.767146][ T5368] ? __kasan_slab_alloc+0xb1/0xe0 [ 2395.772011][ T5368] ? slab_post_alloc_hook+0x53/0x2c0 [ 2395.777132][ T5368] ? do_syscall_64+0x3d/0xb0 [ 2395.781572][ T5368] ? pfn_valid+0x1e0/0x1e0 [ 2395.785806][ T5368] ? __vma_link_rb+0x460/0x550 [ 2395.790402][ T5368] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 2395.795962][ T5368] ? __rb_insert_augmented+0x5de/0x610 [ 2395.801255][ T5368] copy_mm+0xc7e/0x13e0 [ 2395.805243][ T5368] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2395.811241][ T5368] ? copy_signal+0x610/0x610 [ 2395.815659][ T5368] ? __init_rwsem+0xd6/0x1c0 [ 2395.820087][ T5368] ? copy_signal+0x4e3/0x610 [ 2395.824511][ T5368] copy_process+0x12bc/0x3260 [ 2395.829030][ T5368] ? timerqueue_add+0x250/0x270 [ 2395.833716][ T5368] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2395.838657][ T5368] ? enqueue_hrtimer+0xca/0x240 [ 2395.843344][ T5368] ? __hrtimer_run_queues+0x46b/0xad0 [ 2395.848558][ T5368] kernel_clone+0x21e/0x9e0 [ 2395.852893][ T5368] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2395.858533][ T5368] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2395.864522][ T5368] ? create_io_thread+0x1e0/0x1e0 [ 2395.869392][ T5368] ? memset_erms+0xb/0x10 [ 2395.873898][ T5368] __x64_sys_clone+0x23f/0x290 [ 2395.878495][ T5368] ? __do_sys_vfork+0x130/0x130 [ 2395.883188][ T5368] ? debug_smp_processor_id+0x17/0x20 [ 2395.888390][ T5368] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2395.894293][ T5368] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2395.899759][ T5368] do_syscall_64+0x3d/0xb0 [ 2395.904013][ T5368] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2395.909652][ T5368] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2395.915388][ T5368] RIP: 0033:0x7f977f216ae9 [ 2395.919639][ T5368] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2395.939078][ T5368] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2395.947319][ T5368] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2395.955134][ T5368] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2395.962943][ T5368] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2395.971012][ T5368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2395.978823][ T5368] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2395.986643][ T5368] 10:41:35 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x168, 0x0, 0x194}, 0x0, 0x20000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r4, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r5, r3, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r10, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r11, r9, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r7, 0xffffffffffffffff, r8, r7, r12, r7, r7, r13, 0x1]}, 0x80) openat$cgroup_ro(r13, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x88ffffff}, 0x80) 10:41:35 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) 10:41:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x7403}, 0x80) 10:41:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x57}, 0x20) 10:41:35 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) 10:41:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 86) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:36 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000003c0)=@framed, 0x0}, 0x90) 10:41:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x89ffffff}, 0x80) 10:41:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xba02}, 0x80) 10:41:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:36 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x168, 0x0, 0x194}, 0x0, 0x20000000, 0xffffffffffffffff, 0x9) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r4, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r5, r3, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r10, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r11, r9, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r7, 0xffffffffffffffff, r8, r7, r12, r7, r7, r13, 0x1]}, 0x80) openat$cgroup_ro(r13, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x401c5820, &(0x7f0000000040)={'netdevsim0\x00'}) [ 2396.772566][ T5417] FAULT_INJECTION: forcing a failure. [ 2396.772566][ T5417] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.833982][ T5417] CPU: 0 PID: 5417 Comm: syz-executor.4 