26f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0x81, 0x8, 0x40, 0xff, 0x0, 0x4, 0x101, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x7fffffffffffffff, 0xa3}, 0x8, 0xffff, 0xf45, 0x0, 0x38, 0x7, 0x0, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x6, r1, 0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x2a, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x28, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0xfffffff7, 0x1d, &(0x7f0000000100)=""/29, 0x40f00, 0x59, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x0, 0x33af, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r5], &(0x7f0000000780)=[{0x2, 0x1, 0x5, 0x2}, {0x4, 0x2, 0xe, 0x9}], 0x10, 0xc5fa}, 0x90) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x38}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xd2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x40}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x400}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @ldst={0x0, 0x0, 0x4, 0x8, 0x2, 0x30, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0xc0000000, 0x81, &(0x7f00000005c0)=""/129, 0x41000, 0x10, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x5, 0x2, 0x9, 0xb}], 0x10, 0x5}, 0x90) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xfffffc01, 0x0, r5, 0x8, '\x00', r6, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xfffffc01, 0x0, r5, 0x8, '\x00', r6, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x3f, 0x1, 0x9, 0x0, 0x7b2, 0x50400, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x440, 0x1, 0xc4, 0x4, 0x6, 0x101, 0x1, 0x0, 0xffffffff, 0x0, 0x5}, r0, 0xe, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xbfffffffffffffff, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x3f, 0x1, 0x9, 0x0, 0x7b2, 0x50400, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x440, 0x1, 0xc4, 0x4, 0x6, 0x101, 0x1, 0x0, 0xffffffff, 0x0, 0x5}, r0, 0xe, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xbfffffffffffffff, r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) (async) 08:37:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800006a022e3e4843aaa5bfe044feead8e383a77b2fd59f004b64ffec850000006d000000850000003e2d000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 337.807557][T13500] FAULT_INJECTION: forcing a failure. [ 337.807557][T13500] name failslab, interval 1, probability 0, space 0, times 0 08:37:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x8, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 337.871750][T13500] CPU: 0 PID: 13500 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 337.881927][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 337.891821][T13500] Call Trace: [ 337.894952][T13500] [ 337.897729][T13500] dump_stack_lvl+0x151/0x1b7 [ 337.902243][T13500] ? io_uring_drop_tctx_refs+0x190/0x190 [ 337.907708][T13500] dump_stack+0x15/0x17 [ 337.911698][T13500] should_fail+0x3c6/0x510 [ 337.915953][T13500] __should_failslab+0xa4/0xe0 [ 337.920547][T13500] ? vm_area_dup+0x26/0x230 [ 337.924882][T13500] should_failslab+0x9/0x20 [ 337.929226][T13500] slab_pre_alloc_hook+0x37/0xd0 [ 337.934003][T13500] ? vm_area_dup+0x26/0x230 [ 337.938336][T13500] kmem_cache_alloc+0x44/0x200 [ 337.942940][T13500] vm_area_dup+0x26/0x230 [ 337.947105][T13500] copy_mm+0x9a1/0x13e0 [ 337.951114][T13500] ? copy_signal+0x610/0x610 [ 337.955521][T13500] ? __init_rwsem+0xd6/0x1c0 [ 337.959948][T13500] ? copy_signal+0x4e3/0x610 [ 337.964379][T13500] copy_process+0x1149/0x3290 [ 337.968898][T13500] ? timerqueue_add+0x250/0x270 [ 337.973592][T13500] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 337.978539][T13500] ? enqueue_hrtimer+0xca/0x240 [ 337.983207][T13500] ? __hrtimer_run_queues+0x46b/0xad0 [ 337.988418][T13500] kernel_clone+0x21e/0x9e0 [ 337.992754][T13500] ? create_io_thread+0x1e0/0x1e0 [ 337.997618][T13500] ? clockevents_program_event+0x22f/0x300 [ 338.003264][T13500] __x64_sys_clone+0x23f/0x290 [ 338.007856][T13500] ? __do_sys_vfork+0x130/0x130 [ 338.012558][T13500] do_syscall_64+0x3d/0xb0 [ 338.016793][T13500] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 338.022438][T13500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 338.028224][T13500] RIP: 0033:0x7fd15e9c4da9 [ 338.032419][T13500] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 338.051862][T13500] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 338.060105][T13500] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 08:37:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x9, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x3f, 0x1, 0x9, 0x0, 0x7b2, 0x50400, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x440, 0x1, 0xc4, 0x4, 0x6, 0x101, 0x1, 0x0, 0xffffffff, 0x0, 0x5}, r0, 0xe, 0xffffffffffffffff, 0x9) (async) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x3f, 0x1, 0x9, 0x0, 0x7b2, 0x50400, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x440, 0x1, 0xc4, 0x4, 0x6, 0x101, 0x1, 0x0, 0xffffffff, 0x0, 0x5}, r0, 0xe, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xbfffffffffffffff, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0) 08:37:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800006a022e3e4843aaa5bfe044feead8e383a77b2fd59f004b64ffec850000006d000000850000003e2d000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800006a022e3e4843aaa5bfe044feead8e383a77b2fd59f004b64ffec850000006d000000850000003e2d000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 42) 08:37:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x1c, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x7, 0x9, 0x9, 0x80, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='syzkaller\x00', 0xa312, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ac0)={0x0, 0x8, 0x9d34, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[r1, r2], &(0x7f0000001b40)=[{0x2, 0x2, 0xe, 0xb}]}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0xff57000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x6, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfaa}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffd}, @generic={0x7, 0x1, 0xb, 0xa926, 0xe568}]}, &(0x7f0000000840)='GPL\x00', 0x646, 0x0, 0x0, 0x41000, 0x42, '\x00', r4, 0x3, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x4, 0x4, 0x8, 0x6}, 0x10, 0xffffffffffffffff, r5, 0x8, &(0x7f0000001c40)=[r2, r2, r1, r6, r1], &(0x7f0000001c80)=[{0x0, 0x2, 0x2, 0x7}, {0x2, 0x4, 0x6, 0x5}, {0x1, 0x4, 0x3, 0x7}, {0x5, 0x4, 0xd, 0xa}, {0x5, 0x2, 0x2, 0x9}, {0x5, 0x3, 0x9, 0x7}, {0x1, 0x3, 0xa, 0xb}, {0x4, 0x2, 0x5, 0x5}], 0x10, 0x31e}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x18, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0xae, &(0x7f00000005c0)=""/174, 0x41100, 0x79, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x1f, 0x80000001}, 0x10, 0xc973, r7, 0x3, &(0x7f0000000300)=[r1, r1, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2], &(0x7f0000000340)=[{0x3, 0x1, 0x5}, {0x0, 0x3, 0xd, 0x5}, {0x1, 0x5, 0x8, 0xc}], 0x10, 0x624a}, 0x90) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000400)=r9) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$TUNGETIFF(r11, 0x800454d2, &(0x7f0000000680)={'veth0_macvtap\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) [ 338.067919][T13500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 338.075726][T13500] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 338.083539][T13500] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 338.091358][T13500] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 338.099276][T13500] [ 338.161329][T13538] FAULT_INJECTION: forcing a failure. [ 338.161329][T13538] name failslab, interval 1, probability 0, space 0, times 0 [ 338.178838][T13538] CPU: 1 PID: 13538 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 338.189022][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 338.199027][T13538] Call Trace: [ 338.202146][T13538] [ 338.204924][T13538] dump_stack_lvl+0x151/0x1b7 [ 338.209439][T13538] ? io_uring_drop_tctx_refs+0x190/0x190 [ 338.214904][T13538] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 338.220894][T13538] dump_stack+0x15/0x17 [ 338.224997][T13538] should_fail+0x3c6/0x510 [ 338.229336][T13538] __should_failslab+0xa4/0xe0 [ 338.233932][T13538] ? anon_vma_fork+0xf7/0x4e0 [ 338.238466][T13538] should_failslab+0x9/0x20 [ 338.242784][T13538] slab_pre_alloc_hook+0x37/0xd0 [ 338.247560][T13538] ? anon_vma_fork+0xf7/0x4e0 [ 338.252072][T13538] kmem_cache_alloc+0x44/0x200 [ 338.256675][T13538] anon_vma_fork+0xf7/0x4e0 08:37:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xd0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x6, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r1, 0xc, 0x1, 0x54c, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r1, 0x2b, 0x10, 0x0, @link_id=r4, r6}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000009c0)='net_dev_xmit\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x80}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ffffff7f000000008000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000001000000bf91000000000000b7020000090000008500000084080000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x42, '\x00', r9, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0x7f, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r11], &(0x7f0000001680), 0x10, 0xfffffff9}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r12, &(0x7f0000000780)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x789, 0x0, 0x0, 0x0, 0x2896}, [@map_val={0x18, 0x1, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @exit, @jmp={0x5, 0x1, 0x0, 0x8, 0x2, 0x30}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbad}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4080000}}]}, &(0x7f00000008c0)='GPL\x00', 0x63e, 0xbc, &(0x7f0000001a00)=""/188, 0x41000, 0x6, '\x00', r9, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ac0)={0x5, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[r8, r11, 0xffffffffffffffff, r12], &(0x7f0000001b40)=[{0x3, 0x3, 0xe, 0x8}], 0x10, 0x1}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000005594e7a576d114e83700"], 0x38}, 0x0) write$cgroup_subtree(r14, 0x0, 0xfdef) r15 = openat$cgroup_ro(r14, &(0x7f0000000b80)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r15, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1c, 0xa, &(0x7f0000000500)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x8, 0x99, &(0x7f0000001fc0)=""/153, 0x41000, 0x0, '\x00', r16, 0x2e, r14, 0x8, &(0x7f0000000b00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0xa, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001c40)=[r15, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001c80)=[{0x0, 0x3, 0x8, 0xa}], 0x10, 0x6}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="c0980e6ee913e5bf1dcb8ab331371cf19e03638795135531dba6868f0d511c1220eb293b997541e7d2d02aefce9a82305b6ec682d8ae734412abc71694fa0e8ada26750b77677cc8b9362d0f6be7bef840e814c34d46d42f0beea61007ca71e50944b8d648b62a11bc0afb76999f8beb4d02abef6a5e53cf52825960e38e3c", 0x7f}, {&(0x7f0000000500)="2d2f20c087b540afeb78603b858d66edb68f53406d1171e326b5828c2133a9e2b2e194bc907b7b312c5ec8dd38cb7cba13e9daa3ef82bc032036b5cbae2f23d91cdb33812f53635ab4bbb7c3692bf1b7bd6ddb59e7e320194af8fcdf71d2648c8d3d79f968d0cabd45db48711a928a43aa93d73beec98ad76efcea5f3fd8e74cda69cf40268a", 0x86}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000000000000000000000200000001000000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="ac1414aae0070001000000001c00"/28, @ANYRES32=r16, @ANYBLOB="ac1414aa0a010102000000008c00000000000000000000000700000094040000072bf364010102ffffffffe0000002ffffffffffffffffe0000002ac1414aae0000001ac1414aae000000101440c4b117f000001000100008323f7ac14141de0000001ffffffff6401010200000000e000000164010102ffffffff00441c49c000000001000000000000003f00000006000010000000000000000000"], 0xe8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1, &(0x7f0000000440)=@raw=[@ldst={0x2, 0x0, 0x2, 0x6, 0x3, 0xffffffffffffffe0, 0x1}], &(0x7f0000000480)='syzkaller\x00', 0xc933, 0x16, &(0x7f00000004c0)=""/22, 0x41000, 0x13, '\x00', r16, 0x0, r0, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xf, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r5, r7, r3, r3, r3], &(0x7f0000000640)=[{0x0, 0x5, 0xe, 0x4}, {0x4, 0x2, 0xf, 0x1}, {0x1, 0x2, 0x0, 0x2}, {0x3, 0x5, 0xc}], 0x10, 0x8}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r17, r0, 0x29, 0x1e, r1, @link_fd=r0, r6}, 0x20) 08:37:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800006a022e3e4843aaa5bfe044feead8e383a77b2fd59f004b64ffec850000006d000000850000003e2d000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800006a022e3e4843aaa5bfe044feead8e383a77b2fd59f004b64ffec850000006d000000850000003e2d000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) [ 338.261010][T13538] ? anon_vma_name+0x4c/0x70 [ 338.265437][T13538] ? vm_area_dup+0x17a/0x230 [ 338.269864][T13538] copy_mm+0xa3a/0x13e0 [ 338.273862][T13538] ? copy_signal+0x610/0x610 [ 338.278281][T13538] ? __init_rwsem+0xd6/0x1c0 [ 338.282802][T13538] ? copy_signal+0x4e3/0x610 [ 338.287575][T13538] copy_process+0x1149/0x3290 [ 338.292088][T13538] ? timerqueue_add+0x250/0x270 [ 338.296773][T13538] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 338.301717][T13538] ? enqueue_hrtimer+0xca/0x240 [ 338.306407][T13538] ? __hrtimer_run_queues+0x46b/0xad0 [ 338.311609][T13538] kernel_clone+0x21e/0x9e0 [ 338.315947][T13538] ? create_io_thread+0x1e0/0x1e0 [ 338.320807][T13538] ? clockevents_program_event+0x22f/0x300 [ 338.326452][T13538] __x64_sys_clone+0x23f/0x290 [ 338.331056][T13538] ? __do_sys_vfork+0x130/0x130 [ 338.335740][T13538] do_syscall_64+0x3d/0xb0 [ 338.339988][T13538] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 338.345626][T13538] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 338.351355][T13538] RIP: 0033:0x7fd15e9c4da9 [ 338.355609][T13538] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 338.375059][T13538] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 338.383293][T13538] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 338.391123][T13538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 338.398915][T13538] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 08:37:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x11, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 338.406727][T13538] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 338.414540][T13538] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 338.422357][T13538] 08:37:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 43) 08:37:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x1c, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x7, 0x9, 0x9, 0x80, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='syzkaller\x00', 0xa312, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ac0)={0x0, 0x8, 0x9d34, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[r1, r2], &(0x7f0000001b40)=[{0x2, 0x2, 0xe, 0xb}]}, 0x90) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0xff57000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x6, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfaa}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffd}, @generic={0x7, 0x1, 0xb, 0xa926, 0xe568}]}, &(0x7f0000000840)='GPL\x00', 0x646, 0x0, 0x0, 0x41000, 0x42, '\x00', r4, 0x3, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x4, 0x4, 0x8, 0x6}, 0x10, 0xffffffffffffffff, r5, 0x8, &(0x7f0000001c40)=[r2, r2, r1, r6, r1], &(0x7f0000001c80)=[{0x0, 0x2, 0x2, 0x7}, {0x2, 0x4, 0x6, 0x5}, {0x1, 0x4, 0x3, 0x7}, {0x5, 0x4, 0xd, 0xa}, {0x5, 0x2, 0x2, 0x9}, {0x5, 0x3, 0x9, 0x7}, {0x1, 0x3, 0xa, 0xb}, {0x4, 0x2, 0x5, 0x5}], 0x10, 0x31e}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x18, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0xae, &(0x7f00000005c0)=""/174, 0x41100, 0x79, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x1f, 0x80000001}, 0x10, 0xc973, r7, 0x3, &(0x7f0000000300)=[r1, r1, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2], &(0x7f0000000340)=[{0x3, 0x1, 0x5}, {0x0, 0x3, 0xd, 0x5}, {0x1, 0x5, 0x8, 0xc}], 0x10, 0x624a}, 0x90) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000400)=r9) (async) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) ioctl$TUNGETIFF(r11, 0x800454d2, &(0x7f0000000680)={'veth0_macvtap\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfd4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xf3, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x8, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@map=r3, 0x37, 0x0, 0xffffffff, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@ifindex=r5, r2, 0x27, 0x2004, 0x0, @link_id=r6, r8}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x1, 0x9, 0x1, 0x223, r3, 0x5, '\x00', 0x0, r4, 0x0, 0x4, 0x1}, 0x48) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x772c841c, 0x4}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x8, 0x9, 0x80, 0x1, r4, 0x400, '\x00', r5, r4, 0x0, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x7, 0x0}, 0x8) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r13, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4010, r13}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r14, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x1, 0x1, 0x724, r16, 0x200, '\x00', r17, r15, 0x40000000, 0x1, 0x4, 0xc}, 0x48) write$cgroup_type(r15, &(0x7f0000000080), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x15, 0x23, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@jmp={0x5, 0x0, 0x7, 0x5, 0x5, 0x6, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xe, 0x8, 0x7}, 0x10, r12, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, r3, 0xffffffffffffffff, r10, r4, r7, r9, r11, r7], 0x0, 0x10, 0x7}, 0x90) [ 338.495186][T13556] FAULT_INJECTION: forcing a failure. [ 338.495186][T13556] name failslab, interval 1, probability 0, space 0, times 0 08:37:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x700, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:08 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfd4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xf3, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x8}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x8, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@map=r3, 0x37, 0x0, 0xffffffff, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@map=r3, 0x37, 0x0, 0xffffffff, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@ifindex=r5, r2, 0x27, 0x2004, 0x0, @link_id=r6, r8}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x1, 0x9, 0x1, 0x223, r3, 0x5, '\x00', 0x0, r4, 0x0, 0x4, 0x1}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x1, 0x9, 0x1, 0x223, r3, 0x5, '\x00', 0x0, r4, 0x0, 0x4, 0x1}, 0x48) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x772c841c, 0x4}, 0xc) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x772c841c, 0x4}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x8, 0x9, 0x80, 0x1, r4, 0x400, '\x00', r5, r4, 0x0, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x7, 0x0}, 0x8) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r13, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4010, r13}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r14, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r14, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x1, 0x1, 0x724, r16, 0x200, '\x00', r17, r15, 0x40000000, 0x1, 0x4, 0xc}, 0x48) write$cgroup_type(r15, &(0x7f0000000080), 0x9) (async) write$cgroup_type(r15, &(0x7f0000000080), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x15, 0x23, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@jmp={0x5, 0x0, 0x7, 0x5, 0x5, 0x6, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xe, 0x8, 0x7}, 0x10, r12, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, r3, 0xffffffffffffffff, r10, r4, r7, r9, r11, r7], 0x0, 0x10, 0x7}, 0x90) [ 338.582734][T13556] CPU: 1 PID: 13556 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 338.592936][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 338.602808][T13556] Call Trace: [ 338.605927][T13556] [ 338.608711][T13556] dump_stack_lvl+0x151/0x1b7 [ 338.613220][T13556] ? io_uring_drop_tctx_refs+0x190/0x190 [ 338.618689][T13556] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 338.624328][T13556] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 338.630319][T13556] dump_stack+0x15/0x17 [ 338.634309][T13556] should_fail+0x3c6/0x510 [ 338.638564][T13556] __should_failslab+0xa4/0xe0 [ 338.643164][T13556] ? vm_area_dup+0x26/0x230 [ 338.647501][T13556] should_failslab+0x9/0x20 [ 338.651841][T13556] slab_pre_alloc_hook+0x37/0xd0 [ 338.656616][T13556] ? vm_area_dup+0x26/0x230 [ 338.660955][T13556] kmem_cache_alloc+0x44/0x200 [ 338.665554][T13556] vm_area_dup+0x26/0x230 [ 338.669834][T13556] copy_mm+0x9a1/0x13e0 [ 338.673806][T13556] ? copy_signal+0x610/0x610 [ 338.678231][T13556] ? __init_rwsem+0xd6/0x1c0 [ 338.682656][T13556] ? copy_signal+0x4e3/0x610 [ 338.687089][T13556] copy_process+0x1149/0x3290 [ 338.691603][T13556] ? timerqueue_add+0x250/0x270 [ 338.696281][T13556] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 338.701315][T13556] ? enqueue_hrtimer+0xca/0x240 [ 338.705999][T13556] ? __hrtimer_run_queues+0x46b/0xad0 [ 338.711207][T13556] kernel_clone+0x21e/0x9e0 [ 338.715545][T13556] ? irqentry_exit+0x30/0x40 [ 338.719971][T13556] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 338.725699][T13556] ? create_io_thread+0x1e0/0x1e0 [ 338.730563][T13556] __x64_sys_clone+0x23f/0x290 [ 338.735159][T13556] ? __do_sys_vfork+0x130/0x130 [ 338.739850][T13556] ? debug_smp_processor_id+0x17/0x20 [ 338.745053][T13556] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 338.750957][T13556] ? exit_to_user_mode_prepare+0x39/0xa0 [ 338.756421][T13556] do_syscall_64+0x3d/0xb0 [ 338.760674][T13556] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 338.766318][T13556] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 338.772046][T13556] RIP: 0033:0x7fd15e9c4da9 [ 338.776394][T13556] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 338.795838][T13556] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 338.804070][T13556] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 338.811882][T13556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 338.819696][T13556] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 08:37:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 44) 08:37:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x1c, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x7, 0x9, 0x9, 0x80, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='syzkaller\x00', 0xa312, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ac0)={0x0, 0x8, 0x9d34, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[r1, r2], &(0x7f0000001b40)=[{0x2, 0x2, 0xe, 0xb}]}, 0x90) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0xff57000000000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x6, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfaa}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffd}, @generic={0x7, 0x1, 0xb, 0xa926, 0xe568}]}, &(0x7f0000000840)='GPL\x00', 0x646, 0x0, 0x0, 0x41000, 0x42, '\x00', r4, 0x3, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x4, 0x4, 0x8, 0x6}, 0x10, 0xffffffffffffffff, r5, 0x8, &(0x7f0000001c40)=[r2, r2, r1, r6, r1], &(0x7f0000001c80)=[{0x0, 0x2, 0x2, 0x7}, {0x2, 0x4, 0x6, 0x5}, {0x1, 0x4, 0x3, 0x7}, {0x5, 0x4, 0xd, 0xa}, {0x5, 0x2, 0x2, 0x9}, {0x5, 0x3, 0x9, 0x7}, {0x1, 0x3, 0xa, 0xb}, {0x4, 0x2, 0x5, 0x5}], 0x10, 0x31e}, 0x90) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x18, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0xae, &(0x7f00000005c0)=""/174, 0x41100, 0x79, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x1f, 0x80000001}, 0x10, 0xc973, r7, 0x3, &(0x7f0000000300)=[r1, r1, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2], &(0x7f0000000340)=[{0x3, 0x1, 0x5}, {0x0, 0x3, 0xd, 0x5}, {0x1, 0x5, 0x8, 0xc}], 0x10, 0x624a}, 0x90) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000400)=r9) (async) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) ioctl$TUNGETIFF(r11, 0x800454d2, &(0x7f0000000680)={'veth0_macvtap\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) [ 338.827505][T13556] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 338.835318][T13556] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 338.843309][T13556] 08:37:09 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfd4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000240)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xf3, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0x8, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@map=r3, 0x37, 0x0, 0xffffffff, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@ifindex=r5, r2, 0x27, 0x2004, 0x0, @link_id=r6, r8}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x1, 0x9, 0x1, 0x223, r3, 0x5, '\x00', 0x0, r4, 0x0, 0x4, 0x1}, 0x48) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x772c841c, 0x4}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x8, 0x9, 0x80, 0x1, r4, 0x400, '\x00', r5, r4, 0x0, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c40)={0x7, 0x0}, 0x8) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r13, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x0) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4010, r13}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r14, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41b9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x8, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x1, 0x1, 0x724, r16, 0x200, '\x00', r17, r15, 0x40000000, 0x1, 0x4, 0xc}, 0x48) write$cgroup_type(r15, &(0x7f0000000080), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x15, 0x23, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@jmp={0x5, 0x0, 0x7, 0x5, 0x5, 0x6, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xe, 0x8, 0x7}, 0x10, r12, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r4, r3, 0xffffffffffffffff, r10, r4, r7, r9, r11, r7], 0x0, 0x10, 0x7}, 0x90) [ 338.906735][T13575] FAULT_INJECTION: forcing a failure. [ 338.906735][T13575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.936867][T13575] CPU: 1 PID: 13575 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 338.947047][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 338.956950][T13575] Call Trace: [ 338.960059][T13575] [ 338.962840][T13575] dump_stack_lvl+0x151/0x1b7 [ 338.967352][T13575] ? io_uring_drop_tctx_refs+0x190/0x190 [ 338.972822][T13575] dump_stack+0x15/0x17 [ 338.976809][T13575] should_fail+0x3c6/0x510 [ 338.981059][T13575] should_fail_alloc_page+0x5a/0x80 [ 338.986103][T13575] prepare_alloc_pages+0x15c/0x700 [ 338.991052][T13575] ? __alloc_pages_bulk+0xe40/0xe40 [ 338.996086][T13575] __alloc_pages+0x18c/0x8f0 [ 339.000504][T13575] ? prep_new_page+0x110/0x110 [ 339.005099][T13575] ? __alloc_pages+0x27e/0x8f0 [ 339.009700][T13575] ? __kasan_check_write+0x14/0x20 [ 339.014646][T13575] ? _raw_spin_lock+0xa4/0x1b0 [ 339.019248][T13575] __pmd_alloc+0xb1/0x550 [ 339.023414][T13575] ? __pud_alloc+0x260/0x260 [ 339.027853][T13575] ? __pud_alloc+0x213/0x260 [ 339.032276][T13575] ? do_handle_mm_fault+0x2330/0x2330 [ 339.037480][T13575] ? __stack_depot_save+0x34/0x470 [ 339.042418][T13575] ? anon_vma_clone+0x9a/0x500 [ 339.047024][T13575] copy_page_range+0x2b3d/0x2f90 [ 339.051792][T13575] ? __kasan_slab_alloc+0xb1/0xe0 [ 339.056663][T13575] ? slab_post_alloc_hook+0x53/0x2c0 [ 339.061776][T13575] ? copy_mm+0xa3a/0x13e0 [ 339.065947][T13575] ? copy_process+0x1149/0x3290 [ 339.070624][T13575] ? kernel_clone+0x21e/0x9e0 [ 339.075315][T13575] ? do_syscall_64+0x3d/0xb0 [ 339.079749][T13575] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 339.085658][T13575] ? pfn_valid+0x1e0/0x1e0 [ 339.089896][T13575] ? anon_vma_interval_tree_insert+0x326/0x3a0 [ 339.095888][T13575] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 339.102136][T13575] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 339.107814][T13575] ? __rb_insert_augmented+0x5de/0x610 [ 339.113103][T13575] copy_mm+0xc7e/0x13e0 [ 339.117106][T13575] ? copy_signal+0x610/0x610 [ 339.121518][T13575] ? __init_rwsem+0xd6/0x1c0 [ 339.125940][T13575] ? copy_signal+0x4e3/0x610 [ 339.130367][T13575] copy_process+0x1149/0x3290 [ 339.134887][T13575] ? timerqueue_add+0x250/0x270 [ 339.139572][T13575] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 339.144644][T13575] ? enqueue_hrtimer+0xca/0x240 [ 339.149330][T13575] ? __hrtimer_run_queues+0x46b/0xad0 [ 339.154536][T13575] kernel_clone+0x21e/0x9e0 [ 339.158882][T13575] ? create_io_thread+0x1e0/0x1e0 [ 339.163734][T13575] ? clockevents_program_event+0x22f/0x300 [ 339.169379][T13575] __x64_sys_clone+0x23f/0x290 [ 339.173987][T13575] ? __do_sys_vfork+0x130/0x130 [ 339.178666][T13575] ? debug_smp_processor_id+0x17/0x20 [ 339.183871][T13575] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 339.189782][T13575] ? exit_to_user_mode_prepare+0x39/0xa0 [ 339.195240][T13575] do_syscall_64+0x3d/0xb0 [ 339.199493][T13575] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 339.205135][T13575] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 339.210861][T13575] RIP: 0033:0x7fd15e9c4da9 [ 339.215128][T13575] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 339.234556][T13575] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 339.242811][T13575] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 339.250620][T13575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 08:37:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 45) 08:37:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18f7ffffff0000000000f5004b64ffec850000006d000000850000000e6f37f100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xd0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x6}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x6, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r1, 0xc, 0x1, 0x54c, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r1, 0x2b, 0x10, 0x0, @link_id=r4, r6}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r1, 0x2b, 0x10, 0x0, @link_id=r4, r6}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000009c0)='net_dev_xmit\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000009c0)='net_dev_xmit\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x80}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ffffff7f000000008000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000001000000bf91000000000000b7020000090000008500000084080000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x42, '\x00', r9, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0x7f, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r11], &(0x7f0000001680), 0x10, 0xfffffff9}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r12, &(0x7f0000000780)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x789, 0x0, 0x0, 0x0, 0x2896}, [@map_val={0x18, 0x1, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @exit, @jmp={0x5, 0x1, 0x0, 0x8, 0x2, 0x30}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbad}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4080000}}]}, &(0x7f00000008c0)='GPL\x00', 0x63e, 0xbc, &(0x7f0000001a00)=""/188, 0x41000, 0x6, '\x00', r9, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ac0)={0x5, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[r8, r11, 0xffffffffffffffff, r12], &(0x7f0000001b40)=[{0x3, 0x3, 0xe, 0x8}], 0x10, 0x1}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000005594e7a576d114e83700"], 0x38}, 0x0) (async) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000005594e7a576d114e83700"], 0x38}, 0x0) write$cgroup_subtree(r14, 0x0, 0xfdef) r15 = openat$cgroup_ro(r14, &(0x7f0000000b80)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r15, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1c, 0xa, &(0x7f0000000500)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x8, 0x99, &(0x7f0000001fc0)=""/153, 0x41000, 0x0, '\x00', r16, 0x2e, r14, 0x8, &(0x7f0000000b00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0xa, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001c40)=[r15, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001c80)=[{0x0, 0x3, 0x8, 0xa}], 0x10, 0x6}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="c0980e6ee913e5bf1dcb8ab331371cf19e03638795135531dba6868f0d511c1220eb293b997541e7d2d02aefce9a82305b6ec682d8ae734412abc71694fa0e8ada26750b77677cc8b9362d0f6be7bef840e814c34d46d42f0beea61007ca71e50944b8d648b62a11bc0afb76999f8beb4d02abef6a5e53cf52825960e38e3c", 0x7f}, {&(0x7f0000000500)="2d2f20c087b540afeb78603b858d66edb68f53406d1171e326b5828c2133a9e2b2e194bc907b7b312c5ec8dd38cb7cba13e9daa3ef82bc032036b5cbae2f23d91cdb33812f53635ab4bbb7c3692bf1b7bd6ddb59e7e320194af8fcdf71d2648c8d3d79f968d0cabd45db48711a928a43aa93d73beec98ad76efcea5f3fd8e74cda69cf40268a", 0x86}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000000000000000000000200000001000000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="ac1414aae0070001000000001c00"/28, @ANYRES32=r16, @ANYBLOB="ac1414aa0a010102000000008c00000000000000000000000700000094040000072bf364010102ffffffffe0000002ffffffffffffffffe0000002ac1414aae0000001ac1414aae000000101440c4b117f000001000100008323f7ac14141de0000001ffffffff6401010200000000e000000164010102ffffffff00441c49c000000001000000000000003f00000006000010000000000000000000"], 0xe8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1, &(0x7f0000000440)=@raw=[@ldst={0x2, 0x0, 0x2, 0x6, 0x3, 0xffffffffffffffe0, 0x1}], &(0x7f0000000480)='syzkaller\x00', 0xc933, 0x16, &(0x7f00000004c0)=""/22, 0x41000, 0x13, '\x00', r16, 0x0, r0, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xf, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r5, r7, r3, r3, r3], &(0x7f0000000640)=[{0x0, 0x5, 0xe, 0x4}, {0x4, 0x2, 0xf, 0x1}, {0x1, 0x2, 0x0, 0x2}, {0x3, 0x5, 0xc}], 0x10, 0x8}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r17, r0, 0x29, 0x1e, r1, @link_fd=r0, r6}, 0x20) [ 339.258424][T13575] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 339.266245][T13575] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 339.274064][T13575] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 339.281866][T13575] 08:37:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) close(r3) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18f7ffffff0000000000f5004b64ffec850000006d000000850000000e6f37f100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x900, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18f7ffffff0000000000f5004b64ffec850000006d000000850000000e6f37f100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 339.352835][T13595] FAULT_INJECTION: forcing a failure. [ 339.352835][T13595] name failslab, interval 1, probability 0, space 0, times 0 08:37:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xc4, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x3, [@struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x2, 0x6}, {0x5, 0x0, 0x5}, {0xe, 0x1, 0x7fffffff}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @fwd={0xd}, @datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x0, 0x9}, {0x5, 0x7fff, 0x10001}], "bb03"}]}, {0x0, [0x30]}}, &(0x7f0000000a40)=""/4096, 0x8b, 0x1000, 0x0, 0xff}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0xd, 0x30b6e49428856a8e, 0x6, 0x50, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x1f, 0xed, &(0x7f00000002c0)=""/237, 0x41000, 0x1a, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x0, 0xffffffff, 0x800}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000940)=[r3], &(0x7f0000001a40)=[{0x4, 0x1, 0x8, 0x4}, {0x1, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x0, 0x7}, {0x2, 0x4, 0xe}, {0x4, 0x3, 0x2, 0x4}, {0x2, 0x5, 0xe, 0x6}, {0x2, 0x2, 0xa, 0x7}, {0x3, 0x2, 0x7, 0x1}], 0x10, 0x81}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 339.395239][T13595] CPU: 0 PID: 13595 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 339.405416][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 339.415310][T13595] Call Trace: [ 339.418518][T13595] [ 339.421296][T13595] dump_stack_lvl+0x151/0x1b7 [ 339.425816][T13595] ? io_uring_drop_tctx_refs+0x190/0x190 [ 339.431276][T13595] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 339.436920][T13595] dump_stack+0x15/0x17 [ 339.440912][T13595] should_fail+0x3c6/0x510 [ 339.445166][T13595] __should_failslab+0xa4/0xe0 [ 339.449764][T13595] ? vm_area_dup+0x26/0x230 [ 339.454096][T13595] should_failslab+0x9/0x20 [ 339.458437][T13595] slab_pre_alloc_hook+0x37/0xd0 [ 339.463219][T13595] ? vm_area_dup+0x26/0x230 [ 339.467556][T13595] kmem_cache_alloc+0x44/0x200 [ 339.472157][T13595] vm_area_dup+0x26/0x230 [ 339.476325][T13595] copy_mm+0x9a1/0x13e0 [ 339.480326][T13595] ? copy_signal+0x610/0x610 [ 339.484743][T13595] ? __init_rwsem+0xd6/0x1c0 [ 339.489168][T13595] copy_process+0x1149/0x3290 [ 339.493691][T13595] ? cgroup_rstat_updated+0xe5/0x370 [ 339.498804][T13595] ? put_prev_entity+0x460/0x460 [ 339.503579][T13595] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 339.508522][T13595] ? pick_next_task_fair+0x965/0xbc0 [ 339.513640][T13595] kernel_clone+0x21e/0x9e0 [ 339.517980][T13595] ? __kasan_check_write+0x14/0x20 [ 339.522929][T13595] ? create_io_thread+0x1e0/0x1e0 [ 339.527812][T13595] __x64_sys_clone+0x23f/0x290 [ 339.532385][T13595] ? __do_sys_vfork+0x130/0x130 [ 339.537074][T13595] ? switch_fpu_return+0x1ed/0x3d0 [ 339.542023][T13595] ? __kasan_check_read+0x11/0x20 [ 339.546879][T13595] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 339.552348][T13595] do_syscall_64+0x3d/0xb0 [ 339.557464][T13595] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 339.563110][T13595] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 339.568835][T13595] RIP: 0033:0x7fd15e9c4da9 [ 339.573088][T13595] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 08:37:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x1100, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 46) [ 339.592529][T13595] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 339.600775][T13595] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 339.608585][T13595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 339.616398][T13595] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 339.624205][T13595] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 339.632020][T13595] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 339.639836][T13595] 08:37:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xc4, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x3, [@struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x2, 0x6}, {0x5, 0x0, 0x5}, {0xe, 0x1, 0x7fffffff}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @fwd={0xd}, @datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x0, 0x9}, {0x5, 0x7fff, 0x10001}], "bb03"}]}, {0x0, [0x30]}}, &(0x7f0000000a40)=""/4096, 0x8b, 0x1000, 0x0, 0xff}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0xd, 0x30b6e49428856a8e, 0x6, 0x50, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x1f, 0xed, &(0x7f00000002c0)=""/237, 0x41000, 0x1a, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x0, 0xffffffff, 0x800}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000940)=[r3], &(0x7f0000001a40)=[{0x4, 0x1, 0x8, 0x4}, {0x1, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x0, 0x7}, {0x2, 0x4, 0xe}, {0x4, 0x3, 0x2, 0x4}, {0x2, 0x5, 0xe, 0x6}, {0x2, 0x2, 0xa, 0x7}, {0x3, 0x2, 0x7, 0x1}], 0x10, 0x81}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async, rerun: 32) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async, rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) close(r3) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 339.689019][T13615] FAULT_INJECTION: forcing a failure. [ 339.689019][T13615] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 339.704906][T13615] CPU: 0 PID: 13615 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 339.715166][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 339.725058][T13615] Call Trace: [ 339.728188][T13615] [ 339.730955][T13615] dump_stack_lvl+0x151/0x1b7 [ 339.735474][T13615] ? io_uring_drop_tctx_refs+0x190/0x190 [ 339.740943][T13615] dump_stack+0x15/0x17 [ 339.744926][T13615] should_fail+0x3c6/0x510 [ 339.749180][T13615] should_fail_alloc_page+0x5a/0x80 [ 339.754209][T13615] prepare_alloc_pages+0x15c/0x700 [ 339.759163][T13615] ? __alloc_pages_bulk+0xe40/0xe40 [ 339.764195][T13615] __alloc_pages+0x18c/0x8f0 [ 339.768620][T13615] ? prep_new_page+0x110/0x110 [ 339.773222][T13615] ? __kasan_check_write+0x14/0x20 [ 339.778165][T13615] ? _raw_spin_lock+0xa4/0x1b0 [ 339.782769][T13615] pte_alloc_one+0x73/0x1b0 [ 339.787105][T13615] ? pfn_modify_allowed+0x2f0/0x2f0 [ 339.792149][T13615] ? __pmd_alloc+0x48d/0x550 [ 339.796568][T13615] __pte_alloc+0x86/0x350 [ 339.800730][T13615] ? __pud_alloc+0x260/0x260 [ 339.805155][T13615] ? __pud_alloc+0x213/0x260 [ 339.809592][T13615] ? free_pgtables+0x280/0x280 [ 339.814278][T13615] ? do_handle_mm_fault+0x2330/0x2330 [ 339.819487][T13615] copy_page_range+0x28a8/0x2f90 [ 339.824253][T13615] ? __kasan_slab_alloc+0xb1/0xe0 [ 339.829110][T13615] ? slab_post_alloc_hook+0x53/0x2c0 [ 339.834232][T13615] ? kernel_clone+0x21e/0x9e0 [ 339.838747][T13615] ? do_syscall_64+0x3d/0xb0 [ 339.843193][T13615] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 339.849080][T13615] ? pfn_valid+0x1e0/0x1e0 [ 339.853325][T13615] ? irqentry_exit+0x30/0x40 [ 339.857755][T13615] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 339.863393][T13615] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 339.869384][T13615] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 339.874941][T13615] ? __rb_insert_augmented+0x5de/0x610 [ 339.880235][T13615] copy_mm+0xc7e/0x13e0 [ 339.884231][T13615] ? copy_signal+0x610/0x610 [ 339.888653][T13615] ? __init_rwsem+0xd6/0x1c0 [ 339.893077][T13615] ? copy_signal+0x4e3/0x610 [ 339.897506][T13615] copy_process+0x1149/0x3290 [ 339.902018][T13615] ? _raw_spin_unlock+0x4d/0x70 [ 339.906704][T13615] ? perf_event_context_sched_in+0x4ea/0x5e0 [ 339.912519][T13615] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 339.917473][T13615] ? __perf_event_task_sched_in+0x219/0x2a0 [ 339.923195][T13615] kernel_clone+0x21e/0x9e0 [ 339.927533][T13615] ? create_io_thread+0x1e0/0x1e0 [ 339.932394][T13615] ? finish_task_switch+0x167/0x7b0 [ 339.937428][T13615] __x64_sys_clone+0x23f/0x290 [ 339.942029][T13615] ? __do_sys_vfork+0x130/0x130 [ 339.946712][T13615] ? switch_fpu_return+0x1ed/0x3d0 [ 339.951667][T13615] ? __kasan_check_read+0x11/0x20 [ 339.956522][T13615] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 339.961988][T13615] do_syscall_64+0x3d/0xb0 [ 339.966331][T13615] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 339.971973][T13615] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 339.977699][T13615] RIP: 0033:0x7fd15e9c4da9 [ 339.981953][T13615] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 340.001393][T13615] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 340.009640][T13615] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 340.017533][T13615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 340.025345][T13615] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 08:37:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 47) 08:37:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xc4, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x3, [@struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x2, 0x6}, {0x5, 0x0, 0x5}, {0xe, 0x1, 0x7fffffff}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @fwd={0xd}, @datasec={0x4, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x0, 0x9}, {0x5, 0x7fff, 0x10001}], "bb03"}]}, {0x0, [0x30]}}, &(0x7f0000000a40)=""/4096, 0x8b, 0x1000, 0x0, 0xff}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x2, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0xd, 0x30b6e49428856a8e, 0x6, 0x50, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x1f, 0xed, &(0x7f00000002c0)=""/237, 0x41000, 0x1a, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x0, 0xffffffff, 0x800}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000940)=[r3], &(0x7f0000001a40)=[{0x4, 0x1, 0x8, 0x4}, {0x1, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x0, 0x7}, {0x2, 0x4, 0xe}, {0x4, 0x3, 0x2, 0x4}, {0x2, 0x5, 0xe, 0x6}, {0x2, 0x2, 0xa, 0x7}, {0x3, 0x2, 0x7, 0x1}], 0x10, 0x81}, 0x90) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 340.033155][T13615] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 340.040966][T13615] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 340.049045][T13615] 08:37:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) close(r3) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, r1, 0x4, 0x0, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x6a, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4, 0xf4, 0x4, 0x1800, r3, 0x3f, '\x00', r4, r5, 0x4, 0x1, 0x4, 0xd}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x1f00, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0xd70, 0x3, 0x8, 0x1140, 0x1, 0x200, '\x00', r3, r4, 0x2, 0x1, 0x2}, 0x48) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xffff, 0x4}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r6, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xd0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x6, 0x0}, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r1, 0xc, 0x1, 0x54c, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, r1, 0x2b, 0x10, 0x0, @link_id=r4, r6}, 0x20) (async) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000009c0)='net_dev_xmit\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x80}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ffffff7f000000008000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000001000000bf91000000000000b7020000090000008500000084080000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x42, '\x00', r9, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0x7f, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r11], &(0x7f0000001680), 0x10, 0xfffffff9}, 0x90) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_ro(r12, &(0x7f0000000780)='memory.current\x00', 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x789, 0x0, 0x0, 0x0, 0x2896}, [@map_val={0x18, 0x1, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @exit, @jmp={0x5, 0x1, 0x0, 0x8, 0x2, 0x30}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbad}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4080000}}]}, &(0x7f00000008c0)='GPL\x00', 0x63e, 0xbc, &(0x7f0000001a00)=""/188, 0x41000, 0x6, '\x00', r9, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ac0)={0x5, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[r8, r11, 0xffffffffffffffff, r12], &(0x7f0000001b40)=[{0x3, 0x3, 0xe, 0x8}], 0x10, 0x1}, 0x90) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) (rerun: 64) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000005594e7a576d114e83700"], 0x38}, 0x0) write$cgroup_subtree(r14, 0x0, 0xfdef) (async) r15 = openat$cgroup_ro(r14, &(0x7f0000000b80)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r15, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1c, 0xa, &(0x7f0000000500)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x8, 0x99, &(0x7f0000001fc0)=""/153, 0x41000, 0x0, '\x00', r16, 0x2e, r14, 0x8, &(0x7f0000000b00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0xa, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001c40)=[r15, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001c80)=[{0x0, 0x3, 0x8, 0xa}], 0x10, 0x6}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="c0980e6ee913e5bf1dcb8ab331371cf19e03638795135531dba6868f0d511c1220eb293b997541e7d2d02aefce9a82305b6ec682d8ae734412abc71694fa0e8ada26750b77677cc8b9362d0f6be7bef840e814c34d46d42f0beea61007ca71e50944b8d648b62a11bc0afb76999f8beb4d02abef6a5e53cf52825960e38e3c", 0x7f}, {&(0x7f0000000500)="2d2f20c087b540afeb78603b858d66edb68f53406d1171e326b5828c2133a9e2b2e194bc907b7b312c5ec8dd38cb7cba13e9daa3ef82bc032036b5cbae2f23d91cdb33812f53635ab4bbb7c3692bf1b7bd6ddb59e7e320194af8fcdf71d2648c8d3d79f968d0cabd45db48711a928a43aa93d73beec98ad76efcea5f3fd8e74cda69cf40268a", 0x86}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000000000000000000000200000001000000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="ac1414aae0070001000000001c00"/28, @ANYRES32=r16, @ANYBLOB="ac1414aa0a010102000000008c00000000000000000000000700000094040000072bf364010102ffffffffe0000002ffffffffffffffffe0000002ac1414aae0000001ac1414aae000000101440c4b117f000001000100008323f7ac14141de0000001ffffffff6401010200000000e000000164010102ffffffff00441c49c000000001000000000000003f00000006000010000000000000000000"], 0xe8}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1, &(0x7f0000000440)=@raw=[@ldst={0x2, 0x0, 0x2, 0x6, 0x3, 0xffffffffffffffe0, 0x1}], &(0x7f0000000480)='syzkaller\x00', 0xc933, 0x16, &(0x7f00000004c0)=""/22, 0x41000, 0x13, '\x00', r16, 0x0, r0, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xf, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r1, r5, r7, r3, r3, r3], &(0x7f0000000640)=[{0x0, 0x5, 0xe, 0x4}, {0x4, 0x2, 0xf, 0x1}, {0x1, 0x2, 0x0, 0x2}, {0x3, 0x5, 0xc}], 0x10, 0x8}, 0x90) (async, rerun: 64) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r17, r0, 0x29, 0x1e, r1, @link_fd=r0, r6}, 0x20) [ 340.108605][T13622] FAULT_INJECTION: forcing a failure. [ 340.108605][T13622] name failslab, interval 1, probability 0, space 0, times 0 08:37:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, r1, 0x4, 0x0, 0x3}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x6a, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4, 0xf4, 0x4, 0x1800, r3, 0x3f, '\x00', r4, r5, 0x4, 0x1, 0x4, 0xd}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 340.175935][T13622] CPU: 0 PID: 13622 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 340.186119][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 340.196014][T13622] Call Trace: [ 340.199129][T13622] [ 340.201916][T13622] dump_stack_lvl+0x151/0x1b7 [ 340.206423][T13622] ? io_uring_drop_tctx_refs+0x190/0x190 [ 340.211986][T13622] dump_stack+0x15/0x17 [ 340.215968][T13622] should_fail+0x3c6/0x510 [ 340.220222][T13622] __should_failslab+0xa4/0xe0 [ 340.224908][T13622] ? vm_area_dup+0x26/0x230 [ 340.229246][T13622] should_failslab+0x9/0x20 [ 340.233585][T13622] slab_pre_alloc_hook+0x37/0xd0 [ 340.238359][T13622] ? vm_area_dup+0x26/0x230 [ 340.242700][T13622] kmem_cache_alloc+0x44/0x200 [ 340.247385][T13622] vm_area_dup+0x26/0x230 [ 340.251551][T13622] copy_mm+0x9a1/0x13e0 [ 340.255545][T13622] ? irqentry_exit+0x30/0x40 [ 340.259990][T13622] ? copy_signal+0x610/0x610 [ 340.264396][T13622] ? __init_rwsem+0xd6/0x1c0 [ 340.268823][T13622] ? copy_signal+0x4e3/0x610 [ 340.273248][T13622] copy_process+0x1149/0x3290 [ 340.277768][T13622] ? timerqueue_add+0x250/0x270 [ 340.282450][T13622] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 340.287398][T13622] ? enqueue_hrtimer+0xca/0x240 [ 340.292084][T13622] ? __hrtimer_run_queues+0x46b/0xad0 [ 340.297289][T13622] kernel_clone+0x21e/0x9e0 [ 340.301631][T13622] ? create_io_thread+0x1e0/0x1e0 [ 340.306489][T13622] ? clockevents_program_event+0x22f/0x300 [ 340.312132][T13622] __x64_sys_clone+0x23f/0x290 [ 340.316731][T13622] ? __do_sys_vfork+0x130/0x130 [ 340.321421][T13622] ? debug_smp_processor_id+0x17/0x20 [ 340.326628][T13622] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 340.332529][T13622] ? exit_to_user_mode_prepare+0x39/0xa0 [ 340.337997][T13622] do_syscall_64+0x3d/0xb0 [ 340.342250][T13622] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 340.347890][T13622] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 340.353616][T13622] RIP: 0033:0x7fd15e9c4da9 [ 340.357874][T13622] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 340.377310][T13622] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 340.385556][T13622] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 340.393367][T13622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 340.401181][T13622] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 340.408990][T13622] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 340.416803][T13622] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 340.424616][T13622] 08:37:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 48) 08:37:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x2000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, r1, 0x4, 0x0, 0x3}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x6a, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4, 0xf4, 0x4, 0x1800, r3, 0x3f, '\x00', r4, r5, 0x4, 0x1, 0x4, 0xd}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 340.549878][T13658] FAULT_INJECTION: forcing a failure. [ 340.549878][T13658] name failslab, interval 1, probability 0, space 0, times 0 [ 340.586465][T13658] CPU: 0 PID: 13658 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 340.596657][T13658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 340.606529][T13658] Call Trace: [ 340.609659][T13658] [ 340.612427][T13658] dump_stack_lvl+0x151/0x1b7 [ 340.616950][T13658] ? io_uring_drop_tctx_refs+0x190/0x190 [ 340.622415][T13658] dump_stack+0x15/0x17 [ 340.626405][T13658] should_fail+0x3c6/0x510 [ 340.630661][T13658] __should_failslab+0xa4/0xe0 [ 340.635257][T13658] ? vm_area_dup+0x26/0x230 [ 340.639639][T13658] should_failslab+0x9/0x20 [ 340.643937][T13658] slab_pre_alloc_hook+0x37/0xd0 08:37:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x20010, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 340.648708][T13658] ? vm_area_dup+0x26/0x230 [ 340.653310][T13658] kmem_cache_alloc+0x44/0x200 [ 340.657913][T13658] vm_area_dup+0x26/0x230 [ 340.662080][T13658] copy_mm+0x9a1/0x13e0 [ 340.666156][T13658] ? copy_signal+0x610/0x610 [ 340.670579][T13658] ? __init_rwsem+0xd6/0x1c0 [ 340.675006][T13658] ? copy_signal+0x4e3/0x610 [ 340.679521][T13658] copy_process+0x1149/0x3290 [ 340.684044][T13658] ? timerqueue_add+0x250/0x270 [ 340.688721][T13658] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 340.693666][T13658] ? enqueue_hrtimer+0xca/0x240 [ 340.698351][T13658] ? __hrtimer_run_queues+0x46b/0xad0 [ 340.703571][T13658] kernel_clone+0x21e/0x9e0 [ 340.707902][T13658] ? create_io_thread+0x1e0/0x1e0 [ 340.712761][T13658] ? clockevents_program_event+0x22f/0x300 [ 340.718451][T13658] __x64_sys_clone+0x23f/0x290 [ 340.723004][T13658] ? __do_sys_vfork+0x130/0x130 [ 340.727745][T13658] ? debug_smp_processor_id+0x17/0x20 [ 340.732900][T13658] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 340.738803][T13658] ? exit_to_user_mode_prepare+0x39/0xa0 [ 340.744295][T13658] do_syscall_64+0x3d/0xb0 [ 340.748555][T13658] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 340.754160][T13658] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 340.759887][T13658] RIP: 0033:0x7fd15e9c4da9 [ 340.764150][T13658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 340.783581][T13658] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 340.791995][T13658] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 08:37:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 49) 08:37:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xaa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff0362, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xd2}], &(0x7f0000000140)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000a40)=""/4096, 0x40e00, 0x0, '\x00', 0x0, 0x37, r4, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0x1, 0xfffffff9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000380)=[{0x4, 0x2, 0x0, 0x3}, {0x4, 0x4, 0xe, 0x5}, {0x2, 0x5, 0x3, 0x5}, {0x0, 0x3, 0xc, 0x9}, {0x5, 0x4, 0x2, 0x3}, {0x5, 0x1, 0x9, 0x5}, {0x1, 0x5, 0x3, 0x1}, {0x5, 0x4, 0xc, 0x6}, {0x3, 0x5, 0x10, 0xb}, {0x4, 0x3, 0x0, 0x3}], 0x10, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0xd70, 0x3, 0x8, 0x1140, 0x1, 0x200, '\x00', r3, r4, 0x2, 0x1, 0x2}, 0x48) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xffff, 0x4}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r6, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) [ 