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2396.845478][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2396.855363][ T5417] Call Trace: [ 2396.858487][ T5417] [ 2396.861261][ T5417] dump_stack_lvl+0x151/0x1b7 [ 2396.865785][ T5417] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2396.871247][ T5417] dump_stack+0x15/0x17 [ 2396.875236][ T5417] should_fail+0x3c6/0x510 [ 2396.879489][ T5417] __should_failslab+0xa4/0xe0 [ 2396.884088][ T5417] ? anon_vma_clone+0x9a/0x500 [ 2396.888702][ T5417] should_failslab+0x9/0x20 [ 2396.893031][ T5417] slab_pre_alloc_hook+0x37/0xd0 [ 2396.897804][ T5417] ? anon_vma_clone+0x9a/0x500 [ 2396.902407][ T5417] kmem_cache_alloc+0x44/0x200 [ 2396.907004][ T5417] anon_vma_clone+0x9a/0x500 [ 2396.911604][ T5417] anon_vma_fork+0x91/0x4e0 [ 2396.915939][ T5417] ? anon_vma_name+0x43/0x70 [ 2396.920802][ T5417] ? vm_area_dup+0x17a/0x230 [ 2396.925228][ T5417] copy_mm+0xa3a/0x13e0 [ 2396.929218][ T5417] ? irqentry_exit+0x30/0x40 [ 2396.933655][ T5417] ? copy_signal+0x610/0x610 [ 2396.938072][ T5417] ? __init_rwsem+0xd6/0x1c0 [ 2396.942497][ T5417] ? copy_signal+0x4e3/0x610 [ 2396.947013][ T5417] copy_process+0x12bc/0x3260 [ 2396.951532][ T5417] ? timerqueue_add+0x250/0x270 [ 2396.956215][ T5417] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2396.961265][ T5417] ? enqueue_hrtimer+0xca/0x240 [ 2396.965946][ T5417] ? __hrtimer_run_queues+0x46b/0xad0 [ 2396.971156][ T5417] kernel_clone+0x21e/0x9e0 [ 2396.975494][ T5417] ? irqentry_exit+0x30/0x40 [ 2396.979922][ T5417] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2396.985563][ T5417] ? create_io_thread+0x1e0/0x1e0 [ 2396.990425][ T5417] __x64_sys_clone+0x23f/0x290 [ 2396.995024][ T5417] ? __do_sys_vfork+0x130/0x130 [ 2396.999710][ T5417] ? debug_smp_processor_id+0x17/0x20 [ 2397.004918][ T5417] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2397.010823][ T5417] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2397.016287][ T5417] do_syscall_64+0x3d/0xb0 [ 2397.020561][ T5417] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2397.026181][ T5417] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2397.031907][ T5417] RIP: 0033:0x7f977f216ae9 [ 2397.036163][ T5417] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2397.055973][ T5417] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2397.064205][ T5417] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2397.072029][ T5417] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 10:41:36 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x168, 0x0, 0x194}, 0x0, 0x20000000, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) (rerun: 64) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r5, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x6, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r4, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r5, r3, 0x0, &(0x7f0000000680)=[r7, 0x1, 0x1, 0x1]}, 0x80) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)=[r8, 0x1, 0x1, 0x1]}, 0x80) (async, rerun: 64) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (rerun: 64) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r11, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit], &(0x7f0000000240)='GPL\x00', 0x5, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x1c, '\x00', 0x0, 0x10, r10, 0x8, &(0x7f00000005c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0xed, 0x5}, 0x10, r11, r9, 0x0, &(0x7f0000000680)=[r12, 0x1, 0x1, 0x1]}, 0x80) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x3, &(0x7f0000000740)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x2b}], &(0x7f0000000780)='syzkaller\x00', 0xfffffffc, 0x0, &(0x7f0000000840), 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000880)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x8c04, 0x10, 0x8, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[r7, 0xffffffffffffffff, r8, r7, r12, r7, r7, r13, 0x1]}, 0x80) (async) openat$cgroup_ro(r13, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8affffff}, 0x80) 10:41:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xec03}, 0x80) [ 2397.079833][ T5417] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2397.087647][ T5417] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2397.095969][ T5417] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2397.103785][ T5417] 10:41:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x100, 0x1}, 0x48) 10:41:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8bffffff}, 0x80) 10:41:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 87) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x2, &(0x7f0000000040)={'wg0\x00'}) 10:41:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8cffffff}, 0x80) 10:41:36 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x1f, 0x4, 0x6, 0x0, 0xcf99, 0x10, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x2, 0x6}, 0x4002, 0x1, 0x6, 0x4, 0x100000000, 0x8, 0x8, 0x0, 0xfa3, 0x0, 0x7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xf201}, 0x80) 10:41:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:37 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000080)=@raw=[@call], &(0x7f00000000c0)='syzkaller\x00', 0x5}, 0x90) [ 2397.704712][ T5473] FAULT_INJECTION: forcing a failure. [ 2397.704712][ T5473] name failslab, interval 1, probability 0, space 0, times 0 [ 2397.742870][ T5473] CPU: 1 PID: 5473 Comm: syz-executor.4 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2397.754351][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2397.764245][ T5473] Call Trace: [ 2397.767367][ T5473] [ 2397.770142][ T5473] dump_stack_lvl+0x151/0x1b7 [ 2397.774659][ T5473] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2397.780123][ T5473] dump_stack+0x15/0x17 [ 2397.784113][ T5473] should_fail+0x3c6/0x510 [ 2397.788363][ T5473] __should_failslab+0xa4/0xe0 [ 2397.793138][ T5473] ? anon_vma_fork+0x1df/0x4e0 [ 2397.797740][ T5473] should_failslab+0x9/0x20 [ 2397.802077][ T5473] slab_pre_alloc_hook+0x37/0xd0 [ 2397.806849][ T5473] ? anon_vma_fork+0x1df/0x4e0 [ 2397.811454][ T5473] kmem_cache_alloc+0x44/0x200 [ 2397.816051][ T5473] anon_vma_fork+0x1df/0x4e0 [ 2397.820481][ T5473] copy_mm+0xa3a/0x13e0 [ 2397.824474][ T5473] ? copy_signal+0x610/0x610 [ 2397.828893][ T5473] ? __init_rwsem+0xd6/0x1c0 [ 2397.833320][ T5473] ? copy_signal+0x4e3/0x610 [ 2397.837751][ T5473] copy_process+0x12bc/0x3260 [ 2397.842262][ T5473] ? proc_fail_nth_write+0x20b/0x290 [ 2397.847386][ T5473] ? fsnotify_perm+0x6a/0x5d0 [ 2397.851898][ T5473] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2397.856840][ T5473] ? vfs_write+0x9ec/0x1110 [ 2397.861183][ T5473] kernel_clone+0x21e/0x9e0 [ 2397.865519][ T5473] ? file_end_write+0x1c0/0x1c0 [ 2397.870206][ T5473] ? create_io_thread+0x1e0/0x1e0 [ 2397.875069][ T5473] ? mutex_unlock+0xb2/0x260 [ 2397.879502][ T5473] ? __mutex_lock_slowpath+0x10/0x10 [ 2397.884621][ T5473] __x64_sys_clone+0x23f/0x290 [ 2397.889213][ T5473] ? __do_sys_vfork+0x130/0x130 [ 2397.893903][ T5473] ? ksys_write+0x260/0x2c0 [ 2397.898242][ T5473] ? debug_smp_processor_id+0x17/0x20 [ 2397.903452][ T5473] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2397.909366][ T5473] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2397.914822][ T5473] do_syscall_64+0x3d/0xb0 [ 2397.919069][ T5473] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2397.924798][ T5473] RIP: 0033:0x7f977f216ae9 [ 2397.929051][ T5473] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 10:41:37 executing program 1: perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:41:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8dffffff}, 0x80) 10:41:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xf801}, 0x80) 10:41:37 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @restrict]}}, &(0x7f0000000240)=""/188, 0x32, 0xbc, 0x1}, 0x20) [ 2397.948495][ T5473] RSP: 002b:00007f977df78078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2397.956825][ T5473] RAX: ffffffffffffffda RBX: 00007f977f336050 RCX: 00007f977f216ae9 [ 2397.964634][ T5473] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2397.972542][ T5473] RBP: 00007f977df78120 R08: 0000000000000000 R09: 0000000000000000 [ 2397.980354][ T5473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2397.988160][ T5473] R13: 000000000000006e R14: 00007f977f336050 R15: 00007fff8c72e058 [ 2397.995981][ T5473] 10:41:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 10:41:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 88) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8effffff}, 0x80) 10:41:37 executing program 1: bpf$MAP_DELETE_ELEM(0xb, 0x0, 0x0) 10:41:37 