340.799847][T13658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 340.807618][T13658] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 340.815427][T13658] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 340.823239][T13658] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 340.831054][T13658] 08:37:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x20200, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0xd70, 0x3, 0x8, 0x1140, 0x1, 0x200, '\x00', r3, r4, 0x2, 0x1, 0x2}, 0x48) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xffff, 0x4}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r6, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xaa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff0362, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xd2}], &(0x7f0000000140)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000a40)=""/4096, 0x40e00, 0x0, '\x00', 0x0, 0x37, r4, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0x1, 0xfffffff9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000380)=[{0x4, 0x2, 0x0, 0x3}, {0x4, 0x4, 0xe, 0x5}, {0x2, 0x5, 0x3, 0x5}, {0x0, 0x3, 0xc, 0x9}, {0x5, 0x4, 0x2, 0x3}, {0x5, 0x1, 0x9, 0x5}, {0x1, 0x5, 0x3, 0x1}, {0x5, 0x4, 0xc, 0x6}, {0x3, 0x5, 0x10, 0xb}, {0x4, 0x3, 0x0, 0x3}], 0x10, 0x9}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 340.952812][T13669] FAULT_INJECTION: forcing a failure. [ 340.952812][T13669] name failslab, interval 1, probability 0, space 0, times 0 [ 340.997513][T13669] CPU: 1 PID: 13669 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 341.007689][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 341.017600][T13669] Call Trace: [ 341.020706][T13669] [ 341.023483][T13669] dump_stack_lvl+0x151/0x1b7 [ 341.027998][T13669] ? io_uring_drop_tctx_refs+0x190/0x190 [ 341.033466][T13669] dump_stack+0x15/0x17 [ 341.037453][T13669] should_fail+0x3c6/0x510 [ 341.041707][T13669] __should_failslab+0xa4/0xe0 [ 341.046307][T13669] ? vm_area_dup+0x26/0x230 [ 341.050648][T13669] should_failslab+0x9/0x20 [ 341.054987][T13669] slab_pre_alloc_hook+0x37/0xd0 [ 341.059775][T13669] ? vm_area_dup+0x26/0x230 [ 341.064098][T13669] kmem_cache_alloc+0x44/0x200 [ 341.068704][T13669] vm_area_dup+0x26/0x230 [ 341.072864][T13669] copy_mm+0x9a1/0x13e0 [ 341.076856][T13669] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 341.082851][T13669] ? copy_signal+0x610/0x610 [ 341.087272][T13669] ? __init_rwsem+0xd6/0x1c0 [ 341.091700][T13669] ? copy_signal+0x4e3/0x610 [ 341.096136][T13669] copy_process+0x1149/0x3290 [ 341.100644][T13669] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 341.106284][T13669] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 341.111228][T13669] kernel_clone+0x21e/0x9e0 [ 341.115567][T13669] ? file_end_write+0x1c0/0x1c0 [ 341.120251][T13669] ? create_io_thread+0x1e0/0x1e0 [ 341.125129][T13669] ? mutex_unlock+0xb2/0x260 [ 341.129541][T13669] ? __mutex_lock_slowpath+0x10/0x10 [ 341.134660][T13669] __x64_sys_clone+0x23f/0x290 [ 341.139382][T13669] ? __do_sys_vfork+0x130/0x130 [ 341.144073][T13669] do_syscall_64+0x3d/0xb0 [ 341.148320][T13669] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 341.153968][T13669] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 341.159692][T13669] RIP: 0033:0x7fd15e9c4da9 [ 341.163945][T13669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 341.183383][T13669] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 341.191630][T13669] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 341.199440][T13669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 341.207249][T13669] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 341.215065][T13669] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 341.222876][T13669] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 341.230701][T13669] 08:37:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x80000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:11 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xaa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff0362, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xd2}], &(0x7f0000000140)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000a40)=""/4096, 0x40e00, 0x0, '\x00', 0x0, 0x37, r4, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0x1, 0xfffffff9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000380)=[{0x4, 0x2, 0x0, 0x3}, {0x4, 0x4, 0xe, 0x5}, {0x2, 0x5, 0x3, 0x5}, {0x0, 0x3, 0xc, 0x9}, {0x5, 0x4, 0x2, 0x3}, {0x5, 0x1, 0x9, 0x5}, {0x1, 0x5, 0x3, 0x1}, {0x5, 0x4, 0xc, 0x6}, {0x3, 0x5, 0x10, 0xb}, {0x4, 0x3, 0x0, 0x3}], 0x10, 0x9}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000680)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x10, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xaa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff0362, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xd2}], &(0x7f0000000140)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000a40)=""/4096, 0x40e00, 0x0, '\x00', 0x0, 0x37, r4, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0x1, 0xfffffff9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000380)=[{0x4, 0x2, 0x0, 0x3}, {0x4, 0x4, 0xe, 0x5}, {0x2, 0x5, 0x3, 0x5}, {0x0, 0x3, 0xc, 0x9}, {0x5, 0x4, 0x2, 0x3}, {0x5, 0x1, 0x9, 0x5}, {0x1, 0x5, 0x3, 0x1}, {0x5, 0x4, 0xc, 0x6}, {0x3, 0x5, 0x10, 0xb}, {0x4, 0x3, 0x0, 0x3}], 0x10, 0x9}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 50) [ 341.344663][T13701] FAULT_INJECTION: forcing a failure. [ 341.344663][T13701] name failslab, interval 1, probability 0, space 0, times 0 [ 341.384053][T13701] CPU: 1 PID: 13701 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 341.394313][T13701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 341.404212][T13701] Call Trace: [ 341.407330][T13701] [ 341.410110][T13701] dump_stack_lvl+0x151/0x1b7 [ 341.414624][T13701] ? io_uring_drop_tctx_refs+0x190/0x190 [ 341.420085][T13701] dump_stack+0x15/0x17 [ 341.424162][T13701] should_fail+0x3c6/0x510 [ 341.428418][T13701] __should_failslab+0xa4/0xe0 [ 341.433015][T13701] ? anon_vma_fork+0x1df/0x4e0 [ 341.437616][T13701] should_failslab+0x9/0x20 [ 341.441953][T13701] slab_pre_alloc_hook+0x37/0xd0 [ 341.446746][T13701] ? anon_vma_fork+0x1df/0x4e0 [ 341.451328][T13701] kmem_cache_alloc+0x44/0x200 [ 341.455930][T13701] anon_vma_fork+0x1df/0x4e0 [ 341.460443][T13701] copy_mm+0xa3a/0x13e0 [ 341.464441][T13701] ? copy_signal+0x610/0x610 [ 341.468860][T13701] ? __init_rwsem+0xd6/0x1c0 [ 341.473288][T13701] ? copy_signal+0x4e3/0x610 [ 341.477804][T13701] copy_process+0x1149/0x3290 [ 341.482319][T13701] ? timerqueue_add+0x250/0x270 [ 341.487002][T13701] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 341.491946][T13701] ? enqueue_hrtimer+0xca/0x240 [ 341.496636][T13701] ? __hrtimer_run_queues+0x46b/0xad0 [ 341.501843][T13701] kernel_clone+0x21e/0x9e0 [ 341.506190][T13701] ? create_io_thread+0x1e0/0x1e0 [ 341.511039][T13701] ? clockevents_program_event+0x22f/0x300 [ 341.516688][T13701] __x64_sys_clone+0x23f/0x290 [ 341.521320][T13701] ? __do_sys_vfork+0x130/0x130 [ 341.526143][T13701] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 341.531955][T13701] do_syscall_64+0x3d/0xb0 [ 341.536206][T13701] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 341.541852][T13701] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 341.547577][T13701] RIP: 0033:0x7fd15e9c4da9 [ 341.551831][T13701] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 341.571359][T13701] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 341.579694][T13701] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 341.587504][T13701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 08:37:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x101000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000040)) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x1, 0x4, 0x5}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="182e0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000fc70a42b140d9ca41998362e95c0e27d046bb723ac9e6cc5a9c1fbad20a4bc3a3fcc6bf558624fb0c5328223c9e2c55284e236d69e6ad2c4d3eb43c45e4720def2f39fe4b9cc46394e32481a1d7d5d0a32b358cf8198479d3e5d0f1b23731e34a3964c46102963cabc5b0975b61eca2504ad492d46b2455515b07005e8f94225328f806528461693ee0f8ed2172430fb02"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xed, &(0x7f0000000500)=""/237, 0x40f00, 0x20, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x0, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r2, 0xffffffffffffffff, r1, r1, r7, r2, r1], &(0x7f00000007c0)=[{0x4, 0x3, 0x7, 0x8}], 0x10, 0x2}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xb, 0x33, &(0x7f0000000d80)=ANY=[@ANYBLOB="0c90f8ffffffffffb7080000000000007b8af8ff00000000b708000006000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32=r7, @ANYBLOB="000000000000000018420000070000000000000000000000a426f8ffefffffff186f00000e000000000000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000400000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000100850000000600000018120000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x80000000, 0x2, 0x1, 0x9}, 0x10, r12, r8, 0x3, 0x0, &(0x7f0000000bc0)=[{0x2, 0x5, 0x6, 0xc}, {0x5, 0x4, 0x5}, {0x0, 0x3, 0x8, 0xa}], 0x10, 0x8}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup(r9, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18202) [ 341.595313][T13701] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 341.603125][T13701] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 341.610934][T13701] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 341.618838][T13701] 08:37:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000040)) openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000240)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x1, 0x4, 0x5}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="182e0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000fc70a42b140d9ca41998362e95c0e27d046bb723ac9e6cc5a9c1fbad20a4bc3a3fcc6bf558624fb0c5328223c9e2c55284e236d69e6ad2c4d3eb43c45e4720def2f39fe4b9cc46394e32481a1d7d5d0a32b358cf8198479d3e5d0f1b23731e34a3964c46102963cabc5b0975b61eca2504ad492d46b2455515b07005e8f94225328f806528461693ee0f8ed2172430fb02"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xed, &(0x7f0000000500)=""/237, 0x40f00, 0x20, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x0, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r2, 0xffffffffffffffff, r1, r1, r7, r2, r1], &(0x7f00000007c0)=[{0x4, 0x3, 0x7, 0x8}], 0x10, 0x2}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xb, 0x33, &(0x7f0000000d80)=ANY=[@ANYBLOB="0c90f8ffffffffffb7080000000000007b8af8ff00000000b708000006000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32=r7, @ANYBLOB="000000000000000018420000070000000000000000000000a426f8ffefffffff186f00000e000000000000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000400000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000100850000000600000018120000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x80000000, 0x2, 0x1, 0x9}, 0x10, r12, r8, 0x3, 0x0, &(0x7f0000000bc0)=[{0x2, 0x5, 0x6, 0xc}, {0x5, 0x4, 0x5}, {0x0, 0x3, 0x8, 0xa}], 0x10, 0x8}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup(r9, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r9, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18202) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18202) 08:37:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 64) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async, rerun: 32) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000040)) (async) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x1, 0x4, 0x5}, 0x48) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="182e0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000fc70a42b140d9ca41998362e95c0e27d046bb723ac9e6cc5a9c1fbad20a4bc3a3fcc6bf558624fb0c5328223c9e2c55284e236d69e6ad2c4d3eb43c45e4720def2f39fe4b9cc46394e32481a1d7d5d0a32b358cf8198479d3e5d0f1b23731e34a3964c46102963cabc5b0975b61eca2504ad492d46b2455515b07005e8f94225328f806528461693ee0f8ed2172430fb02"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0xed, &(0x7f0000000500)=""/237, 0x40f00, 0x20, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x0, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r2, 0xffffffffffffffff, r1, r1, r7, r2, r1], &(0x7f00000007c0)=[{0x4, 0x3, 0x7, 0x8}], 0x10, 0x2}, 0x90) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x1, 0x0}, 0x8) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xb, 0x33, &(0x7f0000000d80)=ANY=[@ANYBLOB="0c90f8ffffffffffb7080000000000007b8af8ff00000000b708000006000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000018130000", @ANYRES32=r7, @ANYBLOB="000000000000000018420000070000000000000000000000a426f8ffefffffff186f00000e000000000000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000400000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000100850000000600000018120000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x80000000, 0x2, 0x1, 0x9}, 0x10, r12, r8, 0x3, 0x0, &(0x7f0000000bc0)=[{0x2, 0x5, 0x6, 0xc}, {0x5, 0x4, 0x5}, {0x0, 0x3, 0x8, 0xa}], 0x10, 0x8}, 0x90) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup(r9, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18202) 08:37:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xa002a0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0x1, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @struct={0xf, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x0, 0x2, 0x10000}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x9fbd482d4f302a44, 0x2e, 0x61]}}, &(0x7f0000000bc0)=""/243, 0x4e, 0xf3, 0x1, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0x20, &(0x7f0000000e80)={&(0x7f0000000d80)=""/49, 0x31, 0x0, &(0x7f0000000dc0)=""/175, 0xaf}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x70}, {0x85, 0x0, 0x0, 0x29}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x54dc8c87}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x3, 0x5, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0xc2d00, 0x30, '\x00', r1, 0x37, r2, 0x8, &(0x7f0000000d00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x7, 0x8, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[r4, r5, r6], &(0x7f0000001000)=[{0x5, 0x3, 0x2, 0xa}, {0x5, 0x2, 0xc, 0x6}, {0x1, 0x3, 0x8, 0x3}], 0x10, 0x7f}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000940)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)={r9}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x4, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@map=r8, r0, 0x15, 0x4, 0x0, @prog_id=r9, r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xab, &(0x7f00000002c0)=""/171, 0x41100, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x3f, 0xfffffffb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1], &(0x7f0000000380)=[{0x1, 0x32080000, 0xb, 0x8}, {0x4, 0x5, 0x0, 0x5}, {0x5, 0x2, 0xa, 0x8}, {0x3, 0x4, 0xf, 0x7}], 0x10, 0x2}, 0x90) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r11, r12}, 0xc) 08:37:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffb6) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0x1, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @struct={0xf, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x0, 0x2, 0x10000}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x9fbd482d4f302a44, 0x2e, 0x61]}}, &(0x7f0000000bc0)=""/243, 0x4e, 0xf3, 0x1, 0x1}, 0x20) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0x20, &(0x7f0000000e80)={&(0x7f0000000d80)=""/49, 0x31, 0x0, &(0x7f0000000dc0)=""/175, 0xaf}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x70}, {0x85, 0x0, 0x0, 0x29}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x54dc8c87}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x3, 0x5, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0xc2d00, 0x30, '\x00', r1, 0x37, r2, 0x8, &(0x7f0000000d00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x7, 0x8, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[r4, r5, r6], &(0x7f0000001000)=[{0x5, 0x3, 0x2, 0xa}, {0x5, 0x2, 0xc, 0x6}, {0x1, 0x3, 0x8, 0x3}], 0x10, 0x7f}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000940)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)={r9}, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x4, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@map=r8, r0, 0x15, 0x4, 0x0, @prog_id=r9, r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xab, &(0x7f00000002c0)=""/171, 0x41100, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x3f, 0xfffffffb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1], &(0x7f0000000380)=[{0x1, 0x32080000, 0xb, 0x8}, {0x4, 0x5, 0x0, 0x5}, {0x5, 0x2, 0xa, 0x8}, {0x3, 0x4, 0xf, 0x7}], 0x10, 0x2}, 0x90) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r11, r12}, 0xc) 08:37:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xf0ff1f, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 51) 08:37:12 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0x1, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @struct={0xf, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x0, 0x2, 0x10000}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x9fbd482d4f302a44, 0x2e, 0x61]}}, &(0x7f0000000bc0)=""/243, 0x4e, 0xf3, 0x1, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0x20, &(0x7f0000000e80)={&(0x7f0000000d80)=""/49, 0x31, 0x0, &(0x7f0000000dc0)=""/175, 0xaf}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0x20, &(0x7f0000000e80)={&(0x7f0000000d80)=""/49, 0x31, 0x0, &(0x7f0000000dc0)=""/175, 0xaf}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x70}, {0x85, 0x0, 0x0, 0x29}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x54dc8c87}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x3, 0x5, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0xc2d00, 0x30, '\x00', r1, 0x37, r2, 0x8, &(0x7f0000000d00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x7, 0x8, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x3, &(0x7f0000000fc0)=[r4, r5, r6], &(0x7f0000001000)=[{0x5, 0x3, 0x2, 0xa}, {0x5, 0x2, 0xc, 0x6}, {0x1, 0x3, 0x8, 0x3}], 0x10, 0x7f}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000940)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)={r9}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)={r9}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x4, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x4, 0x0, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@map=r8, r0, 0x15, 0x4, 0x0, @prog_id=r9, r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xab, &(0x7f00000002c0)=""/171, 0x41100, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x3f, 0xfffffffb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1], &(0x7f0000000380)=[{0x1, 0x32080000, 0xb, 0x8}, {0x4, 0x5, 0x0, 0x5}, {0x5, 0x2, 0xa, 0x8}, {0x3, 0x4, 0xf, 0x7}], 0x10, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r11, r12}, 0xc) [ 341.953387][T13748] FAULT_INJECTION: forcing a failure. [ 341.953387][T13748] name failslab, interval 1, probability 0, space 0, times 0 [ 341.990225][T13748] CPU: 0 PID: 13748 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 342.000506][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 342.010399][T13748] Call Trace: [ 342.013519][T13748] [ 342.016297][T13748] dump_stack_lvl+0x151/0x1b7 [ 342.020813][T13748] ? io_uring_drop_tctx_refs+0x190/0x190 [ 342.026284][T13748] dump_stack+0x15/0x17 [ 342.030271][T13748] should_fail+0x3c6/0x510 [ 342.034530][T13748] __should_failslab+0xa4/0xe0 [ 342.039133][T13748] ? vm_area_dup+0x26/0x230 [ 342.043462][T13748] should_failslab+0x9/0x20 [ 342.047803][T13748] slab_pre_alloc_hook+0x37/0xd0 [ 342.052577][T13748] ? vm_area_dup+0x26/0x230 [ 342.057003][T13748] kmem_cache_alloc+0x44/0x200 [ 342.061703][T13748] vm_area_dup+0x26/0x230 [ 342.065857][T13748] copy_mm+0x9a1/0x13e0 [ 342.069852][T13748] ? copy_signal+0x610/0x610 [ 342.074275][T13748] ? __init_rwsem+0xd6/0x1c0 [ 342.078702][T13748] ? copy_signal+0x4e3/0x610 [ 342.083131][T13748] copy_process+0x1149/0x3290 [ 342.087647][T13748] ? timerqueue_add+0x250/0x270 [ 342.092329][T13748] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 342.097282][T13748] ? enqueue_hrtimer+0xca/0x240 [ 342.101958][T13748] ? __hrtimer_run_queues+0x46b/0xad0 [ 342.107164][T13748] kernel_clone+0x21e/0x9e0 [ 342.111501][T13748] ? create_io_thread+0x1e0/0x1e0 [ 342.116359][T13748] ? clockevents_program_event+0x22f/0x300 [ 342.122623][T13748] __x64_sys_clone+0x23f/0x290 [ 342.127211][T13748] ? __do_sys_vfork+0x130/0x130 [ 342.131901][T13748] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 342.137715][T13748] do_syscall_64+0x3d/0xb0 [ 342.141964][T13748] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 342.147623][T13748] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 342.153333][T13748] RIP: 0033:0x7fd15e9c4da9 [ 342.157591][T13748] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 342.177030][T13748] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 342.185363][T13748] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 342.193181][T13748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 08:37:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffb6) (async) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffb6) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = getpid() perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x3f, 0x36, 0x40, 0xab, 0x0, 0x1ff, 0x40250, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfa, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x5000, 0x6, 0x3ff, 0x8, 0x5, 0x4, 0x4, 0x0, 0x746, 0x0, 0x81}, r2, 0xf, r1, 0x2) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 342.200984][T13748] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 342.208791][T13748] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 342.216602][T13748] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 342.224418][T13748] 08:37:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x1000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = getpid() perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x3f, 0x36, 0x40, 0xab, 0x0, 0x1ff, 0x40250, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfa, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x5000, 0x6, 0x3ff, 0x8, 0x5, 0x4, 0x4, 0x0, 0x746, 0x0, 0x81}, r2, 0xf, r1, 0x2) (async) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x3f, 0x36, 0x40, 0xab, 0x0, 0x1ff, 0x40250, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfa, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x5000, 0x6, 0x3ff, 0x8, 0x5, 0x4, 0x4, 0x0, 0x746, 0x0, 0x81}, r2, 0xf, r1, 0x2) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 52) [ 342.362818][T13765] FAULT_INJECTION: forcing a failure. [ 342.362818][T13765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.383638][T13765] CPU: 1 PID: 13765 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 342.393814][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 342.403703][T13765] Call Trace: [ 342.406827][T13765] 08:37:12 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001040)={@ifindex, 0xffffffffffffffff, 0x0, 0x24, 0x0, @link_id}, 0x20) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000003000000000000007a976b7b18110000", @ANYRES32, @ANYBLOB="000000000000edcb59f0040000b702000014000000b703000030a255157834e134ccaa0bf5000000008500000083020000bf09000000000000000cc9000000000095000000000000008500000002000000183a00000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000100008500000006000000950000000000000085100000f9ffffffbf91000000000000b7020000090000008500000085000000b7000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x10001, 0x6b, &(0x7f0000000580)=""/107, 0x41100, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x3ff}, 0x10, 0x65b8, r7, 0x2, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x5, 0xd, 0xc}, {0x5, 0x3, 0x1fd, 0x5}], 0x10, 0x8}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x400000) r9 = syz_clone(0x44004000, &(0x7f0000000640)="37acb25c63cc6d902cf48584f34f7e2ef7d9e88852b3f4564b28bc9425cdeef8464239e8b3cab5cc2bf01c7dab7537b9e3f724aac94c0c3aa453c053a96920ecd4891052026a35", 0x47, 0x0, &(0x7f0000000700), &(0x7f0000000740)="34d939ab84cadb3499e48db631de00e2d5a72bd936b249032ad00eecb86be6e28f5297cbe9399e5e04bb026a7d9f89aac5443809fd0bec028c9cf12472dbd8ebde23cc2a2259d09e4eeff4965dc4") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000007c0)=r9, 0x12) getpid() sendmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40), 0xe0, 0x8090}, 0x20046080) gettid() r10 = getpid() r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x0) sendmsg$unix(r12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1cb100000002000000", @ANYRES32=r14, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r15], 0x38}, 0x0) sendmsg$unix(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="a1f70cdbe22204f1c4e3b8decea728df2a1a821e25fd2c5187e0", 0x1a}], 0x1, &(0x7f0000000d80)=[@rights={{0x38, 0x1, 0x1, [r2, r1, r2, r8, r4, r5, r3, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, r17}}}, @rights={{0x38, 0x1, 0x1, [r4, r1, r7, r8, r0, r13, r7, 0xffffffffffffffff, r0, r1]}}], 0xe8, 0x20000000}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x1000006, 0x0, 0x0, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x2c, 0x8, 0x0, 0x0}}, 0x10) r19 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup(r19, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x40, 0x31, &(0x7f00000004c0)=""/49, 0x41100, 0x1a, '\x00', r18, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r20, 0xffffffffffffffff, r19]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xad}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x6, 0x1, 0x4, 0xfffffffffffffff8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x101, 0x20, &(0x7f0000000040)=""/32, 0x41100, 0x24, '\x00', r18, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[r3, 0xffffffffffffffff, r5, 0x1, r3, r5, r4, r2, r3, 0xffffffffffffffff], &(0x7f0000000280)=[{0x2, 0x4, 0x8}, {0x3, 0x5, 0x6, 0xf}, {0x1, 0x1, 0x7, 0x2}, {0x3, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x90) 08:37:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x2000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = getpid() perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x3f, 0x36, 0x40, 0xab, 0x0, 0x1ff, 0x40250, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfa, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x5000, 0x6, 0x3ff, 0x8, 0x5, 0x4, 0x4, 0x0, 0x746, 0x0, 0x81}, r2, 0xf, r1, 0x2) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) getpid() (async) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x3f, 0x36, 0x40, 0xab, 0x0, 0x1ff, 0x40250, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfa, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x5000, 0x6, 0x3ff, 0x8, 0x5, 0x4, 0x4, 0x0, 0x746, 0x0, 0x81}, r2, 0xf, r1, 0x2) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) [ 342.409605][T13765] dump_stack_lvl+0x151/0x1b7 [ 342.414118][T13765] ? io_uring_drop_tctx_refs+0x190/0x190 [ 342.419594][T13765] dump_stack+0x15/0x17 [ 342.423580][T13765] should_fail+0x3c6/0x510 [ 342.427832][T13765] should_fail_alloc_page+0x5a/0x80 [ 342.432872][T13765] prepare_alloc_pages+0x15c/0x700 [ 342.437816][T13765] ? __alloc_pages_bulk+0xe40/0xe40 [ 342.442849][T13765] __alloc_pages+0x18c/0x8f0 [ 342.447274][T13765] ? prep_new_page+0x110/0x110 [ 342.451876][T13765] ? 