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x1f, 0x4, 0x6, 0x0, 0xcf99, 0x10, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x2, 0x6}, 0x4002, 0x1, 0x6, 0x4, 0x100000000, 0x8, 0x8, 0x0, 0xfa3, 0x0, 0x7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xfb03}, 0x80) [ 2398.450917][ T5529] FAULT_INJECTION: forcing a failure. [ 2398.450917][ T5529] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.488267][ T5529] CPU: 1 PID: 5529 Comm: syz-executor.4 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2398.499799][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2398.509644][ T5529] Call Trace: [ 2398.512764][ T5529] [ 2398.515545][ T5529] dump_stack_lvl+0x151/0x1b7 [ 2398.520058][ T5529] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2398.525527][ T5529] dump_stack+0x15/0x17 [ 2398.529521][ T5529] should_fail+0x3c6/0x510 [ 2398.533773][ T5529] __should_failslab+0xa4/0xe0 [ 2398.538385][ T5529] ? anon_vma_fork+0xf7/0x4e0 [ 2398.542970][ T5529] should_failslab+0x9/0x20 [ 2398.547314][ T5529] slab_pre_alloc_hook+0x37/0xd0 [ 2398.552087][ T5529] ? anon_vma_fork+0xf7/0x4e0 [ 2398.556593][ T5529] kmem_cache_alloc+0x44/0x200 [ 2398.561206][ T5529] anon_vma_fork+0xf7/0x4e0 [ 2398.565538][ T5529] ? anon_vma_name+0x43/0x70 [ 2398.569963][ T5529] ? vm_area_dup+0x17a/0x230 [ 2398.574388][ T5529] copy_mm+0xa3a/0x13e0 [ 2398.578383][ T5529] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2398.584031][ T5529] ? copy_signal+0x610/0x610 [ 2398.588447][ T5529] ? __init_rwsem+0xd6/0x1c0 [ 2398.592902][ T5529] ? copy_signal+0x4e3/0x610 [ 2398.597302][ T5529] copy_process+0x12bc/0x3260 [ 2398.601821][ T5529] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2398.606774][ T5529] kernel_clone+0x21e/0x9e0 [ 2398.611104][ T5529] ? create_io_thread+0x1e0/0x1e0 [ 2398.615961][ T5529] ? clockevents_program_event+0x22f/0x300 [ 2398.621606][ T5529] __x64_sys_clone+0x23f/0x290 [ 2398.626206][ T5529] ? __do_sys_vfork+0x130/0x130 [ 2398.630897][ T5529] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2398.636709][ T5529] do_syscall_64+0x3d/0xb0 [ 2398.640957][ T5529] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2398.646702][ T5529] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2398.652429][ T5529] RIP: 0033:0x7f977f216ae9 [ 2398.656682][ T5529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2398.676126][ T5529] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2398.684388][ T5529] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2398.692182][ T5529] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 10:41:38 executing program 2: syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x80, 0x99, 0x7f, 0x3f, 0x3, 0x0, 0x80, 0x40, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x58, 0x2, @perf_config_ext={0x6, 0x7}, 0x200, 0x8, 0x0, 0x26dc95e7d20d112b, 0x3, 0x9, 0x0, 0x0, 0x1, 0x0, 0xd9}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x1f, 0x8, 0x7, 0xe4, 0x0, 0x3, 0x4880, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x8949a, 0x5, 0x1ff, 0x3, 0x8000000000000001, 0x200, 0x4, 0x0, 0x5, 0x0, 0xeb}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x81, 0x0, 0x8, 0x81, 0x0, 0xffffffffffff8000, 0xa800, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x20, 0x8, 0xc00, 0x4, 0x400, 0x7f, 0xc000, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x8081) 10:41:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8fffffff}, 0x80) [ 2398.699990][ T5529] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2398.707804][ T5529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2398.715612][ T5529] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2398.723433][ T5529] 10:41:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xff00}, 0x80) 10:41:38 executing program 1: perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:41:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x1f, 0x4, 0x6, 0x0, 0xcf99, 0x10, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x2, 0x6}, 0x4002, 0x1, 0x6, 0x4, 0x100000000, 0x8, 0x8, 0x0, 0xfa3, 0x0, 0x7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpid() sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred, @cred], 0x40}, 0x0) 10:41:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 89) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x90ffffff}, 0x80) 