0xffffffffa002a000 [ 342.455868][T13765] ? is_bpf_text_address+0x172/0x190 [ 342.460986][T13765] pte_alloc_one+0x73/0x1b0 [ 342.465321][T13765] ? pfn_modify_allowed+0x2f0/0x2f0 [ 342.470618][T13765] ? irqentry_exit+0x30/0x40 [ 342.475042][T13765] __pte_alloc+0x86/0x350 [ 342.479207][T13765] ? irqentry_exit+0x30/0x40 [ 342.483634][T13765] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 342.489277][T13765] ? free_pgtables+0x280/0x280 [ 342.493877][T13765] ? __kasan_check_write+0x14/0x20 [ 342.498824][T13765] copy_page_range+0x28a8/0x2f90 [ 342.503594][T13765] ? __kasan_slab_alloc+0xb1/0xe0 [ 342.508465][T13765] ? pfn_valid+0x1e0/0x1e0 [ 342.512717][T13765] ? vma_gap_callbacks_rotate+0x9a/0x210 [ 342.518182][T13765] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 342.523732][T13765] ? __rb_insert_augmented+0x5de/0x610 [ 342.529033][T13765] copy_mm+0xc7e/0x13e0 [ 342.533025][T13765] ? copy_signal+0x610/0x610 [ 342.537452][T13765] ? __init_rwsem+0xd6/0x1c0 [ 342.541873][T13765] ? copy_signal+0x4e3/0x610 [ 342.546299][T13765] copy_process+0x1149/0x3290 [ 342.550818][T13765] ? irqentry_exit+0x30/0x40 [ 342.555239][T13765] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 342.560184][T13765] ? vfs_write+0x9ec/0x1110 [ 342.564525][T13765] kernel_clone+0x21e/0x9e0 [ 342.568864][T13765] ? irqentry_exit+0x30/0x40 [ 342.573289][T13765] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 342.578932][T13765] ? create_io_thread+0x1e0/0x1e0 [ 342.583790][T13765] ? fput_many+0x4b/0x1b0 [ 342.587959][T13765] __x64_sys_clone+0x23f/0x290 [ 342.592556][T13765] ? __do_sys_vfork+0x130/0x130 [ 342.597243][T13765] ? ksys_write+0x260/0x2c0 [ 342.601586][T13765] ? debug_smp_processor_id+0x17/0x20 [ 342.606789][T13765] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 342.613560][T13765] ? exit_to_user_mode_prepare+0x39/0xa0 [ 342.619028][T13765] do_syscall_64+0x3d/0xb0 [ 342.623378][T13765] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 342.629110][T13765] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 342.634838][T13765] RIP: 0033:0x7fd15e9c4da9 [ 342.639089][T13765] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 342.658529][T13765] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 342.666775][T13765] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 342.674584][T13765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 342.682400][T13765] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 342.690225][T13765] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 342.698020][T13765] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 342.705841][T13765] 08:37:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (rerun: 64) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffb6) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 53) 08:37:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x7000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:13 executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x5e9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x18}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="912a77df1d6ceb884072adad0cee2968ffd1c6c1b690bdf1d117bd89d192e6e445db66c1283f9bb24c82d01e8694bb40d348b28f0c33348d4c58ce56d0", 0x3d}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, r2, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x88, 0x40000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000340), 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@cgroup=r2, r5, 0x25, 0x4, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xc1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x6a, &(0x7f0000000800)=""/106, 0x0, 0x65, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000880)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r1, r5, 0x1], &(0x7f00000009c0)=[{0x0, 0x0, 0xe, 0xc}], 0x10, 0xcf}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0xffffffffffffffb5, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0)=r7, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xad, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x401}, 0xc) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32, @ANYBLOB="000000000000001e372e315222323800b7030000000000008500000083000000bf09000000000000010000000000950000000000000018460000feffffff0000000000000000184b00000200000000000000000000008520000001000000bf91000000000000ff070000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x33, &(0x7f0000000640)=""/51, 0x40f00, 0x10, '\x00', 0x0, 0x12, r5, 0x8, &(0x7f0000000680)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x10, 0xace29e7, 0x10000}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r8, r9, r10, r11], 0x0, 0x10, 0x3}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r13 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r13}, 0x0, &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000070000000000000003090000000f80002b0e0000b7080000000000007b8af8ff00000000b7080000810000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="fe00000000000000b70500000e000014c5000000a5000000185200000c0000000000000000000000950000000000000080c7d6ed26c0916c437ecae9dd50eff9aa93fe9ae4f0dbcabdb052c2362cf2ab56051af7d4164d0df66fe1a56176be6b5c4ea5bcdc71780b3a176c04576f1d96894c7124fa351cc968c52c73d9f52ea79ba5e207fe4f62288b4c401da94e13bef9381516a2cc0518fca01813d8e13b0a4f5b2b65739c6bc5383aff849bf0fbf63bd57d8a5953008c8ac10b78f618a1ec6e8ecd869915fc137adb43827c945a7200e3f1babe06a77d0f135325b8b8bdf1247a18e3b015e55345ff7c2592e1"], &(0x7f0000000040)='GPL\x00', 0x6, 0xc4, &(0x7f0000000380)=""/196, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[r13, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x5, 0x7, 0x1}, {0x0, 0x2, 0xb, 0x3}, {0x0, 0x5, 0xe, 0xb}, {0x0, 0x2, 0x8, 0x4}, {0x1, 0x3, 0x8, 0xb}, {0x4, 0x1, 0x2, 0x8}], 0x10, 0x5}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) [ 342.860425][T13790] FAULT_INJECTION: forcing a failure. [ 342.860425][T13790] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.934942][T13790] CPU: 0 PID: 13790 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 342.945118][T13790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 342.955015][T13790] Call Trace: [ 342.958135][T13790] [ 342.960917][T13790] dump_stack_lvl+0x151/0x1b7 [ 342.965427][T13790] ? io_uring_drop_tctx_refs+0x190/0x190 [ 342.970895][T13790] dump_stack+0x15/0x17 [ 342.974895][T13790] should_fail+0x3c6/0x510 [ 342.979143][T13790] should_fail_alloc_page+0x5a/0x80 [ 342.984174][T13790] prepare_alloc_pages+0x15c/0x700 [ 342.989121][T13790] ? __alloc_pages_bulk+0xe40/0xe40 [ 342.994155][T13790] __alloc_pages+0x18c/0x8f0 [ 342.998587][T13790] ? prep_new_page+0x110/0x110 [ 343.003180][T13790] ? __alloc_pages+0x27e/0x8f0 [ 343.007787][T13790] ? irqentry_exit+0x30/0x40 [ 343.012208][T13790] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 343.017854][T13790] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 343.023841][T13790] __pmd_alloc+0xb1/0x550 [ 343.028007][T13790] ? __pud_alloc+0xfa/0x260 [ 343.032362][T13790] ? __pud_alloc+0x260/0x260 [ 343.036771][T13790] ? __pud_alloc+0x213/0x260 [ 343.041326][T13790] ? do_handle_mm_fault+0x2330/0x2330 [ 343.046527][T13790] ? __stack_depot_save+0x34/0x470 [ 343.051479][T13790] copy_page_range+0x2b3d/0x2f90 [ 343.056242][T13790] ? __kasan_slab_alloc+0xb1/0xe0 [ 343.061102][T13790] ? slab_post_alloc_hook+0x53/0x2c0 [ 343.066232][T13790] ? copy_mm+0xa3a/0x13e0 [ 343.070393][T13790] ? copy_process+0x1149/0x3290 [ 343.075079][T13790] ? kernel_clone+0x21e/0x9e0 [ 343.079719][T13790] ? do_syscall_64+0x3d/0xb0 [ 343.084140][T13790] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 343.090057][T13790] ? pfn_valid+0x1e0/0x1e0 [ 343.094297][T13790] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 343.099937][T13790] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 343.105930][T13790] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 343.111482][T13790] ? __rb_insert_augmented+0x5de/0x610 [ 343.116782][T13790] copy_mm+0xc7e/0x13e0 [ 343.120778][T13790] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 343.126845][T13790] ? copy_signal+0x610/0x610 [ 343.131353][T13790] ? __init_rwsem+0xd6/0x1c0 08:37:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x8000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x9000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 343.135781][T13790] ? copy_signal+0x4e3/0x610 [ 343.140221][T13790] copy_process+0x1149/0x3290 [ 343.144727][T13790] ? timerqueue_add+0x250/0x270 [ 343.149415][T13790] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 343.154361][T13790] ? enqueue_hrtimer+0xca/0x240 [ 343.159041][T13790] ? __hrtimer_run_queues+0x46b/0xad0 [ 343.164254][T13790] kernel_clone+0x21e/0x9e0 [ 343.168697][T13790] ? create_io_thread+0x1e0/0x1e0 [ 343.173554][T13790] ? clockevents_program_event+0x22f/0x300 [ 343.179294][T13790] __x64_sys_clone+0x23f/0x290 [ 343.183882][T13790] ? __do_sys_vfork+0x130/0x130 [ 343.188572][T13790] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 343.194393][T13790] do_syscall_64+0x3d/0xb0 [ 343.198635][T13790] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 343.204277][T13790] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 343.210005][T13790] RIP: 0033:0x7fd15e9c4da9 [ 343.214263][T13790] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 08:37:13 executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x5e9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x18}, 0x18) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="912a77df1d6ceb884072adad0cee2968ffd1c6c1b690bdf1d117bd89d192e6e445db66c1283f9bb24c82d01e8694bb40d348b28f0c33348d4c58ce56d0", 0x3d}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, r2, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x88, 0x40000}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r6 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000340), 0x12) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@cgroup=r2, r5, 0x25, 0x4, 0xffffffffffffffff, @prog_id}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xc1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x6a, &(0x7f0000000800)=""/106, 0x0, 0x65, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000880)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r1, r5, 0x1], &(0x7f00000009c0)=[{0x0, 0x0, 0xe, 0xc}], 0x10, 0xcf}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0xffffffffffffffb5, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0)=r7, 0x4) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xad, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x401}, 0xc) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32, @ANYBLOB="000000000000001e372e315222323800b7030000000000008500000083000000bf09000000000000010000000000950000000000000018460000feffffff0000000000000000184b00000200000000000000000000008520000001000000bf91000000000000ff070000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x33, &(0x7f0000000640)=""/51, 0x40f00, 0x10, '\x00', 0x0, 0x12, r5, 0x8, &(0x7f0000000680)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x10, 0xace29e7, 0x10000}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r8, r9, r10, r11], 0x0, 0x10, 0x3}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r13 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r13}, 0x0, &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000070000000000000003090000000f80002b0e0000b7080000000000007b8af8ff00000000b7080000810000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="fe00000000000000b70500000e000014c5000000a5000000185200000c0000000000000000000000950000000000000080c7d6ed26c0916c437ecae9dd50eff9aa93fe9ae4f0dbcabdb052c2362cf2ab56051af7d4164d0df66fe1a56176be6b5c4ea5bcdc71780b3a176c04576f1d96894c7124fa351cc968c52c73d9f52ea79ba5e207fe4f62288b4c401da94e13bef9381516a2cc0518fca01813d8e13b0a4f5b2b65739c6bc5383aff849bf0fbf63bd57d8a5953008c8ac10b78f618a1ec6e8ecd869915fc137adb43827c945a7200e3f1babe06a77d0f135325b8b8bdf1247a18e3b015e55345ff7c2592e1"], &(0x7f0000000040)='GPL\x00', 0x6, 0xc4, &(0x7f0000000380)=""/196, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[r13, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x5, 0x7, 0x1}, {0x0, 0x2, 0xb, 0x3}, {0x0, 0x5, 0xe, 0xb}, {0x0, 0x2, 0x8, 0x4}, {0x1, 0x3, 0x8, 0xb}, {0x4, 0x1, 0x2, 0x8}], 0x10, 0x5}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) 08:37:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001040)={@ifindex, 0xffffffffffffffff, 0x0, 0x24, 0x0, @link_id}, 0x20) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) r6 = syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000003000000000000007a976b7b18110000", @ANYRES32, @ANYBLOB="000000000000edcb59f0040000b702000014000000b703000030a255157834e134ccaa0bf5000000008500000083020000bf09000000000000000cc9000000000095000000000000008500000002000000183a00000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000100008500000006000000950000000000000085100000f9ffffffbf91000000000000b7020000090000008500000085000000b7000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x10001, 0x6b, &(0x7f0000000580)=""/107, 0x41100, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x3ff}, 0x10, 0x65b8, r7, 0x2, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x5, 0xd, 0xc}, {0x5, 0x3, 0x1fd, 0x5}], 0x10, 0x8}, 0x90) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x400000) r9 = syz_clone(0x44004000, &(0x7f0000000640)="37acb25c63cc6d902cf48584f34f7e2ef7d9e88852b3f4564b28bc9425cdeef8464239e8b3cab5cc2bf01c7dab7537b9e3f724aac94c0c3aa453c053a96920ecd4891052026a35", 0x47, 0x0, &(0x7f0000000700), &(0x7f0000000740)="34d939ab84cadb3499e48db631de00e2d5a72bd936b249032ad00eecb86be6e28f5297cbe9399e5e04bb026a7d9f89aac5443809fd0bec028c9cf12472dbd8ebde23cc2a2259d09e4eeff4965dc4") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000007c0)=r9, 0x12) (async) getpid() (async) sendmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40), 0xe0, 0x8090}, 0x20046080) (async) gettid() (async) r10 = getpid() (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r14 = getpid() (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x0) sendmsg$unix(r12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1cb100000002000000", @ANYRES32=r14, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r15], 0x38}, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="a1f70cdbe22204f1c4e3b8decea728df2a1a821e25fd2c5187e0", 0x1a}], 0x1, &(0x7f0000000d80)=[@rights={{0x38, 0x1, 0x1, [r2, r1, r2, r8, r4, r5, r3, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, r17}}}, @rights={{0x38, 0x1, 0x1, [r4, r1, r7, r8, r0, r13, r7, 0xffffffffffffffff, r0, r1]}}], 0xe8, 0x20000000}, 0x20000000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x1000006, 0x0, 0x0, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x2c, 0x8, 0x0, 0x0}}, 0x10) (async) r19 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup(r19, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) (async) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x40, 0x31, &(0x7f00000004c0)=""/49, 0x41100, 0x1a, '\x00', r18, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r20, 0xffffffffffffffff, r19]}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xad}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x6, 0x1, 0x4, 0xfffffffffffffff8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x101, 0x20, &(0x7f0000000040)=""/32, 0x41100, 0x24, '\x00', r18, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[r3, 0xffffffffffffffff, r5, 0x1, r3, r5, r4, r2, r3, 0xffffffffffffffff], &(0x7f0000000280)=[{0x2, 0x4, 0x8}, {0x3, 0x5, 0x6, 0xf}, {0x1, 0x1, 0x7, 0x2}, {0x3, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x90) 08:37:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xed, 0x9, 0x9, 0x3f, 0x0, 0x4, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x65524432}, 0xa000, 0xffffffffffffff5a, 0xc, 0x2, 0x4, 0x1, 0x6fa3, 0x0, 0x8, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x4, r3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x8, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xc4, 0x0, 0x8000, 0x877}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000600)=0x8) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x6) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r3, 0x2, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0x31, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @ldst={0x1, 0x0, 0x3, 0x2, 0x9, 0x40, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x46940227}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xfe, 0x48, &(0x7f0000000500)=""/72, 0x40f00, 0x41, '\x00', 0x0, 0x23, r3, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x7ff, 0x6}, 0x10, 0xffffffffffffffff, r7, 0x4, &(0x7f00000005c0)=[r7, r8], &(0x7f0000000640)=[{0x2, 0x2, 0x2, 0x8}, {0x1, 0x3, 0x8, 0xc}, {0x4, 0x4, 0x1, 0x7}, {0x5, 0x3, 0x4, 0x3}], 0x10, 0x401}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x18200) perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x4, 0x8, 0x0, 0x81, 0x100, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8, 0xc40}, 0x0, 0x23b, 0x2, 0x9, 0x47, 0x1, 0x7, 0x0, 0xa4, 0x0, 0x8}, r6, 0xb, r9, 0x2) [ 343.233708][T13790] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 343.241947][T13790] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 343.249757][T13790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 343.257573][T13790] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 343.265377][T13790] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 343.273363][T13790] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 343.281180][T13790] 08:37:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 54) 08:37:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x10000200, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:13 executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x5e9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x18}, 0x18) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (rerun: 32) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="912a77df1d6ceb884072adad0cee2968ffd1c6c1b690bdf1d117bd89d192e6e445db66c1283f9bb24c82d01e8694bb40d348b28f0c33348d4c58ce56d0", 0x3d}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, r2, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x88, 0x40000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r6 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000340), 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@cgroup=r2, r5, 0x25, 0x4, 0xffffffffffffffff, @prog_id}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xc1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x5, 0x6a, &(0x7f0000000800)=""/106, 0x0, 0x65, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000880)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r1, r5, 0x1], &(0x7f00000009c0)=[{0x0, 0x0, 0xe, 0xc}], 0x10, 0xcf}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0xffffffffffffffb5, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0)=r7, 0x4) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xad, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x401}, 0xc) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32, @ANYBLOB="000000000000001e372e315222323800b7030000000000008500000083000000bf09000000000000010000000000950000000000000018460000feffffff0000000000000000184b00000200000000000000000000008520000001000000bf91000000000000ff070000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x33, &(0x7f0000000640)=""/51, 0x40f00, 0x10, '\x00', 0x0, 0x12, r5, 0x8, &(0x7f0000000680)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x10, 0xace29e7, 0x10000}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r8, r9, r10, r11], 0x0, 0x10, 0x3}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r13 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r13}, 0x0, &(0x7f0000000180)}, 0x20) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000070000000000000003090000000f80002b0e0000b7080000000000007b8af8ff00000000b7080000810000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="fe00000000000000b70500000e000014c5000000a5000000185200000c0000000000000000000000950000000000000080c7d6ed26c0916c437ecae9dd50eff9aa93fe9ae4f0dbcabdb052c2362cf2ab56051af7d4164d0df66fe1a56176be6b5c4ea5bcdc71780b3a176c04576f1d96894c7124fa351cc968c52c73d9f52ea79ba5e207fe4f62288b4c401da94e13bef9381516a2cc0518fca01813d8e13b0a4f5b2b65739c6bc5383aff849bf0fbf63bd57d8a5953008c8ac10b78f618a1ec6e8ecd869915fc137adb43827c945a7200e3f1babe06a77d0f135325b8b8bdf1247a18e3b015e55345ff7c2592e1"], &(0x7f0000000040)='GPL\x00', 0x6, 0xc4, &(0x7f0000000380)=""/196, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[r13, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x5, 0x7, 0x1}, {0x0, 0x2, 0xb, 0x3}, {0x0, 0x5, 0xe, 0xb}, {0x0, 0x2, 0x8, 0x4}, {0x1, 0x3, 0x8, 0xb}, {0x4, 0x1, 0x2, 0x8}], 0x10, 0x5}, 0x90) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) 08:37:13 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001040)={@ifindex, 0xffffffffffffffff, 0x0, 0x24, 0x0, @link_id}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000003000000000000007a976b7b18110000", @ANYRES32, @ANYBLOB="000000000000edcb59f0040000b702000014000000b703000030a255157834e134ccaa0bf5000000008500000083020000bf09000000000000000cc9000000000095000000000000008500000002000000183a00000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000100008500000006000000950000000000000085100000f9ffffffbf91000000000000b7020000090000008500000085000000b7000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x10001, 0x6b, &(0x7f0000000580)=""/107, 0x41100, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x3ff}, 0x10, 0x65b8, r7, 0x2, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x5, 0xd, 0xc}, {0x5, 0x3, 0x1fd, 0x5}], 0x10, 0x8}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x400000) r9 = syz_clone(0x44004000, &(0x7f0000000640)="37acb25c63cc6d902cf48584f34f7e2ef7d9e88852b3f4564b28bc9425cdeef8464239e8b3cab5cc2bf01c7dab7537b9e3f724aac94c0c3aa453c053a96920ecd4891052026a35", 0x47, 0x0, &(0x7f0000000700), &(0x7f0000000740)="34d939ab84cadb3499e48db631de00e2d5a72bd936b249032ad00eecb86be6e28f5297cbe9399e5e04bb026a7d9f89aac5443809fd0bec028c9cf12472dbd8ebde23cc2a2259d09e4eeff4965dc4") write$cgroup_pid(0xffffffffffffffff, &(0x7f00000007c0)=r9, 0x12) getpid() (async) getpid() sendmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40), 0xe0, 0x8090}, 0x20046080) gettid() (async) gettid() getpid() (async) r10 = getpid() r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x0) sendmsg$unix(r12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1cb100000002000000", @ANYRES32=r14, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r15], 0x38}, 0x0) sendmsg$unix(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="a1f70cdbe22204f1c4e3b8decea728df2a1a821e25fd2c5187e0", 0x1a}], 0x1, &(0x7f0000000d80)=[@rights={{0x38, 0x1, 0x1, [r2, r1, r2, r8, r4, r5, r3, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, r17}}}, @rights={{0x38, 0x1, 0x1, [r4, r1, r7, r8, r0, r13, r7, 0xffffffffffffffff, r0, r1]}}], 0xe8, 0x20000000}, 0x20000000) (async) sendmsg$unix(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="a1f70cdbe22204f1c4e3b8decea728df2a1a821e25fd2c5187e0", 0x1a}], 0x1, &(0x7f0000000d80)=[@rights={{0x38, 0x1, 0x1, [r2, r1, r2, r8, r4, r5, r3, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, r17}}}, @rights={{0x38, 0x1, 0x1, [r4, r1, r7, r8, r0, r13, r7, 0xffffffffffffffff, r0, r1]}}], 0xe8, 0x20000000}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x1000006, 0x0, 0x0, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x2c, 0x8, 0x0, 0x0}}, 0x10) r19 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup(r19, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x40, 0x31, &(0x7f00000004c0)=""/49, 0x41100, 0x1a, '\x00', r18, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r20, 0xffffffffffffffff, r19]}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x40, 0x31, &(0x7f00000004c0)=""/49, 0x41100, 0x1a, '\x00', r18, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x0, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r20, 0xffffffffffffffff, r19]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xad}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x6, 0x1, 0x4, 0xfffffffffffffff8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x101, 0x20, &(0x7f0000000040)=""/32, 0x41100, 0x24, '\x00', r18, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[r3, 0xffffffffffffffff, r5, 0x1, r3, r5, r4, r2, r3, 0xffffffffffffffff], &(0x7f0000000280)=[{0x2, 0x4, 0x8}, {0x3, 0x5, 0x6, 0xf}, {0x1, 0x1, 0x7, 0x2}, {0x3, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xad}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x6, 0x1, 0x4, 0xfffffffffffffff8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x101, 0x20, &(0x7f0000000040)=""/32, 0x41100, 0x24, '\x00', r18, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[r3, 0xffffffffffffffff, r5, 0x1, r3, r5, r4, r2, r3, 0xffffffffffffffff], &(0x7f0000000280)=[{0x2, 0x4, 0x8}, {0x3, 0x5, 0x6, 0xf}, {0x1, 0x1, 0x7, 0x2}, {0x3, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x90) [ 343.429354][T13824] FAULT_INJECTION: forcing a failure. [ 343.429354][T13824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.443211][T13824] CPU: 1 PID: 13824 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 343.453375][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 343.463367][T13824] Call Trace: [ 343.466494][T13824] [ 343.469273][T13824] dump_stack_lvl+0x151/0x1b7 [ 343.473869][T13824] ? io_uring_drop_tctx_refs+0x190/0x190 [ 343.479339][T13824] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 343.484977][T13824] dump_stack+0x15/0x17 [ 343.488971][T13824] should_fail+0x3c6/0x510 [ 343.493224][T13824] should_fail_alloc_page+0x5a/0x80 [ 343.498352][T13824] prepare_alloc_pages+0x15c/0x700 [ 343.503291][T13824] ? __alloc_pages_bulk+0xe40/0xe40 [ 343.508324][T13824] ? sched_clock+0x9/0x10 [ 343.512499][T13824] __alloc_pages+0x18c/0x8f0 [ 343.516917][T13824] ? prep_new_page+0x110/0x110 [ 343.521527][T13824] pte_alloc_one+0x73/0x1b0 [ 343.525852][T13824] ? pfn_modify_allowed+0x2f0/0x2f0 [ 343.530891][T13824] __pte_alloc+0x86/0x350 [ 343.535056][T13824] ? irqentry_exit+0x30/0x40 [ 343.539484][T13824] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 343.545145][T13824] ? free_pgtables+0x280/0x280 [ 343.549726][T13824] ? copy_page_range+0x27d0/0x2f90 [ 343.554670][T13824] copy_page_range+0x28a8/0x2f90 [ 343.559459][T13824] ? __kasan_slab_alloc+0xb1/0xe0 [ 343.564314][T13824] ? pfn_valid+0x1e0/0x1e0 [ 343.568644][T13824] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 343.574897][T13824] copy_mm+0xc7e/0x13e0 [ 343.578887][T13824] ? copy_signal+0x610/0x610 [ 343.583312][T13824] ? __init_rwsem+0xd6/0x1c0 [ 343.587738][T13824] ? copy_signal+0x4e3/0x610 [ 343.592174][T13824] copy_process+0x1149/0x3290 [ 343.596681][T13824] ? timerqueue_add+0x250/0x270 [ 343.601461][T13824] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 343.606401][T13824] ? enqueue_hrtimer+0xca/0x240 [ 343.611086][T13824] ? __hrtimer_run_queues+0x46b/0xad0 [ 343.616302][T13824] kernel_clone+0x21e/0x9e0 [ 343.620632][T13824] ? create_io_thread+0x1e0/0x1e0 [ 343.625493][T13824] ? clockevents_program_event+0x22f/0x300 [ 343.631135][T13824] __x64_sys_clone+0x23f/0x290 [ 343.635734][T13824] ? __do_sys_vfork+0x130/0x130 [ 343.640422][T13824] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 343.646239][T13824] do_syscall_64+0x3d/0xb0 [ 343.650489][T13824] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 343.656486][T13824] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 343.662215][T13824] RIP: 0033:0x7fd15e9c4da9 [ 343.666472][T13824] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 343.685917][T13824] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 343.694152][T13824] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 343.701964][T13824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 343.709785][T13824] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 343.717587][T13824] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 08:37:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xed, 0x9, 0x9, 0x3f, 0x0, 0x4, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x65524432}, 0xa000, 0xffffffffffffff5a, 0xc, 0x2, 0x4, 0x1, 0x6fa3, 0x0, 0x8, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x4, r3, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x8, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xc4, 0x0, 0x8000, 0x877}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000600)=0x8) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x6) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r3, 0x2, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0x31, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @ldst={0x1, 0x0, 0x3, 0x2, 0x9, 0x40, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x46940227}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xfe, 0x48, &(0x7f0000000500)=""/72, 0x40f00, 0x41, '\x00', 0x0, 0x23, r3, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x7ff, 0x6}, 0x10, 0xffffffffffffffff, r7, 0x4, &(0x7f00000005c0)=[r7, r8], &(0x7f0000000640)=[{0x2, 0x2, 0x2, 0x8}, {0x1, 0x3, 0x8, 0xc}, {0x4, 0x4, 0x1, 0x7}, {0x5, 0x3, 0x4, 0x3}], 0x10, 0x401}, 0x90) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async, rerun: 64) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x18200) (rerun: 32) perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x4, 0x8, 0x0, 0x81, 0x100, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8, 0xc40}, 0x0, 0x23b, 0x2, 0x9, 0x47, 0x1, 0x7, 0x0, 0xa4, 0x0, 0x8}, r6, 0xb, r9, 0x2) [ 343.725401][T13824] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 343.733214][T13824] 08:37:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x11000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:14 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xed, 0x9, 0x9, 0x3f, 0x0, 0x4, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x65524432}, 0xa000, 0xffffffffffffff5a, 0xc, 0x2, 0x4, 0x1, 0x6fa3, 0x0, 0x8, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x4, r3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x8, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xc4, 0x0, 0x8000, 0x877}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000600)=0x8) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)=0x6) (async, rerun: 64) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r3, 0x2, 0xffffffffffffffff, 0x8) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f0000000000), 0x248800) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0x31, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @ldst={0x1, 0x0, 0x3, 0x2, 0x9, 0x40, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x46940227}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xfe, 0x48, &(0x7f0000000500)=""/72, 0x40f00, 0x41, '\x00', 0x0, 0x23, r3, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x7ff, 0x6}, 0x10, 0xffffffffffffffff, r7, 0x4, &(0x7f00000005c0)=[r7, r8], &(0x7f0000000640)=[{0x2, 0x2, 0x2, 0x8}, {0x1, 0x3, 0x8, 0xc}, {0x4, 0x4, 0x1, 0x7}, {0x5, 0x3, 0x4, 0x3}], 0x10, 0x401}, 0x90) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async, rerun: 64) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x18200) perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x4, 0x8, 0x0, 0x81, 0x100, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8, 0xc40}, 0x0, 0x23b, 0x2, 0x9, 0x47, 0x1, 0x7, 0x0, 0xa4, 0x0, 0x8}, r6, 0xb, r9, 0x2) 08:37:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 55) 08:37:14 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000020000000000804b64ffec850000006d000000850600000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 343.925376][T13854] FAULT_INJECTION: forcing a failure. [ 343.925376][T13854] name failslab, interval 1, probability 0, space 0, times 0 08:37:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x13, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000900000018360000050000000000000000000000a7651800000000001837000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000d270000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x69, &(0x7f0000000300)=""/105, 0x40f00, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000006c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xf, 0x10000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r1, r1, r1], 0x0, 0x10, 0x8}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x34100) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x2, 0x4, 0xfffffffffffffff0}, @map_val={0x18, 0xe, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x87ec, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x0, r9, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xc553, r8, 0x0, 0x0, &(0x7f0000000840), 0x10, 0xffffffff}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x9, 0x0, 0x8, r5, 0x20, '\x00', r7, r5, 0x5, 0x5, 0x4, 0x6}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='spi_message_done\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x18200) [ 343.973753][T13854] CPU: 0 PID: 13854 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 343.983932][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 343.993914][T13854] Call Trace: [ 343.997037][T13854] [ 343.999812][T13854] dump_stack_lvl+0x151/0x1b7 [ 344.004336][T13854] ? io_uring_drop_tctx_refs+0x190/0x190 [ 344.009933][T13854] dump_stack+0x15/0x17 [ 344.013959][T13854] should_fail+0x3c6/0x510 [ 344.018211][T13854] __should_failslab+0xa4/0xe0 [ 344.022812][T13854] ? vm_area_dup+0x26/0x230 [ 344.027152][T13854] should_failslab+0x9/0x20 [ 344.031486][T13854] slab_pre_alloc_hook+0x37/0xd0 [ 344.036262][T13854] ? vm_area_dup+0x26/0x230 [ 344.040604][T13854] kmem_cache_alloc+0x44/0x200 [ 344.045203][T13854] vm_area_dup+0x26/0x230 [ 344.049512][T13854] copy_mm+0x9a1/0x13e0 [ 344.053505][T13854] ? copy_signal+0x610/0x610 [ 344.057928][T13854] ? __init_rwsem+0xd6/0x1c0 [ 344.062352][T13854] ? copy_signal+0x4e3/0x610 [ 344.066781][T13854] copy_process+0x1149/0x3290 [ 344.071383][T13854] ? timerqueue_add+0x250/0x270 [ 344.076068][T13854] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 344.081014][T13854] kernel_clone+0x21e/0x9e0 [ 344.085353][T13854] ? create_io_thread+0x1e0/0x1e0 [ 344.090218][T13854] __x64_sys_clone+0x23f/0x290 [ 344.094817][T13854] ? __do_sys_vfork+0x130/0x130 [ 344.099505][T13854] ? debug_smp_processor_id+0x17/0x20 [ 344.104705][T13854] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 344.110706][T13854] ? exit_to_user_mode_prepare+0x39/0xa0 [ 344.116162][T13854] do_syscall_64+0x3d/0xb0 [ 344.120412][T13854] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 344.126062][T13854] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 344.131785][T13854] RIP: 0033:0x7fd15e9c4da9 [ 344.136069][T13854] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 344.155480][T13854] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 344.163725][T13854] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 08:37:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x1f000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000020000000000804b64ffec850000006d000000850600000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000020000000000804b64ffec850000006d000000850600000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) [ 344.171620][T13854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 344.179564][T13854] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 344.187377][T13854] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 344.195185][T13854] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 344.202999][T13854] 08:37:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x18800080, &(0x7f0000000000)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x13, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (rerun: 64) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000900000018360000050000000000000000000000a7651800000000001837000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000d270000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x69, &(0x7f0000000300)=""/105, 0x40f00, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000006c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xf, 0x10000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r1, r1, r1], 0x0, 0x10, 0x8}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x8) (async, rerun: 64) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x34100) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x2, 0x4, 0xfffffffffffffff0}, @map_val={0x18, 0xe, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x87ec, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x0, r9, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xc553, r8, 0x0, 0x0, &(0x7f0000000840), 0x10, 0xffffffff}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x9, 0x0, 0x8, r5, 0x20, '\x00', r7, r5, 0x5, 0x5, 0x4, 0x6}, 0x48) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='spi_message_done\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 56) 08:37:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000020000000000804b64ffec850000006d000000850600000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000020000000000804b64ffec850000006d000000850600000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) [ 344.395727][T13886] FAULT_INJECTION: forcing a failure. [ 344.395727][T13886] name failslab, interval 1, probability 0, space 0, times 0 [ 344.409103][T13886] CPU: 1 PID: 13886 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 344.419291][T13886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 344.429187][T13886] Call Trace: [ 344.432308][T13886] [ 344.435086][T13886] dump_stack_lvl+0x151/0x1b7 [ 344.439597][T13886] ? io_uring_drop_tctx_refs+0x190/0x190 08:37:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x18800080, &(0x7f0000000000)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") [ 344.445068][T13886] dump_stack+0x15/0x17 [ 344.449166][T13886] should_fail+0x3c6/0x510 [ 344.453397][T13886] __should_failslab+0xa4/0xe0 [ 344.457998][T13886] ? vm_area_dup+0x26/0x230 [ 344.462351][T13886] should_failslab+0x9/0x20 [ 344.466687][T13886] slab_pre_alloc_hook+0x37/0xd0 [ 344.471545][T13886] ? vm_area_dup+0x26/0x230 [ 344.475881][T13886] kmem_cache_alloc+0x44/0x200 [ 344.480480][T13886] vm_area_dup+0x26/0x230 [ 344.484642][T13886] copy_mm+0x9a1/0x13e0 [ 344.488641][T13886] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 344.494832][T13886] ? copy_signal+0x610/0x610 [ 344.499241][T13886] ? __init_rwsem+0xd6/0x1c0 [ 344.503667][T13886] ? copy_signal+0x4e3/0x610 [ 344.508095][T13886] copy_process+0x1149/0x3290 [ 344.512705][T13886] ? timerqueue_add+0x250/0x270 [ 344.517394][T13886] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 344.522336][T13886] ? enqueue_hrtimer+0xca/0x240 [ 344.527012][T13886] ? __hrtimer_run_queues+0x46b/0xad0 [ 344.532222][T13886] kernel_clone+0x21e/0x9e0 [ 344.536559][T13886] ? create_io_thread+0x1e0/0x1e0 [ 344.541421][T13886] ? clockevents_program_event+0x22f/0x300 [ 344.547061][T13886] __x64_sys_clone+0x23f/0x290 [ 344.551661][T13886] ? __do_sys_vfork+0x130/0x130 [ 344.556350][T13886] ? __x64_sys_clone+0xd/0x290 [ 344.560954][T13886] do_syscall_64+0x3d/0xb0 [ 344.565200][T13886] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 344.570843][T13886] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 344.576573][T13886] RIP: 0033:0x7fd15e9c4da9 [ 344.580824][T13886] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 344.600266][T13886] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 344.608515][T13886] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 344.616322][T13886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 344.624131][T13886] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 344.631946][T13886] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 08:37:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x1ffff000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800007329cd2dd66b5d93004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x5, 0x2, 0x1, 0x0, 0x10001, 0x820b4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8878, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x4000, 0x5, 0x7ff80000, 0x7, 0x8000000000000000, 0x4, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0xcf, 0x2, 0x7, 0x0, 0x8, 0x8060a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x6, 0x1}, 0x8800, 0xffffffffffff0000, 0x6, 0x9, 0x7, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3a0}, r1, 0xa, r2, 0x0) 08:37:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x13, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000900000018360000050000000000000000000000a7651800000000001837000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000d270000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x69, &(0x7f0000000300)=""/105, 0x40f00, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000006c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xf, 0x10000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r1, r1, r1], 0x0, 0x10, 0x8}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000a00)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x34100) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x2, 0x4, 0xfffffffffffffff0}, @map_val={0x18, 0xe, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x87ec, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x0, r9, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xc553, r8, 0x0, 0x0, &(0x7f0000000840), 0x10, 0xffffffff}, 0x90) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x9, 0x0, 0x8, r5, 0x20, '\x00', r7, r5, 0x5, 0x5, 0x4, 0x6}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='spi_message_done\x00', r4}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x18200) [ 344.639753][T13886] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 344.647568][T13886] 08:37:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 57) 08:37:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800007329cd2dd66b5d93004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x5, 0x2, 0x1, 0x0, 0x10001, 0x820b4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8878, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x4000, 0x5, 0x7ff80000, 0x7, 0x8000000000000000, 0x4, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0xcf, 0x2, 0x7, 0x0, 0x8, 0x8060a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x6, 0x1}, 0x8800, 0xffffffffffff0000, 0x6, 0x9, 0x7, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3a0}, r1, 0xa, r2, 0x0) [ 344.712939][T13904] FAULT_INJECTION: forcing a failure. [ 344.712939][T13904] name failslab, interval 1, probability 0, space 0, times 0 [ 344.757528][T13904] CPU: 0 PID: 13904 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 344.767716][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 344.777605][T13904] Call Trace: [ 344.780725][T13904] [ 344.783500][T13904] dump_stack_lvl+0x151/0x1b7 [ 344.788014][T13904] ? io_uring_drop_tctx_refs+0x190/0x190 [ 344.793501][T13904] dump_stack+0x15/0x17 [ 344.797490][T13904] should_fail+0x3c6/0x510 [ 344.801737][T13904] __should_failslab+0xa4/0xe0 [ 344.806333][T13904] ? vm_area_dup+0x26/0x230 [ 344.810668][T13904] should_failslab+0x9/0x20 [ 344.815004][T13904] slab_pre_alloc_hook+0x37/0xd0 [ 344.819783][T13904] ? vm_area_dup+0x26/0x230 [ 344.824127][T13904] kmem_cache_alloc+0x44/0x200 [ 344.828722][T13904] vm_area_dup+0x26/0x230 [ 344.832886][T13904] copy_mm+0x9a1/0x13e0 [ 344.836873][T13904] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 344.842870][T13904] ? copy_signal+0x610/0x610 [ 344.847293][T13904] ? __init_rwsem+0xd6/0x1c0 [ 344.851719][T13904] ? copy_signal+0x4e3/0x610 [ 344.856145][T13904] copy_process+0x1149/0x3290 [ 344.860657][T13904] ? cgroup_rstat_updated+0xe5/0x370 [ 344.865779][T13904] ? put_prev_entity+0x460/0x460 [ 344.870553][T13904] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 344.875498][T13904] ? pick_next_task_fair+0x965/0xbc0 [ 344.880621][T13904] kernel_clone+0x21e/0x9e0 [ 344.884959][T13904] ? __kasan_check_write+0x14/0x20 [ 344.889906][T13904] ? create_io_thread+0x1e0/0x1e0 [ 344.894770][T13904] __x64_sys_clone+0x23f/0x290 [ 344.899365][T13904] ? __do_sys_vfork+0x130/0x130 [ 344.904051][T13904] ? switch_fpu_return+0x1ed/0x3d0 [ 344.909005][T13904] ? __kasan_check_read+0x11/0x20 [ 344.913872][T13904] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 344.919328][T13904] do_syscall_64+0x3d/0xb0 [ 344.923579][T13904] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 344.929307][T13904] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 344.935038][T13904] RIP: 0033:0x7fd15e9c4da9 08:37:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x8, 0x84, 0x0, 0x1, 0xa10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x3f}, 0x2000, 0x8, 0x0, 0x3, 0xd9ce, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x7, r1, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 344.939302][T13904] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 344.958735][T13904] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 344.966974][T13904] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 344.974786][T13904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 344.982610][T13904] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 344.990406][T13904] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 344.998220][T13904] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 345.006035][T13904] 08:37:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x18800080, &(0x7f0000000000)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 58) 08:37:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x20000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800007329cd2dd66b5d93004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x5, 0x2, 0x1, 0x0, 0x10001, 0x820b4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8878, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x4000, 0x5, 0x7ff80000, 0x7, 0x8000000000000000, 0x4, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) (async) r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x5, 0x2, 0x1, 0x0, 0x10001, 0x820b4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8878, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x4000, 0x5, 0x7ff80000, 0x7, 0x8000000000000000, 0x4, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0xcf, 0x2, 0x7, 0x0, 0x8, 0x8060a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x6, 0x1}, 0x8800, 0xffffffffffff0000, 0x6, 0x9, 0x7, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3a0}, r1, 0xa, r2, 0x0) 08:37:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) 08:37:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x8, 0x84, 0x0, 0x1, 0xa10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x3f}, 0x2000, 0x8, 0x0, 0x3, 0xd9ce, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x7, r1, 0x8) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000950d60b0a54bb0b7da148a20f6dcea530857af17287f3c89964e4e49f4f08333f01c25d2d597ac9cf9839192b9c42c489cf7c9882ce12b77de7133dfef81422fe12c942ac1"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 345.120792][T13920] FAULT_INJECTION: forcing a failure. [ 345.120792][T13920] name failslab, interval 1, probability 0, space 0, times 0 [ 345.164241][T13920] CPU: 0 PID: 13920 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 345.174446][T13920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 345.184426][T13920] Call Trace: [ 345.187543][T13920] [ 345.190319][T13920] dump_stack_lvl+0x151/0x1b7 [ 345.194832][T13920] ? io_uring_drop_tctx_refs+0x190/0x190 [ 345.200302][T13920] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 345.206290][T13920] dump_stack+0x15/0x17 [ 345.210283][T13920] should_fail+0x3c6/0x510 [ 345.214534][T13920] __should_failslab+0xa4/0xe0 [ 345.219144][T13920] ? vm_area_dup+0x26/0x230 [ 345.223471][T13920] should_failslab+0x9/0x20 [ 345.227914][T13920] slab_pre_alloc_hook+0x37/0xd0 [ 345.232704][T13920] ? vm_area_dup+0x26/0x230 [ 345.237024][T13920] kmem_cache_alloc+0x44/0x200 [ 345.241634][T13920] vm_area_dup+0x26/0x230 [ 345.245812][T13920] copy_mm+0x9a1/0x13e0 [ 345.249782][T13920] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 345.255779][T13920] ? copy_signal+0x610/0x610 [ 345.260441][T13920] ? __init_rwsem+0xd6/0x1c0 [ 345.265044][T13920] ? copy_signal+0x4e3/0x610 [ 345.269456][T13920] copy_process+0x1149/0x3290 [ 345.273973][T13920] ? timerqueue_add+0x250/0x270 [ 345.278654][T13920] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 345.283599][T13920] ? enqueue_hrtimer+0xca/0x240 [ 345.288284][T13920] ? __hrtimer_run_queues+0x46b/0xad0 [ 345.293494][T13920] kernel_clone+0x21e/0x9e0 [ 345.297834][T13920] ? irqentry_exit+0x30/0x40 [ 345.302260][T13920] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 345.307899][T13920] ? create_io_thread+0x1e0/0x1e0 [ 345.312762][T13920] __x64_sys_clone+0x23f/0x290 [ 345.317372][T13920] ? __do_sys_vfork+0x130/0x130 [ 345.322049][T13920] ? debug_smp_processor_id+0x17/0x20 [ 345.327345][T13920] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 345.333243][T13920] ? exit_to_user_mode_prepare+0x39/0xa0 [ 345.338712][T13920] do_syscall_64+0x3d/0xb0 [ 345.342963][T13920] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 345.348604][T13920] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 345.354340][T13920] RIP: 0033:0x7fd15e9c4da9 [ 345.358588][T13920] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 345.378027][T13920] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 345.386274][T13920] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 345.394083][T13920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 345.401892][T13920] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 08:37:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async, rerun: 32) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x8, 0x84, 0x0, 0x1, 0xa10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x3f}, 0x2000, 0x8, 0x0, 0x3, 0xd9ce, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x7, r1, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) [ 345.410180][T13920] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 345.417950][T13920] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 345.425768][T13920] 08:37:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 59) 08:37:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000950d60b0a54bb0b7da148a20f6dcea530857af17287f3c89964e4e49f4f08333f01c25d2d597ac9cf9839192b9c42c489cf7c9882ce12b77de7133dfef81422fe12c942ac1"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000950d60b0a54bb0b7da148a20f6dcea530857af17287f3c89964e4e49f4f08333f01c25d2d597ac9cf9839192b9c42c489cf7c9882ce12b77de7133dfef81422fe12c942ac1"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x942403a0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) 08:37:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3241ad09}, 0x800, 0x0, 0xfff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xa002a000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 345.648506][T13968] FAULT_INJECTION: forcing a failure. [ 345.648506][T13968] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 345.670477][T13968] CPU: 1 PID: 13968 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 345.680661][T13968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 345.690637][T13968] Call Trace: [ 345.693764][T13968] 08:37:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3241ad09}, 0x800, 0x0, 0xfff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095202d5df0fa34ad4f243962acb499afeaf2fe3c644850743b6fab73664b915c38add662bbfdd32e6df5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3241ad09}, 0x800, 0x0, 0xfff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 345.696540][T13968] dump_stack_lvl+0x151/0x1b7 [ 345.701062][T13968] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 345.706696][T13968] ? io_uring_drop_tctx_refs+0x190/0x190 [ 345.712163][T13968] ? __wake_up_klogd+0xd5/0x110 [ 345.716938][T13968] dump_stack+0x15/0x17 [ 345.720937][T13968] should_fail+0x3c6/0x510 [ 345.725190][T13968] should_fail_alloc_page+0x5a/0x80 [ 345.730220][T13968] prepare_alloc_pages+0x15c/0x700 [ 345.735164][T13968] ? __alloc_pages_bulk+0xe40/0xe40 [ 345.740200][T13968] ? sched_clock+0x9/0x10 [ 345.744362][T13968] ? native_set_ldt+0x360/0x360 [ 345.749051][T13968] __alloc_pages+0x18c/0x8f0 [ 345.753475][T13968] ? _raw_spin_unlock+0x4d/0x70 [ 345.758159][T13968] ? prep_new_page+0x110/0x110 [ 345.762764][T13968] pte_alloc_one+0x73/0x1b0 [ 345.767099][T13968] ? pfn_modify_allowed+0x2f0/0x2f0 [ 345.772150][T13968] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 345.778123][T13968] __pte_alloc+0x86/0x350 [ 345.782288][T13968] ? kasan_check_range+0x82/0x2a0 [ 345.787146][T13968] ? free_pgtables+0x280/0x280 [ 345.791748][T13968] ? __kasan_check_write+0x14/0x20 [ 345.796700][T13968] copy_page_range+0x28a8/0x2f90 [ 345.801470][T13968] ? __kasan_slab_alloc+0xb1/0xe0 [ 345.806361][T13968] ? pfn_valid+0x1e0/0x1e0 [ 345.810581][T13968] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 345.815966][T13968] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 345.821517][T13968] ? __rb_insert_augmented+0x5de/0x610 [ 345.826816][T13968] copy_mm+0xc7e/0x13e0 [ 345.830817][T13968] ? irqentry_exit+0x30/0x40 [ 345.835238][T13968] ? copy_signal+0x610/0x610 [ 345.839657][T13968] ? __init_rwsem+0xd6/0x1c0 [ 345.844084][T13968] ? copy_signal+0x4e3/0x610 08:37:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="720ac4ff00670000200022000000000018420000000000000000000000000000950000000040000035549b0ff0956c40c14068ed9850c73b9473478e559bc4718a3b7c4e3ada70996ee588624a9c30fad67a3263b2b90f6e983ed782e223c18ada88d852fa49fc42cb973e4cc1d6b23e8cbbb902a0127f46c6f799e63b9077eb7470f20e73933acbd9833a5b36467c7b30d750f9d4ef75e74c65ca44a0bbbbcb6c7610c5dcd70f27c9ba948ba4d44cb7e1c2b932c8c0c22282cbc3aa2fcd587172969ae8bc95ab37a76fbe50b8"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@restrict={0xc}, @fwd={0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0x2, 0x5}, {0xa, 0x1}, {0xa, 0x2}, {0x10, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x5f]}}, &(0x7f0000000500)=""/107, 0x6a, 0x6b, 0x1, 0x80000001}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001b00)={0x80000001, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r4, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)=r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003180)={r6, 0xe0, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002ec0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000002f00)=[0x0], &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000002f80)=[{}, {}], 0x10, 0x10, &(0x7f0000002fc0), &(0x7f0000003000), 0x8, 0x61, 0x8, 0x8, &(0x7f0000003040)}}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000003240)=@bloom_filter={0x1e, 0x10000, 0x6, 0x1f, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x18, 0x19, &(0x7f0000001d80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @alu={0xf, 0x1, 0x3, 0x4, 0x8, 0x8, 0x4}, @generic={0x80, 0x9, 0x2, 0x3, 0xfffffffd}, @call={0x85, 0x0, 0x0, 0x78}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}], &(0x7f0000001e80)='GPL\x00', 0x0, 0x1000, &(0x7f0000001ec0)=""/4096, 0x41100, 0x1, '\x00', r11, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000031c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000003200)={0x4, 0x3, 0x2e4, 0xff}, 0x10, r9, r2, 0x2, &(0x7f00000032c0)=[r8, 0xffffffffffffffff, r3, r8, r12, r3, r8, r3], &(0x7f0000003300)=[{0x4, 0x1, 0xf, 0x1}, {0x5, 0x4, 0xe, 0x5}], 0x10, 0xe8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x9, 0x2, &(0x7f00000008c0)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000900)='syzkaller\x00', 0x81, 0xb3, &(0x7f0000001a40)=""/179, 0x40f00, 0x1, '\x00', r5, 0x24, r8, 0x8, &(0x7f0000000940)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x7, 0x5, 0x9}, 0x10, r9, 0xffffffffffffffff, 0x5, &(0x7f0000001b40)=[r8, r2], &(0x7f0000001b80)=[{0x4, 0x3, 0x5}, {0x1, 0x1, 0x8, 0xa}, {0x1, 0x1, 0x9, 0x2}, {0x4, 0x4, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x8}], 0x10, 0x9079}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x25, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x20, '\x00', r5, 0x0, r7, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xf, 0x4bb01bc3, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[r8], &(0x7f0000000780)=[{0x3, 0x2, 0xc, 0x7}, {0x2, 0x2, 0xf, 0xb}, {0x4, 0x1, 0x4}, {0x4, 0x3}, {0x1, 0x2, 0xa, 0x9}, {0x4, 0x2, 0x10, 0x5}], 0x10, 0x5}, 0x90) [ 