10:41:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10003, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 10:41:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0xf0, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000002b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f08450", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x48) getpid() r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000003c0)='memory.numa_stat\x00') bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10003, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) 10:41:38 executing program 2: syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x80, 0x99, 0x7f, 0x3f, 0x3, 0x0, 0x80, 0x40, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x58, 0x2, @perf_config_ext={0x6, 0x7}, 0x200, 0x8, 0x0, 0x26dc95e7d20d112b, 0x3, 0x9, 0x0, 0x0, 0x1, 0x0, 0xd9}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x1f, 0x8, 0x7, 0xe4, 0x0, 0x3, 0x4880, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x8949a, 0x5, 0x1ff, 0x3, 0x8000000000000001, 0x200, 0x4, 0x0, 0x5, 0x0, 0xeb}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x81, 0x0, 0x8, 0x81, 0x0, 0xffffffffffff8000, 0xa800, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x20, 0x8, 0xc00, 0x4, 0x400, 0x7f, 0xc000, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x81, 0x0, 0x8, 0x81, 0x0, 0xffffffffffff8000, 0xa800, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x20, 0x8, 0xc00, 0x4, 0x400, 0x7f, 0xc000, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40000}, 0x80) 10:41:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x91ffffff}, 0x80) [ 2399.102177][ T5577] FAULT_INJECTION: forcing a failure. [ 2399.102177][ T5577] name failslab, interval 1, probability 0, space 0, times 0 [ 2399.138878][ T5577] CPU: 0 PID: 5577 Comm: syz-executor.4 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 10:41:38 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10003, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) [ 2399.150357][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2399.160252][ T5577] Call Trace: [ 2399.163386][ T5577] [ 2399.166150][ T5577] dump_stack_lvl+0x151/0x1b7 [ 2399.170674][ T5577] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2399.176140][ T5577] dump_stack+0x15/0x17 [ 2399.180120][ T5577] should_fail+0x3c6/0x510 [ 2399.184471][ T5577] __should_failslab+0xa4/0xe0 [ 2399.189062][ T5577] ? anon_vma_fork+0x1df/0x4e0 [ 2399.193661][ T5577] should_failslab+0x9/0x20 [ 2399.197998][ T5577] slab_pre_alloc_hook+0x37/0xd0 [ 2399.202774][ T5577] ? anon_vma_fork+0x1df/0x4e0 [ 2399.207372][ T5577] kmem_cache_alloc+0x44/0x200 [ 2399.212014][ T5577] anon_vma_fork+0x1df/0x4e0 [ 2399.216404][ T5577] copy_mm+0xa3a/0x13e0 [ 2399.220391][ T5577] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2399.226038][ T5577] ? copy_signal+0x610/0x610 [ 2399.230460][ T5577] ? __init_rwsem+0xd6/0x1c0 [ 2399.234888][ T5577] ? copy_signal+0x4e3/0x610 [ 2399.239322][ T5577] copy_process+0x12bc/0x3260 [ 2399.243835][ T5577] ? timerqueue_add+0x250/0x270 [ 2399.248514][ T5577] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2399.253460][ T5577] ? enqueue_hrtimer+0xca/0x240 [ 2399.258147][ T5577] ? __hrtimer_run_queues+0x46b/0xad0 [ 2399.263357][ T5577] kernel_clone+0x21e/0x9e0 [ 2399.267694][ T5577] ? irqentry_exit+0x30/0x40 [ 2399.272120][ T5577] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2399.277759][ T5577] ? create_io_thread+0x1e0/0x1e0 [ 2399.282626][ T5577] __x64_sys_clone+0x23f/0x290 [ 2399.287220][ T5577] ? __do_sys_vfork+0x130/0x130 [ 2399.291998][ T5577] ? debug_smp_processor_id+0x17/0x20 [ 2399.297204][ T5577] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2399.303103][ T5577] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2399.308573][ T5577] do_syscall_64+0x3d/0xb0 [ 2399.312826][ T5577] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2399.318465][ T5577] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2399.324194][ T5577] RIP: 0033:0x7f977f216ae9 [ 2399.328448][ T5577] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2399.347887][ T5577] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2399.356132][ T5577] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2399.363944][ T5577] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2399.371757][ T5577] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2399.379566][ T5577] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2399.387379][ T5577] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2399.395223][ T5577] 10:41:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10003, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) 10:41:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x92ffffff}, 0x80) 10:41:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x4) [ 2399.624616][ T5619] FAULT_INJECTION: forcing a failure. [ 2399.624616][ T5619] name failslab, interval 1, probability 0, space 0, times 0 10:41:39 executing program 2: syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x80, 0x99, 0x7f, 0x3f, 0x3, 0x0, 0x80, 0x40, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x58, 0x2, @perf_config_ext={0x6, 0x7}, 0x200, 0x8, 0x0, 0x26dc95e7d20d112b, 0x3, 0x9, 0x0, 0x0, 0x1, 0x0, 0xd9}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000280)=0x400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x1f, 0x8, 0x7, 0xe4, 0x0, 0x3, 0x4880, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x8949a, 0x5, 0x1ff, 0x3, 0x8000000000000001, 0x200, 0x4, 0x0, 0x5, 0x0, 0xeb}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xf) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x81, 0x0, 0x8, 0x81, 0x0, 0xffffffffffff8000, 0xa800, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x20, 0x8, 0xc00, 0x4, 0x400, 0x7f, 0xc000, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2399.687833][ T5619] CPU: 1 PID: 5619 Comm: syz-executor.4 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2399.699318][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2399.709214][ T5619] Call Trace: [ 2399.712335][ T5619] [ 2399.715113][ T5619] dump_stack_lvl+0x151/0x1b7 [ 2399.719627][ T5619] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2399.725096][ T5619] dump_stack+0x15/0x17 [ 2399.729084][ T5619] should_fail+0x3c6/0x510 [ 2399.733337][ T5619] __should_failslab+0xa4/0xe0 [ 2399.737936][ T5619] ? anon_vma_fork+0x1df/0x4e0 [ 2399.742536][ T5619] should_failslab+0x9/0x20 [ 2399.746883][ T5619] slab_pre_alloc_hook+0x37/0xd0 [ 2399.751654][ T5619] ? anon_vma_fork+0x1df/0x4e0 [ 2399.756251][ T5619] kmem_cache_alloc+0x44/0x200 [ 2399.760851][ T5619] anon_vma_fork+0x1df/0x4e0 [ 2399.765281][ T5619] copy_mm+0xa3a/0x13e0 [ 2399.769275][ T5619] ? copy_signal+0x610/0x610 [ 2399.773694][ T5619] ? __init_rwsem+0xd6/0x1c0 [ 2399.778115][ T5619] ? copy_signal+0x4e3/0x610 [ 2399.782636][ T5619] copy_process+0x12bc/0x3260 [ 2399.787177][ T5619] ? timerqueue_add+0x250/0x270 [ 2399.791830][ T5619] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2399.796777][ T5619] ? enqueue_hrtimer+0xca/0x240 [ 2399.801461][ T5619] ? __hrtimer_run_queues+0x46b/0xad0 [ 2399.806673][ T5619] kernel_clone+0x21e/0x9e0 [ 2399.811012][ T5619] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2399.816653][ T5619] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2399.822639][ T5619] ? create_io_thread+0x1e0/0x1e0 [ 2399.827504][ T5619] ? memset_erms+0xb/0x10 [ 2399.831671][ T5619] __x64_sys_clone+0x23f/0x290 [ 2399.836268][ T5619] ? __do_sys_vfork+0x130/0x130 [ 2399.840955][ T5619] ? debug_smp_processor_id+0x17/0x20 [ 2399.846160][ T5619] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2399.852062][ T5619] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2399.857530][ T5619] do_syscall_64+0x3d/0xb0 [ 2399.861783][ T5619] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2399.867424][ T5619] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2399.873151][ T5619] RIP: 0033:0x7f977f216ae9 [ 2399.877408][ T5619] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2399.896934][ T5619] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2399.905176][ T5619] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2399.912989][ T5619] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2399.920801][ T5619] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2399.928626][ T5619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 10:41:39 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6800, 0x0) 10:41:39 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) (async, rerun: 64) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) 10:41:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1ac4e0}, 0x80) 10:41:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x93ffffff}, 0x80) 10:41:39 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) [ 2399.936425][ T5619] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2399.944240][ T5619] 10:41:39 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) 10:41:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)='y', 0x1}, {0x0}, {&(0x7f0000000580)="85", 0xfec5}], 0x3}, 0x0) 10:41:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x94ffffff}, 0x80) 10:41:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 91) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x0, 0x0, 0x8000}, 0x48) 10:41:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x200000}, 0x80) [ 2400.538518][ T5716] FAULT_INJECTION: forcing a failure. [ 2400.538518][ T5716] name failslab, interval 1, probability 0, space 0, times 0 [ 2400.553560][ T5716] CPU: 1 PID: 5716 Comm: syz-executor.4 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2400.565641][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2400.575540][ T5716] Call Trace: [ 2400.578662][ T5716] [ 2400.581435][ T5716] dump_stack_lvl+0x151/0x1b7 [ 2400.585949][ T5716] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2400.591423][ T5716] dump_stack+0x15/0x17 [ 2400.595405][ T5716] should_fail+0x3c6/0x510 [ 2400.599669][ T5716] __should_failslab+0xa4/0xe0 [ 2400.604262][ T5716] ? anon_vma_fork+0x1df/0x4e0 [ 2400.608862][ T5716] should_failslab+0x9/0x20 [ 2400.613198][ T5716] slab_pre_alloc_hook+0x37/0xd0 [ 2400.617971][ T5716] ? anon_vma_fork+0x1df/0x4e0 [ 2400.622662][ T5716] kmem_cache_alloc+0x44/0x200 [ 2400.627261][ T5716] anon_vma_fork+0x1df/0x4e0 [ 2400.631691][ T5716] copy_mm+0xa3a/0x13e0 [ 2400.635675][ T5716] ? irqentry_exit+0x30/0x40 [ 2400.640110][ T5716] ? copy_signal+0x610/0x610 [ 2400.644532][ T5716] ? __init_rwsem+0xd6/0x1c0 [ 2400.649043][ T5716] ? copy_signal+0x4e3/0x610 [ 2400.653470][ T5716] copy_process+0x12bc/0x3260 [ 2400.657990][ T5716] ? timerqueue_add+0x250/0x270 [ 2400.662685][ T5716] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2400.667617][ T5716] ? enqueue_hrtimer+0xca/0x240 [ 2400.672313][ T5716] ? __hrtimer_run_queues+0x46b/0xad0 [ 2400.677511][ T5716] kernel_clone+0x21e/0x9e0 [ 2400.681855][ T5716] ? create_io_thread+0x1e0/0x1e0 [ 2400.686713][ T5716] ? clockevents_program_event+0x22f/0x300 [ 2400.692355][ T5716] __x64_sys_clone+0x23f/0x290 [ 2400.696951][ T5716] ? __do_sys_vfork+0x130/0x130 [ 2400.701648][ T5716] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 2400.707461][ T5716] do_syscall_64+0x3d/0xb0 [ 2400.711705][ T5716] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2400.717350][ T5716] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2400.723075][ T5716] RIP: 0033:0x7f977f216ae9 [ 2400.727337][ T5716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2400.746886][ T5716] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2400.755130][ T5716] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2400.762915][ T5716] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2400.770814][ T5716] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2400.778625][ T5716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 10:41:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2202100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x95ffffff}, 0x80) 10:41:40 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r0, 0x4020940d, 0x0) 10:41:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) [ 2400.786436][ T5716] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2400.794251][ T5716] 10:41:40 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r0, 0xc0045878, 0x0) [ 2400.832648][ T30] audit: type=1400 audit(1697020900.190:167): avc: denied { ioctl } for pid=5725 comm="syz-executor.1" path="socket:[337050]" dev="sockfs" ino=337050 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 10:41:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x96ffffff}, 0x80) 10:41:40 executing program 1: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000580)) 10:41:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xa001a0}, 0x80) 10:41:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) (fail_nth: 92) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:40 