345.848508][T13968] copy_process+0x1149/0x3290 [ 345.853027][T13968] ? proc_fail_nth_write+0x20b/0x290 [ 345.858148][T13968] ? fsnotify_perm+0x6a/0x5d0 [ 345.862659][T13968] ? __sanitizer_cov_trace_pc+0x59/0x60 [ 345.868042][T13968] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 345.872982][T13968] ? vfs_write+0x9ec/0x1110 [ 345.877328][T13968] ? __hrtimer_run_queues+0x46b/0xad0 [ 345.882535][T13968] kernel_clone+0x21e/0x9e0 [ 345.886867][T13968] ? irqentry_exit+0x30/0x40 [ 345.891292][T13968] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 345.896931][T13968] ? create_io_thread+0x1e0/0x1e0 [ 345.901799][T13968] __x64_sys_clone+0x23f/0x290 [ 345.906394][T13968] ? __do_sys_vfork+0x130/0x130 [ 345.911078][T13968] ? debug_smp_processor_id+0x17/0x20 [ 345.916291][T13968] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 345.922193][T13968] ? exit_to_user_mode_prepare+0x39/0xa0 [ 345.927665][T13968] do_syscall_64+0x3d/0xb0 [ 345.931910][T13968] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 345.937553][T13968] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 345.943277][T13968] RIP: 0033:0x7fd15e9c4da9 [ 345.947533][T13968] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 345.966981][T13968] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 345.975238][T13968] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 345.983140][T13968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 345.991114][T13968] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 08:37:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xa0032494, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab105fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6b252e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 60) [ 345.998921][T13968] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 346.006732][T13968] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 346.014547][T13968] 08:37:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095202d5df0fa34ad4f243962acb499afeaf2fe3c644850743b6fab73664b915c38add662bbfdd32e6df5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="720ac4ff00670000200022000000000018420000000000000000000000000000950000000040000035549b0ff0956c40c14068ed9850c73b9473478e559bc4718a3b7c4e3ada70996ee588624a9c30fad67a3263b2b90f6e983ed782e223c18ada88d852fa49fc42cb973e4cc1d6b23e8cbbb902a0127f46c6f799e63b9077eb7470f20e73933acbd9833a5b36467c7b30d750f9d4ef75e74c65ca44a0bbbbcb6c7610c5dcd70f27c9ba948ba4d44cb7e1c2b932c8c0c22282cbc3aa2fcd587172969ae8bc95ab37a76fbe50b8"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@restrict={0xc}, @fwd={0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0x2, 0x5}, {0xa, 0x1}, {0xa, 0x2}, {0x10, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x5f]}}, &(0x7f0000000500)=""/107, 0x6a, 0x6b, 0x1, 0x80000001}, 0x20) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@restrict={0xc}, @fwd={0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0x2, 0x5}, {0xa, 0x1}, {0xa, 0x2}, {0x10, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x5f]}}, &(0x7f0000000500)=""/107, 0x6a, 0x6b, 0x1, 0x80000001}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) (async) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001b00)={0x80000001, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r4, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)=r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003180)={r6, 0xe0, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002ec0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000002f00)=[0x0], &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000002f80)=[{}, {}], 0x10, 0x10, &(0x7f0000002fc0), &(0x7f0000003000), 0x8, 0x61, 0x8, 0x8, &(0x7f0000003040)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003240)=@bloom_filter={0x1e, 0x10000, 0x6, 0x1f, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xb}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000003240)=@bloom_filter={0x1e, 0x10000, 0x6, 0x1f, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x18, 0x19, &(0x7f0000001d80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @alu={0xf, 0x1, 0x3, 0x4, 0x8, 0x8, 0x4}, @generic={0x80, 0x9, 0x2, 0x3, 0xfffffffd}, @call={0x85, 0x0, 0x0, 0x78}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}], &(0x7f0000001e80)='GPL\x00', 0x0, 0x1000, &(0x7f0000001ec0)=""/4096, 0x41100, 0x1, '\x00', r11, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000031c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000003200)={0x4, 0x3, 0x2e4, 0xff}, 0x10, r9, r2, 0x2, &(0x7f00000032c0)=[r8, 0xffffffffffffffff, r3, r8, r12, r3, r8, r3], &(0x7f0000003300)=[{0x4, 0x1, 0xf, 0x1}, {0x5, 0x4, 0xe, 0x5}], 0x10, 0xe8}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x18, 0x19, &(0x7f0000001d80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @alu={0xf, 0x1, 0x3, 0x4, 0x8, 0x8, 0x4}, @generic={0x80, 0x9, 0x2, 0x3, 0xfffffffd}, @call={0x85, 0x0, 0x0, 0x78}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}], &(0x7f0000001e80)='GPL\x00', 0x0, 0x1000, &(0x7f0000001ec0)=""/4096, 0x41100, 0x1, '\x00', r11, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000031c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000003200)={0x4, 0x3, 0x2e4, 0xff}, 0x10, r9, r2, 0x2, &(0x7f00000032c0)=[r8, 0xffffffffffffffff, r3, r8, r12, r3, r8, r3], &(0x7f0000003300)=[{0x4, 0x1, 0xf, 0x1}, {0x5, 0x4, 0xe, 0x5}], 0x10, 0xe8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x9, 0x2, &(0x7f00000008c0)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000900)='syzkaller\x00', 0x81, 0xb3, &(0x7f0000001a40)=""/179, 0x40f00, 0x1, '\x00', r5, 0x24, r8, 0x8, &(0x7f0000000940)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x7, 0x5, 0x9}, 0x10, r9, 0xffffffffffffffff, 0x5, &(0x7f0000001b40)=[r8, r2], &(0x7f0000001b80)=[{0x4, 0x3, 0x5}, {0x1, 0x1, 0x8, 0xa}, {0x1, 0x1, 0x9, 0x2}, {0x4, 0x4, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x8}], 0x10, 0x9079}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x25, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x20, '\x00', r5, 0x0, r7, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xf, 0x4bb01bc3, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[r8], &(0x7f0000000780)=[{0x3, 0x2, 0xc, 0x7}, {0x2, 0x2, 0xf, 0xb}, {0x4, 0x1, 0x4}, {0x4, 0x3}, {0x1, 0x2, 0xa, 0x9}, {0x4, 0x2, 0x10, 0x5}], 0x10, 0x5}, 0x90) [ 346.138898][T14000] FAULT_INJECTION: forcing a failure. [ 346.138898][T14000] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.177238][T14000] CPU: 1 PID: 14000 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 08:37:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095202d5df0fa34ad4f243962acb499afeaf2fe3c644850743b6fab73664b915c38add662bbfdd32e6df5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095202d5df0fa34ad4f243962acb499afeaf2fe3c644850743b6fab73664b915c38add662bbfdd32e6df5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) (async) [ 346.187505][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 346.197397][T14000] Call Trace: [ 346.200520][T14000] [ 346.203301][T14000] dump_stack_lvl+0x151/0x1b7 [ 346.207812][T14000] ? io_uring_drop_tctx_refs+0x190/0x190 [ 346.213279][T14000] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 346.218923][T14000] dump_stack+0x15/0x17 [ 346.222920][T14000] should_fail+0x3c6/0x510 [ 346.227171][T14000] should_fail_alloc_page+0x5a/0x80 [ 346.232201][T14000] prepare_alloc_pages+0x15c/0x700 08:37:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab105fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6b252e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab105fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6b252e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) 08:37:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xf5ffffff, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 346.237150][T14000] ? __alloc_pages_bulk+0xe40/0xe40 [ 346.242175][T14000] ? sched_clock+0x9/0x10 [ 346.246345][T14000] ? native_set_ldt+0x360/0x360 [ 346.251037][T14000] __alloc_pages+0x18c/0x8f0 [ 346.255460][T14000] ? _raw_spin_unlock+0x4d/0x70 [ 346.260149][T14000] ? prep_new_page+0x110/0x110 [ 346.264752][T14000] pte_alloc_one+0x73/0x1b0 [ 346.269089][T14000] ? pfn_modify_allowed+0x2f0/0x2f0 [ 346.274122][T14000] ? preempt_schedule+0xd9/0xe0 [ 346.278806][T14000] __pte_alloc+0x86/0x350 [ 346.282972][T14000] ? irqentry_exit+0x30/0x40 [ 346.287397][T14000] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 346.293040][T14000] ? free_pgtables+0x280/0x280 [ 346.297658][T14000] ? __kasan_check_write+0x14/0x20 [ 346.302588][T14000] copy_page_range+0x28a8/0x2f90 [ 346.307361][T14000] ? __kasan_slab_alloc+0xb1/0xe0 [ 346.312229][T14000] ? pfn_valid+0x1e0/0x1e0 [ 346.316472][T14000] ? vma_interval_tree_augment_rotate+0x1a3/0x1d0 [ 346.322725][T14000] copy_mm+0xc7e/0x13e0 [ 346.326719][T14000] ? copy_signal+0x610/0x610 [ 346.331139][T14000] ? __init_rwsem+0xd6/0x1c0 [ 346.335568][T14000] ? copy_signal+0x4e3/0x610 [ 346.339995][T14000] copy_process+0x1149/0x3290 [ 346.344531][T14000] ? timerqueue_add+0x250/0x270 [ 346.349194][T14000] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 346.354138][T14000] ? enqueue_hrtimer+0xca/0x240 [ 346.358824][T14000] ? __hrtimer_run_queues+0x46b/0xad0 [ 346.364036][T14000] kernel_clone+0x21e/0x9e0 [ 346.368377][T14000] ? create_io_thread+0x1e0/0x1e0 [ 346.373233][T14000] ? clockevents_program_event+0x22f/0x300 [ 346.378877][T14000] __x64_sys_clone+0x23f/0x290 [ 346.383478][T14000] ? __do_sys_vfork+0x130/0x130 08:37:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xfbffffff, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 346.388163][T14000] ? debug_smp_processor_id+0x17/0x20 [ 346.393368][T14000] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 346.399271][T14000] ? exit_to_user_mode_prepare+0x39/0xa0 [ 346.404739][T14000] do_syscall_64+0x3d/0xb0 [ 346.408991][T14000] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 346.414723][T14000] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 346.420448][T14000] RIP: 0033:0x7fd15e9c4da9 [ 346.424708][T14000] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 346.444144][T14000] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 346.452385][T14000] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 346.460213][T14000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 346.468009][T14000] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 346.475819][T14000] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 08:37:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)=r0}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="720ac4ff00670000200022000000000018420000000000000000000000000000950000000040000035549b0ff0956c40c14068ed9850c73b9473478e559bc4718a3b7c4e3ada70996ee588624a9c30fad67a3263b2b90f6e983ed782e223c18ada88d852fa49fc42cb973e4cc1d6b23e8cbbb902a0127f46c6f799e63b9077eb7470f20e73933acbd9833a5b36467c7b30d750f9d4ef75e74c65ca44a0bbbbcb6c7610c5dcd70f27c9ba948ba4d44cb7e1c2b932c8c0c22282cbc3aa2fcd587172969ae8bc95ab37a76fbe50b8"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@restrict={0xc}, @fwd={0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0x2, 0x5}, {0xa, 0x1}, {0xa, 0x2}, {0x10, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x0, 0x5f]}}, &(0x7f0000000500)=""/107, 0x6a, 0x6b, 0x1, 0x80000001}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001b00)={0x80000001, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r4, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)=r6}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003180)={r6, 0xe0, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002ec0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000002f00)=[0x0], &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000002f80)=[{}, {}], 0x10, 0x10, &(0x7f0000002fc0), &(0x7f0000003000), 0x8, 0x61, 0x8, 0x8, &(0x7f0000003040)}}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000003240)=@bloom_filter={0x1e, 0x10000, 0x6, 0x1f, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x18, 0x19, &(0x7f0000001d80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @alu={0xf, 0x1, 0x3, 0x4, 0x8, 0x8, 0x4}, @generic={0x80, 0x9, 0x2, 0x3, 0xfffffffd}, @call={0x85, 0x0, 0x0, 0x78}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}], &(0x7f0000001e80)='GPL\x00', 0x0, 0x1000, &(0x7f0000001ec0)=""/4096, 0x41100, 0x1, '\x00', r11, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000031c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000003200)={0x4, 0x3, 0x2e4, 0xff}, 0x10, r9, r2, 0x2, &(0x7f00000032c0)=[r8, 0xffffffffffffffff, r3, r8, r12, r3, r8, r3], &(0x7f0000003300)=[{0x4, 0x1, 0xf, 0x1}, {0x5, 0x4, 0xe, 0x5}], 0x10, 0xe8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x9, 0x2, &(0x7f00000008c0)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000900)='syzkaller\x00', 0x81, 0xb3, &(0x7f0000001a40)=""/179, 0x40f00, 0x1, '\x00', r5, 0x24, r8, 0x8, &(0x7f0000000940)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x7, 0x5, 0x9}, 0x10, r9, 0xffffffffffffffff, 0x5, &(0x7f0000001b40)=[r8, r2], &(0x7f0000001b80)=[{0x4, 0x3, 0x5}, {0x1, 0x1, 0x8, 0xa}, {0x1, 0x1, 0x9, 0x2}, {0x4, 0x4, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x8}], 0x10, 0x9079}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x25, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x20, '\x00', r5, 0x0, r7, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xf, 0x4bb01bc3, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[r8], &(0x7f0000000780)=[{0x3, 0x2, 0xc, 0x7}, {0x2, 0x2, 0xf, 0xb}, {0x4, 0x1, 0x4}, {0x4, 0x3}, {0x1, 0x2, 0xa, 0x9}, {0x4, 0x2, 0x10, 0x5}], 0x10, 0x5}, 0x90) [ 346.483719][T14000] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 346.491539][T14000] 08:37:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 61) 08:37:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xfffffff5, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f00000005c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r7, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x852, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x24402, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c61100, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2040, 0x8005, 0x800, 0x2, 0x686, 0x0, 0x0, 0x0, 0xe5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='nilfs2_segment_usage_allocated\x00', r7}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4004662b, &(0x7f00000005c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x20000000000000fb, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRESDEC=r7, @ANYRES16=r8, @ANYRES8=0x0, @ANYRES32=r9], &(0x7f0000000500)='syzkaller\x00', 0x3, 0xde, &(0x7f00000007c0)=""/222, 0x40f00, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x6, 0x6, 0xd}, 0xfffffffffffffef6, 0x0, r10, 0x0, &(0x7f0000000b80), 0x0, 0x10, 0xff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x8, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x3, 0x4, 0x2, 0xffffffffffffffc0, 0x1}, @ldst={0x2, 0x2, 0x4, 0x8, 0x0, 0x80, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x2, 0xa, 0x4, 0x0, 0x8}, @generic={0x8, 0x8, 0x1, 0xefc, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x7ff, 0x98, &(0x7f0000000500)=""/152, 0x1e00, 0xd, '\x00', r6, 0x20, r2, 0x8, &(0x7f0000000680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x8, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000880)=[r2, r4, r7, r5], &(0x7f00000008c0)=[{0x2, 0x5, 0x0, 0x1}, {0x2, 0x4, 0x7, 0xc}, {0x0, 0x1, 0x7, 0xa}], 0x10, 0x5}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab105fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6b252e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") [ 346.788234][T14052] FAULT_INJECTION: forcing a failure. [ 346.788234][T14052] name failslab, interval 1, probability 0, space 0, times 0 [ 346.802474][T14052] CPU: 0 PID: 14052 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 346.812636][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 346.822529][T14052] Call Trace: [ 346.825651][T14052] [ 346.828427][T14052] dump_stack_lvl+0x151/0x1b7 [ 346.832943][T14052] ? io_uring_drop_tctx_refs+0x190/0x190 [ 346.838408][T14052] ? avc_denied+0x1b0/0x1b0 [ 346.842757][T14052] dump_stack+0x15/0x17 [ 346.846743][T14052] should_fail+0x3c6/0x510 [ 346.850999][T14052] __should_failslab+0xa4/0xe0 [ 346.855601][T14052] ? vm_area_dup+0x26/0x230 [ 346.859937][T14052] should_failslab+0x9/0x20 [ 346.864273][T14052] slab_pre_alloc_hook+0x37/0xd0 [ 346.869049][T14052] ? vm_area_dup+0x26/0x230 [ 346.873388][T14052] kmem_cache_alloc+0x44/0x200 [ 346.877987][T14052] vm_area_dup+0x26/0x230 [ 346.882160][T14052] copy_mm+0x9a1/0x13e0 [ 346.886149][T14052] ? copy_signal+0x610/0x610 [ 346.890570][T14052] ? __init_rwsem+0xd6/0x1c0 [ 346.894998][T14052] ? copy_signal+0x4e3/0x610 [ 346.899424][T14052] copy_process+0x1149/0x3290 [ 346.904028][T14052] ? timerqueue_add+0x250/0x270 [ 346.908711][T14052] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 346.913658][T14052] ? enqueue_hrtimer+0xca/0x240 [ 346.918343][T14052] ? __hrtimer_run_queues+0x46b/0xad0 [ 346.923555][T14052] kernel_clone+0x21e/0x9e0 [ 346.928070][T14052] ? create_io_thread+0x1e0/0x1e0 [ 346.932927][T14052] ? clockevents_program_event+0x22f/0x300 [ 346.938653][T14052] __x64_sys_clone+0x23f/0x290 [ 346.943252][T14052] ? __do_sys_vfork+0x130/0x130 [ 346.947941][T14052] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 346.953758][T14052] do_syscall_64+0x3d/0xb0 [ 346.958006][T14052] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 346.963648][T14052] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 346.969376][T14052] RIP: 0033:0x7fd15e9c4da9 [ 346.973632][T14052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 346.993158][T14052] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 347.001400][T14052] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 347.009213][T14052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 347.017029][T14052] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 347.024837][T14052] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 08:37:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cgroup.events\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f00000005c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f00000005c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r7, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x852, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r7, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x852, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x24402, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c61100, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2040, 0x8005, 0x800, 0x2, 0x686, 0x0, 0x0, 0x0, 0xe5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x24402, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c61100, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2040, 0x8005, 0x800, 0x2, 0x686, 0x0, 0x0, 0x0, 0xe5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='nilfs2_segment_usage_allocated\x00', r7}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4004662b, &(0x7f00000005c0)=0x1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4004662b, &(0x7f00000005c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x20000000000000fb, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRESDEC=r7, @ANYRES16=r8, @ANYRES8=0x0, @ANYRES32=r9], &(0x7f0000000500)='syzkaller\x00', 0x3, 0xde, &(0x7f00000007c0)=""/222, 0x40f00, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x6, 0x6, 0xd}, 0xfffffffffffffef6, 0x0, r10, 0x0, &(0x7f0000000b80), 0x0, 0x10, 0xff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x8, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x3, 0x4, 0x2, 0xffffffffffffffc0, 0x1}, @ldst={0x2, 0x2, 0x4, 0x8, 0x0, 0x80, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x2, 0xa, 0x4, 0x0, 0x8}, @generic={0x8, 0x8, 0x1, 0xefc, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x7ff, 0x98, &(0x7f0000000500)=""/152, 0x1e00, 0xd, '\x00', r6, 0x20, r2, 0x8, &(0x7f0000000680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x8, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000880)=[r2, r4, r7, r5], &(0x7f00000008c0)=[{0x2, 0x5, 0x0, 0x1}, {0x2, 0x4, 0x7, 0xc}, {0x0, 0x1, 0x7, 0xa}], 0x10, 0x5}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x8, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x3, 0x4, 0x2, 0xffffffffffffffc0, 0x1}, @ldst={0x2, 0x2, 0x4, 0x8, 0x0, 0x80, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x2, 0xa, 0x4, 0x0, 0x8}, @generic={0x8, 0x8, 0x1, 0xefc, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x7ff, 0x98, &(0x7f0000000500)=""/152, 0x1e00, 0xd, '\x00', r6, 0x20, r2, 0x8, &(0x7f0000000680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x8, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000880)=[r2, r4, r7, r5], &(0x7f00000008c0)=[{0x2, 0x5, 0x0, 0x1}, {0x2, 0x4, 0x7, 0xc}, {0x0, 0x1, 0x7, 0xa}], 0x10, 0x5}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) [ 347.032647][T14052] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 347.040464][T14052] 08:37:17 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7}}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0x3}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000cc0)=""/255, 0x67, 0xff, 0x0, 0xf55}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@o_path={&(0x7f0000000e80)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x7, &(0x7f0000000b80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffffff01}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000c00)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000e00)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x3, 0x0, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[r3, r5, r3, r3, r3, r3, 0x1, r3], &(0x7f0000000f40)=[{0x1, 0x3, 0x3, 0x3}, {0x2, 0x2, 0x9, 0x2}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x0, 0x0, &(0x7f0000000bc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001280)={0x2, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000001340)=[{0x3, 0x5, 0x7, 0x5}], 0x10, 0xfffffff9}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7ff, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x20, 0x1, 0x0, 0xd38, 0xa10, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x4, 0x5}, 0x48) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r16}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0x7, 0x9, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0xea, &(0x7f0000000380)=""/234, 0x40f00, 0x50, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x10, 0x0, 0x1000}, 0x10, 0xc51d, r0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, r9, r10, r11, r12, r13, r14, 0xffffffffffffffff, r15, r16]}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffff) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8800000, &(0x7f0000000200)="b03efa1f79963c7d87c0ce263a14c3605feafe883eb2c3bfcbe75ae1f9d7484652fa3457a819f1421e5cfdcd7e1af52d4bf2e56ddd62f404744a3594750907927b9d621322c015282b8423748563ea72161fb0fc0254d4678b81dc77dbf0a33ec0010030e9f4105dd6094f924a1559417a0bfd152b718f5650c8eeeb1bd35b68b5b891895c17cc7ece8c72735a7469867c8d466bb2732b45fa7536f14cd2b353b2758dde71595d17e2db1ae92b984a7ae73c8dd8324d82a3f52d51c56a22f059d16f2903774d2c326072467df5188a73bb95d07cf47246177824dfe0baf604dc283a65", 0xe3, &(0x7f0000000300), &(0x7f0000000000), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc7b986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6386348545d425e8884b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 62) 08:37:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xfffffffb, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffff) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8800000, &(0x7f0000000200)="b03efa1f79963c7d87c0ce263a14c3605feafe883eb2c3bfcbe75ae1f9d7484652fa3457a819f1421e5cfdcd7e1af52d4bf2e56ddd62f404744a3594750907927b9d621322c015282b8423748563ea72161fb0fc0254d4678b81dc77dbf0a33ec0010030e9f4105dd6094f924a1559417a0bfd152b718f5650c8eeeb1bd35b68b5b891895c17cc7ece8c72735a7469867c8d466bb2732b45fa7536f14cd2b353b2758dde71595d17e2db1ae92b984a7ae73c8dd8324d82a3f52d51c56a22f059d16f2903774d2c326072467df5188a73bb95d07cf47246177824dfe0baf604dc283a65", 0xe3, &(0x7f0000000300), &(0x7f0000000000), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc7b986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6386348545d425e8884b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:17 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7}}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0x3}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000cc0)=""/255, 0x67, 0xff, 0x0, 0xf55}, 0x20) (async, rerun: 64) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@o_path={&(0x7f0000000e80)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x7, &(0x7f0000000b80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffffff01}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000c00)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000e00)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x3, 0x0, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[r3, r5, r3, r3, r3, r3, 0x1, r3], &(0x7f0000000f40)=[{0x1, 0x3, 0x3, 0x3}, {0x2, 0x2, 0x9, 0x2}]}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x0, 0x0, &(0x7f0000000bc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001280)={0x2, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000001340)=[{0x3, 0x5, 0x7, 0x5}], 0x10, 0xfffffff9}, 0x90) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (rerun: 64) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7ff, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) (async, rerun: 32) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x20, 0x1, 0x0, 0xd38, 0xa10, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x4, 0x5}, 0x48) (rerun: 32) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r16}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0x7, 0x9, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0xea, &(0x7f0000000380)=""/234, 0x40f00, 0x50, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x10, 0x0, 0x1000}, 0x10, 0xc51d, r0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, r9, r10, r11, r12, r13, r14, 0xffffffffffffffff, r15, r16]}, 0x90) (async, rerun: 32) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 347.140352][T14068] FAULT_INJECTION: forcing a failure. [ 347.140352][T14068] name failslab, interval 1, probability 0, space 0, times 0 [ 347.155671][T14068] CPU: 0 PID: 14068 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 347.165854][T14068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 347.175737][T14068] Call Trace: [ 347.178859][T14068] [ 347.181660][T14068] dump_stack_lvl+0x151/0x1b7 [ 347.186169][T14068] ? io_uring_drop_tctx_refs+0x190/0x190 [ 347.191626][T14068] dump_stack+0x15/0x17 [ 347.195615][T14068] should_fail+0x3c6/0x510 [ 347.200039][T14068] __should_failslab+0xa4/0xe0 [ 347.204651][T14068] ? vm_area_dup+0x26/0x230 [ 347.208998][T14068] should_failslab+0x9/0x20 [ 347.213426][T14068] slab_pre_alloc_hook+0x37/0xd0 [ 347.218190][T14068] ? vm_area_dup+0x26/0x230 [ 347.222530][T14068] kmem_cache_alloc+0x44/0x200 [ 347.227136][T14068] vm_area_dup+0x26/0x230 [ 347.231304][T14068] copy_mm+0x9a1/0x13e0 [ 347.235300][T14068] ? copy_signal+0x610/0x610 [ 347.239736][T14068] ? __init_rwsem+0xd6/0x1c0 [ 347.244147][T14068] ? copy_signal+0x4e3/0x610 [ 347.248588][T14068] copy_process+0x1149/0x3290 [ 347.253099][T14068] ? timerqueue_add+0x250/0x270 [ 347.257866][T14068] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 347.262809][T14068] ? enqueue_hrtimer+0xca/0x240 [ 347.267499][T14068] ? __hrtimer_run_queues+0x46b/0xad0 [ 347.272706][T14068] kernel_clone+0x21e/0x9e0 [ 347.277045][T14068] ? irqentry_exit+0x30/0x40 [ 347.281470][T14068] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 347.287110][T14068] ? create_io_thread+0x1e0/0x1e0 [ 347.291973][T14068] __x64_sys_clone+0x23f/0x290 [ 347.296572][T14068] ? __do_sys_vfork+0x130/0x130 [ 347.301259][T14068] ? debug_smp_processor_id+0x17/0x20 [ 347.306465][T14068] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 347.312368][T14068] ? exit_to_user_mode_prepare+0x39/0xa0 [ 347.317838][T14068] do_syscall_64+0x3d/0xb0 [ 347.322098][T14068] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 347.327729][T14068] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 347.333455][T14068] RIP: 0033:0x7fd15e9c4da9 [ 347.337713][T14068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 347.357238][T14068] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 347.365487][T14068] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 347.373294][T14068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 347.381278][T14068] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 08:37:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cgroup.events\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f00000005c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r7, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x852, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) (async) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x24402, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c61100, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2040, 0x8005, 0x800, 0x2, 0x686, 0x0, 0x0, 0x0, 0xe5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='nilfs2_segment_usage_allocated\x00', r7}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4004662b, &(0x7f00000005c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x20000000000000fb, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRESDEC=r7, @ANYRES16=r8, @ANYRES8=0x0, @ANYRES32=r9], &(0x7f0000000500)='syzkaller\x00', 0x3, 0xde, &(0x7f00000007c0)=""/222, 0x40f00, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x6, 0x6, 0xd}, 0xfffffffffffffef6, 0x0, r10, 0x0, &(0x7f0000000b80), 0x0, 0x10, 0xff}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x8, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0x3, 0x4, 0x2, 0xffffffffffffffc0, 0x1}, @ldst={0x2, 0x2, 0x4, 0x8, 0x0, 0x80, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x2, 0xa, 0x4, 0x0, 0x8}, @generic={0x8, 0x8, 0x1, 0xefc, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x7ff, 0x98, &(0x7f0000000500)=""/152, 0x1e00, 0xd, '\x00', r6, 0x20, r2, 0x8, &(0x7f0000000680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x8, 0x7, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000880)=[r2, r4, r7, r5], &(0x7f00000008c0)=[{0x2, 0x5, 0x0, 0x1}, {0x2, 0x4, 0x7, 0xc}, {0x0, 0x1, 0x7, 0xa}], 0x10, 0x5}, 0x90) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffff) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8800000, &(0x7f0000000200)="b03efa1f79963c7d87c0ce263a14c3605feafe883eb2c3bfcbe75ae1f9d7484652fa3457a819f1421e5cfdcd7e1af52d4bf2e56ddd62f404744a3594750907927b9d621322c015282b8423748563ea72161fb0fc0254d4678b81dc77dbf0a33ec0010030e9f4105dd6094f924a1559417a0bfd152b718f5650c8eeeb1bd35b68b5b891895c17cc7ece8c72735a7469867c8d466bb2732b45fa7536f14cd2b353b2758dde71595d17e2db1ae92b984a7ae73c8dd8324d82a3f52d51c56a22f059d16f2903774d2c326072467df5188a73bb95d07cf47246177824dfe0baf604dc283a65", 0xe3, &(0x7f0000000300), &(0x7f0000000000), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc7b986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6386348545d425e8884b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffff) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8800000, &(0x7f0000000200)="b03efa1f79963c7d87c0ce263a14c3605feafe883eb2c3bfcbe75ae1f9d7484652fa3457a819f1421e5cfdcd7e1af52d4bf2e56ddd62f404744a3594750907927b9d621322c015282b8423748563ea72161fb0fc0254d4678b81dc77dbf0a33ec0010030e9f4105dd6094f924a1559417a0bfd152b718f5650c8eeeb1bd35b68b5b891895c17cc7ece8c72735a7469867c8d466bb2732b45fa7536f14cd2b353b2758dde71595d17e2db1ae92b984a7ae73c8dd8324d82a3f52d51c56a22f059d16f2903774d2c326072467df5188a73bb95d07cf47246177824dfe0baf604dc283a65", 0xe3, &(0x7f0000000300), &(0x7f0000000000), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc7b986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6386348545d425e8884b08fd93d2fb872e4f8ac8a75e299e8e") (async) [ 347.389090][T14068] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 347.396903][T14068] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 347.404802][T14068] 08:37:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000180009100000000006230000009500"/33], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xfffffffffffffffe, 0x12) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000000), 0x165243) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8a, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x3f, 0x3, 0x5, 0x0, 0x1, 0x2, '\x00', r7, r4, 0x4, 0x4, 0x1, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x1, 0x4a, &(0x7f0000000840)=""/74, 0x41100, 0x0, '\x00', r7, 0x24, r6, 0x8, &(0x7f00000008c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r3, 0x1, &(0x7f0000000900)=[r3, r5, r1, r4, r4], &(0x7f0000000940)=[{0x1, 0x4, 0xa}], 0x10, 0x5}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7}}, @restrict={0x7, 0x0, 0x0, 0xb, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0x3}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000cc0)=""/255, 0x67, 0xff, 0x0, 0xf55}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@o_path={&(0x7f0000000e80)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x7, &(0x7f0000000b80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffffff01}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000c00)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000e00)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x3, 0x0, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[r3, r5, r3, r3, r3, r3, 0x1, r3], &(0x7f0000000f40)=[{0x1, 0x3, 0x3, 0x3}, {0x2, 0x2, 0x9, 0x2}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x0, 0x0, &(0x7f0000000bc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001280)={0x2, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000001340)=[{0x3, 0x5, 0x7, 0x5}], 0x10, 0xfffffff9}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000480)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7ff, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x20, 0x1, 0x0, 0xd38, 0xa10, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x4, 0x5}, 0x48) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x20, 0x1, 0x0, 0xd38, 0xa10, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x4, 0x5}, 0x48) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r16}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0x7, 0x9, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0xea, &(0x7f0000000380)=""/234, 0x40f00, 0x50, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x10, 0x0, 0x1000}, 0x10, 0xc51d, r0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, r9, r10, r11, r12, r13, r14, 0xffffffffffffffff, r15, r16]}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x10001}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0xff, 0x4, 0xf, 0xfff, 0x331}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x6f, &(0x7f0000000200)=""/111, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000040)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[r0], &(0x7f0000000340)=[{0x1, 0x5, 0xa, 0x5}, {0x5, 0x1, 0xb, 0x2}], 0x10, 0x20}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x1b1111f000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 63) 08:37:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r1, 0x0, 0xd, &(0x7f0000000000)='sched_switch\x00'}, 0x30) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 347.571328][T14111] FAULT_INJECTION: forcing a failure. [ 347.571328][T14111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 347.594684][T14111] CPU: 1 PID: 14111 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 347.604854][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 347.614752][T14111] Call Trace: [ 347.617871][T14111] [ 347.620650][T14111] dump_stack_lvl+0x151/0x1b7 [ 347.625164][T14111] ? io_uring_drop_tctx_refs+0x190/0x190 [ 347.630630][T14111] ? kvm_sched_clock_read+0x18/0x40 [ 347.635749][T14111] ? sched_clock+0x9/0x10 [ 347.639914][T14111] ? sched_clock_cpu+0x18/0x3b0 [ 347.644601][T14111] ? _raw_spin_lock+0xa4/0x1b0 [ 347.649203][T14111] dump_stack+0x15/0x17 [ 347.653194][T14111] should_fail+0x3c6/0x510 [ 347.657450][T14111] should_fail_alloc_page+0x5a/0x80 [ 347.662482][T14111] prepare_alloc_pages+0x15c/0x700 [ 347.667430][T14111] ? irqentry_exit+0x30/0x40 [ 347.671857][T14111] ? __alloc_pages_bulk+0xe40/0xe40 [ 347.676890][T14111] __alloc_pages+0x18c/0x8f0 [ 347.681314][T14111] ? _raw_spin_unlock+0x4d/0x70 [ 347.686004][T14111] ? prep_new_page+0x110/0x110 [ 347.690693][T14111] pte_alloc_one+0x73/0x1b0 [ 347.695125][T14111] ? pfn_modify_allowed+0x2f0/0x2f0 [ 347.700234][T14111] __pte_alloc+0x86/0x350 [ 347.704411][T14111] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 347.710043][T14111] ? free_pgtables+0x280/0x280 [ 347.714644][T14111] ? __kasan_check_write+0x14/0x20 [ 347.719589][T14111] copy_page_range+0x28a8/0x2f90 [ 347.724364][T14111] ? __kasan_slab_alloc+0xb1/0xe0 [ 347.729233][T14111] ? pfn_valid+0x1e0/0x1e0 [ 347.733473][T14111] ? __vma_link_rb+0x4c5/0x550 [ 347.738075][T14111] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 347.743632][T14111] ? __rb_insert_augmented+0x5de/0x610 [ 347.748926][T14111] copy_mm+0xc7e/0x13e0 [ 347.752920][T14111] ? copy_signal+0x610/0x610 [ 347.757342][T14111] ? __init_rwsem+0xd6/0x1c0 [ 347.761773][T14111] ? copy_signal+0x4e3/0x610 [ 347.766195][T14111] copy_process+0x1149/0x3290 [ 347.770713][T14111] ? timerqueue_add+0x250/0x270 [ 347.775395][T14111] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 347.780341][T14111] ? enqueue_hrtimer+0xca/0x240 [ 347.785026][T14111] ? __hrtimer_run_queues+0x46b/0xad0 [ 347.790238][T14111] kernel_clone+0x21e/0x9e0 [ 347.794577][T14111] ? irqentry_exit+0x30/0x40 [ 347.799001][T14111] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 347.804643][T14111] ? create_io_thread+0x1e0/0x1e0 [ 347.809507][T14111] __x64_sys_clone+0x23f/0x290 [ 347.814106][T14111] ? __do_sys_vfork+0x130/0x130 [ 347.818794][T14111] ? debug_smp_processor_id+0x17/0x20 [ 347.824001][T14111] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 347.829902][T14111] ? exit_to_user_mode_prepare+0x39/0xa0 [ 347.835369][T14111] do_syscall_64+0x3d/0xb0 [ 347.839617][T14111] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 347.845258][T14111] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 347.850988][T14111] RIP: 0033:0x7fd15e9c4da9 [ 347.855245][T14111] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 347.874681][T14111] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 347.882934][T14111] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 347.890743][T14111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 347.898565][T14111] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 347.906363][T14111] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 347.914196][T14111] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 08:37:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000180009100000000006230000009500"/33], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xfffffffffffffffe, 0x12) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000000), 0x165243) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8a, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x3f, 0x3, 0x5, 0x0, 0x1, 0x2, '\x00', r7, r4, 0x4, 0x4, 0x1, 0xb}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x3f, 0x3, 0x5, 0x0, 0x1, 0x2, '\x00', r7, r4, 0x4, 0x4, 0x1, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x1, 0x4a, &(0x7f0000000840)=""/74, 0x41100, 0x0, '\x00', r7, 0x24, r6, 0x8, &(0x7f00000008c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r3, 0x1, &(0x7f0000000900)=[r3, r5, r1, r4, r4], &(0x7f0000000940)=[{0x1, 0x4, 0xa}], 0x10, 0x5}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x1, 0x4a, &(0x7f0000000840)=""/74, 0x41100, 0x0, '\x00', r7, 0x24, r6, 0x8, &(0x7f00000008c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r3, 0x1, &(0x7f0000000900)=[r3, r5, r1, r4, r4], &(0x7f0000000940)=[{0x1, 0x4, 0xa}], 0x10, 0x5}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 347.921991][T14111] 08:37:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x10001}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0xff, 0x4, 0xf, 0xfff, 0x331}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x6f, &(0x7f0000000200)=""/111, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000040)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[r0], &(0x7f0000000340)=[{0x1, 0x5, 0xa, 0x5}, {0x5, 0x1, 0xb, 0x2}], 0x10, 0x20}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000180009100000000006230000009500"/33], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (rerun: 64) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200)=0xfffffffffffffffe, 0x12) (async, rerun: 64) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (rerun: 64) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000000), 0x165243) (async) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x8a, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x3f, 0x3, 0x5, 0x0, 0x1, 0x2, '\x00', r7, r4, 0x4, 0x4, 0x1, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x1, 0x4a, &(0x7f0000000840)=""/74, 0x41100, 0x0, '\x00', r7, 0x24, r6, 0x8, &(0x7f00000008c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r3, 0x1, &(0x7f0000000900)=[r3, r5, r1, r4, r4], &(0x7f0000000940)=[{0x1, 0x4, 0xa}], 0x10, 0x5}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async, rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x29d9fa722000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) r2 = gettid() (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r1, 0x0, 0xd, &(0x7f0000000000)='sched_switch\x00'}, 0x30) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x553a22f14000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000085000000230000009500000000000000000000006cb93ee8f163aff1f5674c0c44d11384591757a620a689c8f94aee6b8033b6403eac417b9d49485d98dd81c388"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 64) 08:37:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r1, 0x0, 0xd, &(0x7f0000000000)='sched_switch\x00'}, 0x30) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x10001}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0xff, 0x4, 0xf, 0xfff, 0x331}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x6f, &(0x7f0000000200)=""/111, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000040)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[r0], &(0x7f0000000340)=[{0x1, 0x5, 0xa, 0x5}, {0x5, 0x1, 0xb, 0x2}], 0x10, 0x20}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x402c}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x6, 0x81, 0x5, 0x0, 0x7f, 0x10090, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9c9a, 0x2, @perf_config_ext={0x6, 0x401}, 0x8, 0x2, 0x40004000, 0x9, 0x1f, 0x3, 0x6, 0x0, 0x3f, 0x0, 0x100}, r2, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0506617, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x81, 0x8, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x104192, 0x5, 0xdadd, 0x4, 0x7, 0x101, 0xfff8, 0x0, 0x5, 0x0, 0x8000000000000000}, r4, 0x0, r4, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='macvlan0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x13, 0x2, 0x9, 0x9, 0x404, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) perf_event_open(&(0x7f0000000a40)={0x4, 0x80, 0x4, 0x1c, 0x40, 0x0, 0x0, 0xff, 0x200, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x22c}, 0x10088, 0x9, 0x7, 0xa, 0xffffffffffffffff, 0xc5f, 0x6, 0x0, 0x3, 0x0, 0x9}, r2, 0x5, r5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x0, &(0x7f0000000140), &(0x7f0000000240)='GPL\x00', 0x67e, 0xf6, &(0x7f0000000340)=""/246, 0x100, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x7c37, 0xffff9141}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, r4, r5, r6, r7], &(0x7f0000000880)=[{0x5, 0x4, 0x1, 0x6}], 0x10, 0x5}, 0x90) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x80, 0x0, 0x5, 0x6, 0x0, 0x7f, 0x1167, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc3, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x11020, 0x40, 0x400, 0x9, 0x35, 0x58, 0x0, 0x0, 0xfff, 0x0, 0x1}, r2, 0x3, r1, 0xa) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 348.175573][T14138] FAULT_INJECTION: forcing a failure. [ 348.175573][T14138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.211879][T14138] CPU: 0 PID: 14138 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 08:37:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000085000000230000009500000000000000000000006cb93ee8f163aff1f5674c0c44d11384591757a620a689c8f94aee6b8033b6403eac417b9d49485d98dd81c388"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 348.222056][T14138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 348.231951][T14138] Call Trace: [ 348.235069][T14138] [ 348.237901][T14138] dump_stack_lvl+0x151/0x1b7 [ 348.242363][T14138] ? io_uring_drop_tctx_refs+0x190/0x190 [ 348.247828][T14138] ? kvm_sched_clock_read+0x18/0x40 [ 348.252867][T14138] ? sched_clock+0x9/0x10 [ 348.257028][T14138] ? sched_clock_cpu+0x18/0x3b0 [ 348.261715][T14138] ? _raw_spin_lock+0xa4/0x1b0 [ 348.266321][T14138] dump_stack+0x15/0x17 [ 348.270309][T14138] should_fail+0x3c6/0x510 08:37:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000085000000230000009500000000000000000000006cb93ee8f163aff1f5674c0c44d11384591757a620a689c8f94aee6b8033b6403eac417b9d49485d98dd81c388"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async, rerun: 64) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async, rerun: 32) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async, rerun: 32) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 348.274561][T14138] should_fail_alloc_page+0x5a/0x80 [ 348.279681][T14138] prepare_alloc_pages+0x15c/0x700 [ 348.284638][T14138] ? __alloc_pages_bulk+0xe40/0xe40 [ 348.289666][T14138] ? kasan_check_range+0x7e/0x2a0 [ 348.294528][T14138] __alloc_pages+0x18c/0x8f0 [ 348.298950][T14138] ? _raw_spin_unlock+0x4d/0x70 [ 348.303634][T14138] ? prep_new_page+0x110/0x110 [ 348.308240][T14138] pte_alloc_one+0x73/0x1b0 [ 348.312576][T14138] ? pfn_modify_allowed+0x2f0/0x2f0 [ 348.317610][T14138] ? irqentry_exit+0x30/0x40 [ 348.322045][T14138] __pte_alloc+0x86/0x350 [ 348.326210][T14138] ? irqentry_exit+0x30/0x40 [ 348.330624][T14138] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 348.336277][T14138] ? free_pgtables+0x280/0x280 [ 348.340865][T14138] ? __kasan_check_write+0x14/0x20 [ 348.345833][T14138] copy_page_range+0x28a8/0x2f90 [ 348.350597][T14138] ? __kasan_slab_alloc+0xb1/0xe0 [ 348.355459][T14138] ? pfn_valid+0x1e0/0x1e0 [ 348.359807][T14138] ? __vma_link_rb+0x4c5/0x550 [ 348.364400][T14138] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 348.369953][T14138] ? __rb_insert_augmented+0x5de/0x610 [ 348.375255][T14138] copy_mm+0xc7e/0x13e0 [ 348.379245][T14138] ? copy_signal+0x610/0x610 [ 348.383666][T14138] ? __init_rwsem+0xd6/0x1c0 [ 348.388090][T14138] ? copy_signal+0x4e3/0x610 [ 348.392517][T14138] copy_process+0x1149/0x3290 [ 348.397031][T14138] ? irqentry_exit+0x30/0x40 [ 348.401463][T14138] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 348.406404][T14138] ? kernel_clone+0xb7/0x9e0 [ 348.410860][T14138] kernel_clone+0x21e/0x9e0 [ 348.415167][T14138] ? create_io_thread+0x1e0/0x1e0 [ 348.423155][T14138] ? clockevents_program_event+0x22f/0x300 [ 348.428796][T14138] __x64_sys_clone+0x23f/0x290 [ 348.433395][T14138] ? __do_sys_vfork+0x130/0x130 [ 348.438084][T14138] ? debug_smp_processor_id+0x17/0x20 [ 348.443291][T14138] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 348.449193][T14138] ? exit_to_user_mode_prepare+0x39/0xa0 [ 348.454657][T14138] do_syscall_64+0x3d/0xb0 [ 348.459048][T14138] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 348.464670][T14138] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 348.470408][T14138] RIP: 0033:0x7fd15e9c4da9 [ 348.474660][T14138] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 348.494097][T14138] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 348.502341][T14138] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 348.510148][T14138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 348.517961][T14138] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 08:37:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r4 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000007000000000000000600000018180000", @ANYRES32=r3, @ANYBLOB="0000000000000000851000000500000085000000a300000018610000050000000000000001000080180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000cf2704000000000018150000", @ANYRES32=r3, @ANYBLOB="0000004d34eff22f27608932970000000000186300000d000000000000000400"], &(0x7f0000000540)='GPL\x00', 0xa4dd, 0xe5, &(0x7f0000000580)=""/229, 0x40f00, 0x3, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x3, 0x10001, 0x9}, 0x10, 0x0, r3, 0x3, 0x0, &(0x7f0000000a00)=[{0x1, 0x1, 0xd}, {0x80, 0x3, 0x5, 0xa}, {}], 0x10, 0x2}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x18, 0x7, 0xde1c, 0x1, 0x5, 0x4, 0x3, 0x0, 0x6, 0x0, 0xea81}, r4, 0x0, r3, 0x3) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x9, 0x5, 0x3, 0x0, 0x89ee, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x410, 0x40, 0x1832, 0xb, 0x401, 0x80000001, 0x4, 0x0, 0xffff, 0x0, 0x7}, r4, 0x3, r1, 0x3) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r2, 0x14, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=0x1, r0, 0x1f, 0xc, 0x0, @link_id=r5, r6}, 0x20) [ 348.525772][T14138] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 348.533583][T14138] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 348.541403][T14138] 08:37:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x2001000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0xfffffffffffffffc) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x2000}) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x402c}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x6, 0x81, 0x5, 0x0, 0x7f, 0x10090, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9c9a, 0x2, @perf_config_ext={0x6, 0x401}, 0x8, 0x2, 0x40004000, 0x9, 0x1f, 0x3, 0x6, 0x0, 0x3f, 0x0, 0x100}, r2, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0506617, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x81, 0x8, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x104192, 0x5, 0xdadd, 0x4, 0x7, 0x101, 0xfff8, 0x0, 0x5, 0x0, 0x8000000000000000}, r4, 0x0, r4, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='macvlan0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x13, 0x2, 0x9, 0x9, 0x404, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) perf_event_open(&(0x7f0000000a40)={0x4, 0x80, 0x4, 0x1c, 0x40, 0x0, 0x0, 0xff, 0x200, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x22c}, 0x10088, 0x9, 0x7, 0xa, 0xffffffffffffffff, 0xc5f, 0x6, 0x0, 0x3, 0x0, 0x9}, r2, 0x5, r5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x0, &(0x7f0000000140), &(0x7f0000000240)='GPL\x00', 0x67e, 0xf6, &(0x7f0000000340)=""/246, 0x100, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x7c37, 0xffff9141}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, r4, r5, r6, r7], &(0x7f0000000880)=[{0x5, 0x4, 0x1, 0x6}], 0x10, 0x5}, 0x90) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x80, 0x0, 0x5, 0x6, 0x0, 0x7f, 0x1167, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc3, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x11020, 0x40, 0x400, 0x9, 0x35, 0x58, 0x0, 0x0, 0xfff, 0x0, 0x1}, r2, 0x3, r1, 0xa) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x402c}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) (async) getpid() (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x6, 0x81, 0x5, 0x0, 0x7f, 0x10090, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9c9a, 0x2, @perf_config_ext={0x6, 0x401}, 0x8, 0x2, 0x40004000, 0x9, 0x1f, 0x3, 0x6, 0x0, 0x3f, 0x0, 0x100}, r2, 0xd, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0506617, &(0x7f0000000040)) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x81, 0x8, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x104192, 0x5, 0xdadd, 0x4, 0x7, 0x101, 0xfff8, 0x0, 0x5, 0x0, 0x8000000000000000}, r4, 0x0, r4, 0x1) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='macvlan0\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x13, 0x2, 0x9, 0x9, 0x404, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) (async) perf_event_open(&(0x7f0000000a40)={0x4, 0x80, 0x4, 0x1c, 0x40, 0x0, 0x0, 0xff, 0x200, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x22c}, 0x10088, 0x9, 0x7, 0xa, 0xffffffffffffffff, 0xc5f, 0x6, 0x0, 0x3, 0x0, 0x9}, r2, 0x5, r5, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x0, &(0x7f0000000140), &(0x7f0000000240)='GPL\x00', 0x67e, 0xf6, &(0x7f0000000340)=""/246, 0x100, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x7c37, 0xffff9141}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, r4, r5, r6, r7], &(0x7f0000000880)=[{0x5, 0x4, 0x1, 0x6}], 0x10, 0x5}, 0x90) (async) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x80, 0x0, 0x5, 0x6, 0x0, 0x7f, 0x1167, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc3, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x11020, 0x40, 0x400, 0x9, 0x35, 0x58, 0x0, 0x0, 0xfff, 0x0, 0x1}, r2, 0x3, r1, 0xa) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 65) 08:37:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x402c}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x402c}, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x6, 0x81, 0x5, 0x0, 0x7f, 0x10090, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9c9a, 0x2, @perf_config_ext={0x6, 0x401}, 0x8, 0x2, 0x40004000, 0x9, 0x1f, 0x3, 0x6, 0x0, 0x3f, 0x0, 0x100}, r2, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc0506617, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x81, 0x8, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x104192, 0x5, 0xdadd, 0x4, 0x7, 0x101, 0xfff8, 0x0, 0x5, 0x0, 0x8000000000000000}, r4, 0x0, r4, 0x1) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x81, 0x8, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x104192, 0x5, 0xdadd, 0x4, 0x7, 0x101, 0xfff8, 0x0, 0x5, 0x0, 0x8000000000000000}, r4, 0x0, r4, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='macvlan0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x13, 0x2, 0x9, 0x9, 0x404, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) perf_event_open(&(0x7f0000000a40)={0x4, 0x80, 0x4, 0x1c, 0x40, 0x0, 0x0, 0xff, 0x200, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x22c}, 0x10088, 0x9, 0x7, 0xa, 0xffffffffffffffff, 0xc5f, 0x6, 0x0, 0x3, 0x0, 0x9}, r2, 0x5, r5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x0, &(0x7f0000000140), &(0x7f0000000240)='GPL\x00', 0x67e, 0xf6, &(0x7f0000000340)=""/246, 0x100, 0x40, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x7c37, 0xffff9141}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, r4, r5, r6, r7], &(0x7f0000000880)=[{0x5, 0x4, 0x1, 0x6}], 0x10, 0x5}, 0x90) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x80, 0x0, 0x5, 0x6, 0x0, 0x7f, 0x1167, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc3, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x11020, 0x40, 0x400, 0x9, 0x35, 0x58, 0x0, 0x0, 0xfff, 0x0, 0x1}, r2, 0x3, r1, 0xa) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, 0xfffffffffffffffc) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x2000}) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 348.685482][T14178] FAULT_INJECTION: forcing a failure. [ 348.685482][T14178] name failslab, interval 1, probability 0, space 0, times 0 [ 348.724869][T14178] CPU: 1 PID: 14178 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 348.735130][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 