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r0, 0x8904, 0x0) 10:41:40 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000004440)={0x0, 0x0, &(0x7f00000042c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:41:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0xf7, 0xf7, 0x81, 0x1f, 0x0, 0x101, 0x2000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000300)}, 0xb0, 0x0, 0x8518, 0x7, 0x66, 0x7, 0xfffc, 0x0, 0x3, 0x0, 0x1}, r0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xfffffffffffffffb) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x9) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)='GPL\x00', 0x0, 0xad, &(0x7f0000000480)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f00000005c0), 0x8, 0x10, &(0x7f0000000600)={0x0, 0x0, 0xed}, 0x10}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r2, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc020660b, &(0x7f0000000040)) openat$cgroup_ro(r5, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) [ 2401.087988][ T5753] FAULT_INJECTION: forcing a failure. [ 2401.087988][ T5753] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.145678][ T5753] CPU: 1 PID: 5753 Comm: syz-executor.4 Tainted: G B 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 2401.157165][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2401.167059][ T5753] Call Trace: [ 2401.170300][ T5753] [ 2401.173079][ T5753] dump_stack_lvl+0x151/0x1b7 [ 2401.177592][ T5753] ? io_uring_drop_tctx_refs+0x190/0x190 [ 2401.183065][ T5753] dump_stack+0x15/0x17 [ 2401.187051][ T5753] should_fail+0x3c6/0x510 [ 2401.191302][ T5753] __should_failslab+0xa4/0xe0 [ 2401.195901][ T5753] ? vm_area_dup+0x26/0x230 [ 2401.200242][ T5753] should_failslab+0x9/0x20 [ 2401.204689][ T5753] slab_pre_alloc_hook+0x37/0xd0 [ 2401.209459][ T5753] ? vm_area_dup+0x26/0x230 [ 2401.213796][ T5753] kmem_cache_alloc+0x44/0x200 [ 2401.218399][ T5753] vm_area_dup+0x26/0x230 [ 2401.222566][ T5753] copy_mm+0x9a1/0x13e0 [ 2401.226569][ T5753] ? copy_signal+0x610/0x610 [ 2401.230981][ T5753] ? __init_rwsem+0xd6/0x1c0 [ 2401.235416][ T5753] copy_process+0x12bc/0x3260 [ 2401.239927][ T5753] ? timerqueue_add+0x250/0x270 [ 2401.244611][ T5753] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 2401.249556][ T5753] ? enqueue_hrtimer+0xca/0x240 [ 2401.254245][ T5753] ? __hrtimer_run_queues+0x46b/0xad0 [ 2401.259464][ T5753] kernel_clone+0x21e/0x9e0 [ 2401.263792][ T5753] ? create_io_thread+0x1e0/0x1e0 [ 2401.268652][ T5753] ? clockevents_program_event+0x22f/0x300 [ 2401.274640][ T5753] __x64_sys_clone+0x23f/0x290 [ 2401.279244][ T5753] ? __do_sys_vfork+0x130/0x130 [ 2401.283924][ T5753] ? debug_smp_processor_id+0x17/0x20 [ 2401.289131][ T5753] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2401.295032][ T5753] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2401.300504][ T5753] do_syscall_64+0x3d/0xb0 [ 2401.304754][ T5753] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 2401.310401][ T5753] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2401.316124][ T5753] RIP: 0033:0x7f977f216ae9 [ 2401.320377][ T5753] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 10:41:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3002d000, 0x0, 0xf5ffffff00000010, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x2202100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:40 executing program 1: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:41:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x97ffffff}, 0x80) [ 2401.339821][ T5753] RSP: 002b:00007f977df99078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2401.348066][ T5753] RAX: ffffffffffffffda RBX: 00007f977f335f80 RCX: 00007f977f216ae9 [ 2401.355874][ T5753] RDX: 0000000000000000 RSI: f5ffffff00000010 RDI: 000000003002d000 [ 2401.363688][ T5753] RBP: 00007f977df99120 R08: 0000000000000000 R09: 0000000000000000 [ 2401.371495][ T5753] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2401.379307][ T5753] R13: 000000000000000b R14: 00007f977f335f80 R15: 00007fff8c72e058 [ 2401.387127][ T5753] 10:41:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x96000007, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76ffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xffffb9}, 0x80) 10:41:40 executing program 5: r0 = openat$