348.745019][T14178] Call Trace: [ 348.748146][T14178] [ 348.750921][T14178] dump_stack_lvl+0x151/0x1b7 [ 348.755432][T14178] ? io_uring_drop_tctx_refs+0x190/0x190 [ 348.760901][T14178] dump_stack+0x15/0x17 [ 348.764891][T14178] should_fail+0x3c6/0x510 [ 348.769146][T14178] __should_failslab+0xa4/0xe0 [ 348.773747][T14178] ? vm_area_dup+0x26/0x230 [ 348.778084][T14178] should_failslab+0x9/0x20 [ 348.782429][T14178] slab_pre_alloc_hook+0x37/0xd0 [ 348.787200][T14178] ? vm_area_dup+0x26/0x230 [ 348.791537][T14178] kmem_cache_alloc+0x44/0x200 [ 348.796138][T14178] vm_area_dup+0x26/0x230 [ 348.800304][T14178] copy_mm+0x9a1/0x13e0 [ 348.804299][T14178] ? copy_signal+0x610/0x610 [ 348.808725][T14178] ? __init_rwsem+0xd6/0x1c0 [ 348.813147][T14178] ? copy_signal+0x4e3/0x610 [ 348.817576][T14178] copy_process+0x1149/0x3290 [ 348.822093][T14178] ? timerqueue_add+0x250/0x270 [ 348.826775][T14178] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 348.831721][T14178] ? enqueue_hrtimer+0xca/0x240 [ 348.836406][T14178] ? __hrtimer_run_queues+0x46b/0xad0 [ 348.841616][T14178] kernel_clone+0x21e/0x9e0 [ 348.845958][T14178] ? create_io_thread+0x1e0/0x1e0 [ 348.850817][T14178] ? clockevents_program_event+0x22f/0x300 [ 348.856459][T14178] __x64_sys_clone+0x23f/0x290 [ 348.861055][T14178] ? __do_sys_vfork+0x130/0x130 [ 348.865746][T14178] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 348.871561][T14178] do_syscall_64+0x3d/0xb0 [ 348.875808][T14178] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 348.881463][T14178] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 348.887183][T14178] RIP: 0033:0x7fd15e9c4da9 [ 348.891447][T14178] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 348.910960][T14178] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 348.919210][T14178] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 348.927019][T14178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 08:37:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x2020000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r4 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000007000000000000000600000018180000", @ANYRES32=r3, @ANYBLOB="0000000000000000851000000500000085000000a300000018610000050000000000000001000080180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000cf2704000000000018150000", @ANYRES32=r3, @ANYBLOB="0000004d34eff22f27608932970000000000186300000d000000000000000400"], &(0x7f0000000540)='GPL\x00', 0xa4dd, 0xe5, &(0x7f0000000580)=""/229, 0x40f00, 0x3, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x3, 0x10001, 0x9}, 0x10, 0x0, r3, 0x3, 0x0, &(0x7f0000000a00)=[{0x1, 0x1, 0xd}, {0x80, 0x3, 0x5, 0xa}, {}], 0x10, 0x2}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x18, 0x7, 0xde1c, 0x1, 0x5, 0x4, 0x3, 0x0, 0x6, 0x0, 0xea81}, r4, 0x0, r3, 0x3) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x9, 0x5, 0x3, 0x0, 0x89ee, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x410, 0x40, 0x1832, 0xb, 0x401, 0x80000001, 0x4, 0x0, 0xffff, 0x0, 0x7}, r4, 0x3, r1, 0x3) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r2, 0x14, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=0x1, r0, 0x1f, 0xc, 0x0, @link_id=r5, r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) close(r3) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) gettid() (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000007000000000000000600000018180000", @ANYRES32=r3, @ANYBLOB="0000000000000000851000000500000085000000a300000018610000050000000000000001000080180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000cf2704000000000018150000", @ANYRES32=r3, @ANYBLOB="0000004d34eff22f27608932970000000000186300000d000000000000000400"], &(0x7f0000000540)='GPL\x00', 0xa4dd, 0xe5, &(0x7f0000000580)=""/229, 0x40f00, 0x3, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x3, 0x10001, 0x9}, 0x10, 0x0, r3, 0x3, 0x0, &(0x7f0000000a00)=[{0x1, 0x1, 0xd}, {0x80, 0x3, 0x5, 0xa}, {}], 0x10, 0x2}, 0x90) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x18, 0x7, 0xde1c, 0x1, 0x5, 0x4, 0x3, 0x0, 0x6, 0x0, 0xea81}, r4, 0x0, r3, 0x3) (async) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x9, 0x5, 0x3, 0x0, 0x89ee, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x410, 0x40, 0x1832, 0xb, 0x401, 0x80000001, 0x4, 0x0, 0xffff, 0x0, 0x7}, r4, 0x3, r1, 0x3) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9}, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r2, 0x14, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0]}, 0x40) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=0x1, r0, 0x1f, 0xc, 0x0, @link_id=r5, r6}, 0x20) (async) [ 348.934828][T14178] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 348.942655][T14178] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 348.950455][T14178] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 348.958267][T14178] 08:37:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0xfffffffffffffffc) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x2000}) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x8000000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 66) 08:37:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) r4 = gettid() (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000007000000000000000600000018180000", @ANYRES32=r3, @ANYBLOB="0000000000000000851000000500000085000000a300000018610000050000000000000001000080180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000cf2704000000000018150000", @ANYRES32=r3, @ANYBLOB="0000004d34eff22f27608932970000000000186300000d000000000000000400"], &(0x7f0000000540)='GPL\x00', 0xa4dd, 0xe5, &(0x7f0000000580)=""/229, 0x40f00, 0x3, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x3, 0x10001, 0x9}, 0x10, 0x0, r3, 0x3, 0x0, &(0x7f0000000a00)=[{0x1, 0x1, 0xd}, {0x80, 0x3, 0x5, 0xa}, {}], 0x10, 0x2}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x18, 0x7, 0xde1c, 0x1, 0x5, 0x4, 0x3, 0x0, 0x6, 0x0, 0xea81}, r4, 0x0, r3, 0x3) (async) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x9, 0x5, 0x3, 0x0, 0x89ee, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x410, 0x40, 0x1832, 0xb, 0x401, 0x80000001, 0x4, 0x0, 0xffff, 0x0, 0x7}, r4, 0x3, r1, 0x3) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x9, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r2, 0x14, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=0x1, r0, 0x1f, 0xc, 0x0, @link_id=r5, r6}, 0x20) 08:37:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x61020400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x2}, 0x0, 0xffff, 0x1, 0x5, 0x4, 0x646, 0x0, 0x0, 0x5, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/time\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x302, 0xfffffffffffffffe, 0x89, 0x0, 0x3}, r0, 0xbffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 349.149752][T14234] FAULT_INJECTION: forcing a failure. [ 349.149752][T14234] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.170393][T14234] CPU: 0 PID: 14234 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 349.180567][T14234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 349.190481][T14234] Call Trace: [ 349.193589][T14234] [ 349.196367][T14234] dump_stack_lvl+0x151/0x1b7 [ 349.200876][T14234] ? io_uring_drop_tctx_refs+0x190/0x190 [ 349.206341][T14234] dump_stack+0x15/0x17 [ 349.210328][T14234] should_fail+0x3c6/0x510 [ 349.214594][T14234] should_fail_alloc_page+0x5a/0x80 [ 349.219699][T14234] prepare_alloc_pages+0x15c/0x700 [ 349.224648][T14234] ? __alloc_pages_bulk+0xe40/0xe40 [ 349.229693][T14234] __alloc_pages+0x18c/0x8f0 [ 349.234113][T14234] ? prep_new_page+0x110/0x110 [ 349.238712][T14234] ? irqentry_exit+0x30/0x40 [ 349.243134][T14234] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 349.248783][T14234] pte_alloc_one+0x73/0x1b0 [ 349.253115][T14234] ? pfn_modify_allowed+0x2f0/0x2f0 [ 349.258150][T14234] ? copy_page_range+0xe6d/0x2f90 [ 349.263010][T14234] ? __pte_alloc+0x7e/0x350 [ 349.267349][T14234] __pte_alloc+0x86/0x350 [ 349.271519][T14234] ? free_pgtables+0x280/0x280 [ 349.276115][T14234] ? audit_tree_destroy_watch+0x20/0x20 [ 349.281517][T14234] copy_page_range+0x28a8/0x2f90 [ 349.286358][T14234] ? __kasan_slab_alloc+0xb1/0xe0 [ 349.291223][T14234] ? pfn_valid+0x1e0/0x1e0 [ 349.295471][T14234] ? irqentry_exit+0x30/0x40 [ 349.299988][T14234] ? sysvec_call_function_single+0xb0/0xb0 [ 349.305621][T14234] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 349.311181][T14234] ? __rb_insert_augmented+0x5de/0x610 [ 349.316475][T14234] copy_mm+0xc7e/0x13e0 [ 349.320470][T14234] ? copy_signal+0x610/0x610 [ 349.324894][T14234] ? __init_rwsem+0xd6/0x1c0 [ 349.329320][T14234] ? copy_signal+0x4e3/0x610 [ 349.333744][T14234] copy_process+0x1149/0x3290 [ 349.338260][T14234] ? timerqueue_add+0x250/0x270 [ 349.342943][T14234] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 349.347892][T14234] ? enqueue_hrtimer+0xca/0x240 [ 349.352576][T14234] ? __hrtimer_run_queues+0x46b/0xad0 [ 349.357788][T14234] kernel_clone+0x21e/0x9e0 [ 349.362128][T14234] ? create_io_thread+0x1e0/0x1e0 [ 349.366990][T14234] ? clockevents_program_event+0x22f/0x300 [ 349.372629][T14234] __x64_sys_clone+0x23f/0x290 [ 349.377226][T14234] ? __do_sys_vfork+0x130/0x130 [ 349.381914][T14234] ? debug_smp_processor_id+0x17/0x20 [ 349.387120][T14234] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 349.393023][T14234] ? exit_to_user_mode_prepare+0x39/0xa0 [ 349.398490][T14234] do_syscall_64+0x3d/0xb0 [ 349.402744][T14234] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 349.408386][T14234] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 349.414112][T14234] RIP: 0033:0x7fd15e9c4da9 [ 349.418459][T14234] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 349.437896][T14234] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 08:37:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pimreg\x00', 0x1000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x81, 0x401, 0x5, 0x0, 0x1, 0x8000000, '\x00', 0x0, r0, 0x4, 0x1, 0x4, 0xb}, 0x48) [ 349.446137][T14234] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 349.453953][T14234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 349.461765][T14234] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 349.469574][T14234] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 349.477385][T14234] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 349.485198][T14234] 08:37:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 67) 08:37:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x10100000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pimreg\x00', 0x1000}) (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async, rerun: 32) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async, rerun: 64) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x61020400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x2}, 0x0, 0xffff, 0x1, 0x5, 0x4, 0x646, 0x0, 0x0, 0x5, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/time\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x302, 0xfffffffffffffffe, 0x89, 0x0, 0x3}, r0, 0xbffffffffffffffe, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 349.649652][T14251] FAULT_INJECTION: forcing a failure. [ 349.649652][T14251] name failslab, interval 1, probability 0, space 0, times 0 [ 349.665842][T14251] CPU: 1 PID: 14251 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 349.676010][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 349.685908][T14251] Call Trace: [ 349.689026][T14251] [ 349.691804][T14251] dump_stack_lvl+0x151/0x1b7 [ 349.696489][T14251] ? io_uring_drop_tctx_refs+0x190/0x190 [ 349.701960][T14251] dump_stack+0x15/0x17 [ 349.705953][T14251] should_fail+0x3c6/0x510 [ 349.710204][T14251] __should_failslab+0xa4/0xe0 [ 349.714806][T14251] ? vm_area_dup+0x26/0x230 [ 349.719143][T14251] should_failslab+0x9/0x20 [ 349.723485][T14251] slab_pre_alloc_hook+0x37/0xd0 [ 349.728259][T14251] ? vm_area_dup+0x26/0x230 [ 349.732595][T14251] kmem_cache_alloc+0x44/0x200 [ 349.737196][T14251] vm_area_dup+0x26/0x230 [ 349.741363][T14251] copy_mm+0x9a1/0x13e0 [ 349.745358][T14251] ? copy_signal+0x610/0x610 [ 349.749780][T14251] ? __init_rwsem+0xd6/0x1c0 [ 349.754208][T14251] ? copy_signal+0x4e3/0x610 [ 349.758632][T14251] copy_process+0x1149/0x3290 [ 349.763149][T14251] ? timerqueue_add+0x250/0x270 [ 349.767833][T14251] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 349.772781][T14251] ? enqueue_hrtimer+0xca/0x240 [ 349.777465][T14251] ? __hrtimer_run_queues+0x46b/0xad0 [ 349.782684][T14251] kernel_clone+0x21e/0x9e0 [ 349.787017][T14251] ? irqentry_exit+0x30/0x40 [ 349.791437][T14251] ? sysvec_apic_timer_interrupt+0x55/0xc0 08:37:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x81, 0x401, 0x5, 0x0, 0x1, 0x8000000, '\x00', 0x0, r0, 0x4, 0x1, 0x4, 0xb}, 0x48) 08:37:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x2072fad9290000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 349.797082][T14251] ? create_io_thread+0x1e0/0x1e0 [ 349.801944][T14251] __x64_sys_clone+0x23f/0x290 [ 349.806539][T14251] ? __do_sys_vfork+0x130/0x130 [ 349.811237][T14251] ? debug_smp_processor_id+0x17/0x20 [ 349.816437][T14251] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 349.822336][T14251] ? exit_to_user_mode_prepare+0x39/0xa0 [ 349.827806][T14251] do_syscall_64+0x3d/0xb0 [ 349.832141][T14251] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 349.837786][T14251] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 349.843511][T14251] RIP: 0033:0x7fd15e9c4da9 [ 349.847763][T14251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 349.867205][T14251] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 349.875454][T14251] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 349.883400][T14251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 349.891251][T14251] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 349.899016][T14251] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 349.906838][T14251] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 349.914643][T14251] 08:37:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pimreg\x00', 0x1000}) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 68) 08:37:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x81, 0x401, 0x5, 0x0, 0x1, 0x8000000, '\x00', 0x0, r0, 0x4, 0x1, 0x4, 0xb}, 0x48) 08:37:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/44, 0x2c, 0x0, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000010001000000000009000000121afeff100606128fb9d08900000018300000050000000000000000000000184b0000001862000004000000000000000000010018500000080000000000000000000000950000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x31, &(0x7f0000000340)=""/49, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x2}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x71d19143}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x7d, &(0x7f0000000240)=""/125, 0x41100, 0x22, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xf, 0x1f, 0x1}, 0x10, r7, 0x0, 0x2, &(0x7f0000000580)=[r1, r3, r4], &(0x7f00000005c0)=[{0x1, 0x2, 0x9, 0x5}, {0x4, 0x1, 0x6, 0xb}], 0x10, 0x9}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@ifindex=r6, 0x8, 0x0, 0x7ff, &(0x7f00000006c0)=[0x0], 0x1, 0x0, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0]}, 0x40) 08:37:20 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x10001, 0x5fd4595d, 0x9, 0x5445f2ad09ef23b7, r2, 0x9, '\x00', 0x0, r1, 0x1, 0x5, 0x0, 0xc}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xcb, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xa18, 0x3, 0x1b8a, 0x2, r3, 0x7fffffff, '\x00', r4, r2, 0x3, 0x3, 0x3, 0x2}, 0x48) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") [ 350.075442][T14285] FAULT_INJECTION: forcing a failure. [ 350.075442][T14285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.112290][T14285] CPU: 0 PID: 14285 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 08:37:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x40f1223a550000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 350.122728][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 350.132624][T14285] Call Trace: [ 350.135745][T14285] [ 350.138520][T14285] dump_stack_lvl+0x151/0x1b7 [ 350.143039][T14285] ? io_uring_drop_tctx_refs+0x190/0x190 [ 350.148515][T14285] ? kvm_sched_clock_read+0x18/0x40 [ 350.153539][T14285] ? sched_clock+0x9/0x10 [ 350.157711][T14285] ? sched_clock_cpu+0x18/0x3b0 [ 350.162390][T14285] ? _raw_spin_lock+0xa4/0x1b0 [ 350.167085][T14285] dump_stack+0x15/0x17 [ 350.171066][T14285] should_fail+0x3c6/0x510 [ 350.175324][T14285] should_fail_alloc_page+0x5a/0x80 [ 350.180353][T14285] prepare_alloc_pages+0x15c/0x700 [ 350.185310][T14285] ? __alloc_pages_bulk+0xe40/0xe40 [ 350.190338][T14285] ? native_set_ldt+0x360/0x360 [ 350.195027][T14285] __alloc_pages+0x18c/0x8f0 [ 350.199448][T14285] ? _raw_spin_unlock+0x4d/0x70 [ 350.204147][T14285] ? prep_new_page+0x110/0x110 [ 350.208742][T14285] pte_alloc_one+0x73/0x1b0 [ 350.213085][T14285] ? pfn_modify_allowed+0x2f0/0x2f0 [ 350.218107][T14285] ? preempt_schedule+0xd9/0xe0 [ 350.222801][T14285] ? preempt_schedule_common+0xbe/0xf0 [ 350.228100][T14285] __pte_alloc+0x86/0x350 [ 350.232258][T14285] ? free_pgtables+0x280/0x280 [ 350.236855][T14285] ? _raw_spin_lock+0xa4/0x1b0 [ 350.241458][T14285] ? __kasan_check_write+0x14/0x20 [ 350.246485][T14285] copy_page_range+0x28a8/0x2f90 [ 350.251260][T14285] ? __kasan_slab_alloc+0xb1/0xe0 [ 350.256143][T14285] ? pfn_valid+0x1e0/0x1e0 [ 350.260373][T14285] ? __vma_link_rb+0x4c5/0x550 [ 350.264987][T14285] ? trace_raw_output_vm_unmapped_area+0x220/0x220 [ 350.271319][T14285] ? __rb_insert_augmented+0x14d/0x610 [ 350.276611][T14285] copy_mm+0xc7e/0x13e0 [ 350.280599][T14285] ? copy_signal+0x610/0x610 [ 350.285019][T14285] ? __init_rwsem+0xd6/0x1c0 [ 350.289450][T14285] ? copy_signal+0x4e3/0x610 [ 350.293872][T14285] copy_process+0x1149/0x3290 [ 350.298389][T14285] ? proc_fail_nth_write+0x20b/0x290 [ 350.303522][T14285] ? fsnotify_perm+0x6a/0x5d0 [ 350.308019][T14285] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 350.312970][T14285] ? vfs_write+0x9ec/0x1110 [ 350.317306][T14285] ? __hrtimer_run_queues+0x46b/0xad0 [ 350.322611][T14285] kernel_clone+0x21e/0x9e0 [ 350.326938][T14285] ? file_end_write+0x1c0/0x1c0 [ 350.331810][T14285] ? create_io_thread+0x1e0/0x1e0 [ 350.336665][T14285] ? mutex_unlock+0xb2/0x260 [ 350.341092][T14285] ? __mutex_lock_slowpath+0x10/0x10 [ 350.346225][T14285] __x64_sys_clone+0x23f/0x290 [ 350.350807][T14285] ? __do_sys_vfork+0x130/0x130 [ 350.355492][T14285] ? ksys_write+0x260/0x2c0 [ 350.359837][T14285] ? debug_smp_processor_id+0x17/0x20 [ 350.365038][T14285] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 350.370952][T14285] ? exit_to_user_mode_prepare+0x39/0xa0 [ 350.376411][T14285] do_syscall_64+0x3d/0xb0 [ 350.380662][T14285] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 350.386307][T14285] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 350.392036][T14285] RIP: 0033:0x7fd15e9c4da9 [ 350.396288][T14285] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 350.415838][T14285] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 08:37:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x61020400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x2}, 0x0, 0xffff, 0x1, 0x5, 0x4, 0x646, 0x0, 0x0, 0x5, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/time\x00') (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x302, 0xfffffffffffffffe, 0x89, 0x0, 0x3}, r0, 0xbffffffffffffffe, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (rerun: 64) write$cgroup_type(r2, &(0x7f0000000000), 0x165243) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x10001, 0x5fd4595d, 0x9, 0x5445f2ad09ef23b7, r2, 0x9, '\x00', 0x0, r1, 0x1, 0x5, 0x0, 0xc}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xcb, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xa18, 0x3, 0x1b8a, 0x2, r3, 0x7fffffff, '\x00', r4, r2, 0x3, 0x3, 0x3, 0x2}, 0x48) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") [ 350.424168][T14285] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 350.431981][T14285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 350.439796][T14285] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 350.447610][T14285] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 350.455413][T14285] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 350.463228][T14285] 08:37:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/44, 0x2c, 0x0, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000010001000000000009000000121afeff100606128fb9d08900000018300000050000000000000000000000184b0000001862000004000000000000000000010018500000080000000000000000000000950000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x31, &(0x7f0000000340)=""/49, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x2}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x71d19143}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x7d, &(0x7f0000000240)=""/125, 0x41100, 0x22, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xf, 0x1f, 0x1}, 0x10, r7, 0x0, 0x2, &(0x7f0000000580)=[r1, r3, r4], &(0x7f00000005c0)=[{0x1, 0x2, 0x9, 0x5}, {0x4, 0x1, 0x6, 0xb}], 0x10, 0x9}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@ifindex=r6, 0x8, 0x0, 0x7ff, &(0x7f00000006c0)=[0x0], 0x1, 0x0, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0]}, 0x40) 08:37:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 69) [ 350.570627][T14306] FAULT_INJECTION: forcing a failure. [ 350.570627][T14306] name failslab, interval 1, probability 0, space 0, times 0 [ 350.621832][T14306] CPU: 1 PID: 14306 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 350.632002][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 350.641897][T14306] Call Trace: [ 350.645016][T14306] [ 350.647796][T14306] dump_stack_lvl+0x151/0x1b7 [ 350.652308][T14306] ? io_uring_drop_tctx_refs+0x190/0x190 [ 350.657779][T14306] dump_stack+0x15/0x17 [ 350.661766][T14306] should_fail+0x3c6/0x510 [ 350.666020][T14306] __should_failslab+0xa4/0xe0 [ 350.670619][T14306] ? vm_area_dup+0x26/0x230 [ 350.674961][T14306] should_failslab+0x9/0x20 [ 350.679299][T14306] slab_pre_alloc_hook+0x37/0xd0 [ 350.684074][T14306] ? vm_area_dup+0x26/0x230 [ 350.688414][T14306] kmem_cache_alloc+0x44/0x200 [ 350.693101][T14306] vm_area_dup+0x26/0x230 [ 350.697263][T14306] copy_mm+0x9a1/0x13e0 [ 350.701261][T14306] ? copy_signal+0x610/0x610 [ 350.705691][T14306] ? __init_rwsem+0xd6/0x1c0 [ 350.710108][T14306] ? copy_signal+0x4e3/0x610 [ 350.714537][T14306] copy_process+0x1149/0x3290 [ 350.719056][T14306] ? proc_fail_nth_write+0x20b/0x290 [ 350.724170][T14306] ? fsnotify_perm+0x6a/0x5d0 [ 350.728682][T14306] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 350.733631][T14306] ? vfs_write+0x9ec/0x1110 [ 350.737970][T14306] ? __hrtimer_run_queues+0x46b/0xad0 [ 350.743176][T14306] kernel_clone+0x21e/0x9e0 [ 350.747519][T14306] ? file_end_write+0x1c0/0x1c0 [ 350.752203][T14306] ? create_io_thread+0x1e0/0x1e0 [ 350.757061][T14306] ? mutex_unlock+0xb2/0x260 [ 350.761490][T14306] ? __mutex_lock_slowpath+0x10/0x10 [ 350.766613][T14306] __x64_sys_clone+0x23f/0x290 [ 350.771213][T14306] ? __do_sys_vfork+0x130/0x130 [ 350.775897][T14306] ? switch_fpu_return+0x1ed/0x3d0 [ 350.780851][T14306] ? __kasan_check_read+0x11/0x20 [ 350.785704][T14306] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 350.791175][T14306] do_syscall_64+0x3d/0xb0 [ 350.795425][T14306] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 350.801068][T14306] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 350.806799][T14306] RIP: 0033:0x7fd15e9c4da9 [ 350.811054][T14306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 350.830486][T14306] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 350.838734][T14306] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 350.846718][T14306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 350.854531][T14306] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 350.862340][T14306] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 08:37:21 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x10001, 0x5fd4595d, 0x9, 0x5445f2ad09ef23b7, r2, 0x9, '\x00', 0x0, r1, 0x1, 0x5, 0x0, 0xc}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xcb, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xa18, 0x3, 0x1b8a, 0x2, r3, 0x7fffffff, '\x00', r4, r2, 0x3, 0x3, 0x3, 0x2}, 0x48) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async, rerun: 64) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/44, 0x2c, 0x0, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000010001000000000009000000121afeff100606128fb9d08900000018300000050000000000000000000000184b0000001862000004000000000000000000010018500000080000000000000000000000950000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x31, &(0x7f0000000340)=""/49, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x2}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x71d19143}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x7d, &(0x7f0000000240)=""/125, 0x41100, 0x22, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xf, 0x1f, 0x1}, 0x10, r7, 0x0, 0x2, &(0x7f0000000580)=[r1, r3, r4], &(0x7f00000005c0)=[{0x1, 0x2, 0x9, 0x5}, {0x4, 0x1, 0x6, 0xb}], 0x10, 0x9}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@ifindex=r6, 0x8, 0x0, 0x7ff, &(0x7f00000006c0)=[0x0], 0x1, 0x0, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0]}, 0x40) 08:37:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xa002a0ffffffff, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r1 = syz_clone(0x4000400, &(0x7f0000000200)="aa8a9f0d5a9fd454cba2c373d254289be8803dabc6d6a07bb17e70a17eec6fd4bc780af606b3d8f914ff4b9cedca3e44206d6bea1f4fcbfae7b13450e52914d93dfe734b06b70c61e19c228121b02d1203b22292cc9bfa38af17643b9baff2dd0c121edd981dcbbf1bf6ab5e31b75a1ff781f5691c7808dda2e23ec3e4af122fd66067e2cde0dd6f8b32c0de96330f64a742857b93397641306bef770c54b8a188", 0xa1, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="11b162c8ace0e10c8a6c63ffffa9edfbbe0740614174ad728421f949a58dd64f4371abb19dc6f409144669e680ba708359b82c72c7fe273ffde95f3124d097d57c2400ef6cbc7961c5b58d88ca7453fb76a6a3c3aa66b18caecf5daded2d11ca69db89d71d671d80c5784bd78cb6aa57a393d2402426450cd7625ef069c84bcbe7ac10e535275381c88005f73518cc") perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x3, 0x3, 0x5, 0x0, 0x5e, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x4204, 0x7d05e077, 0xfffffc00, 0x3, 0x0, 0x401, 0x1, 0x0, 0x9, 0x0, 0x9}, r1, 0x1, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") [ 350.870149][T14306] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 350.878140][T14306] 08:37:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 70) 08:37:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xf011111b000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 351.068521][T14337] FAULT_INJECTION: forcing a failure. [ 351.068521][T14337] name failslab, interval 1, probability 0, space 0, times 0 [ 351.094086][T14337] CPU: 0 PID: 14337 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 351.104260][T14337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 351.114150][T14337] Call Trace: [ 351.117273][T14337] [ 351.120056][T14337] dump_stack_lvl+0x151/0x1b7 [ 351.124565][T14337] ? io_uring_drop_tctx_refs+0x190/0x190 [ 351.130036][T14337] dump_stack+0x15/0x17 [ 351.134025][T14337] should_fail+0x3c6/0x510 [ 351.138314][T14337] __should_failslab+0xa4/0xe0 [ 351.142883][T14337] ? vm_area_dup+0x26/0x230 [ 351.147214][T14337] should_failslab+0x9/0x20 [ 351.151556][T14337] slab_pre_alloc_hook+0x37/0xd0 [ 351.156328][T14337] ? vm_area_dup+0x26/0x230 [ 351.160687][T14337] kmem_cache_alloc+0x44/0x200 [ 351.165268][T14337] vm_area_dup+0x26/0x230 [ 351.169436][T14337] copy_mm+0x9a1/0x13e0 [ 351.173431][T14337] ? copy_signal+0x610/0x610 [ 351.177853][T14337] ? __init_rwsem+0xd6/0x1c0 [ 351.182284][T14337] ? copy_signal+0x4e3/0x610 [ 351.186709][T14337] copy_process+0x1149/0x3290 [ 351.191221][T14337] ? timerqueue_add+0x250/0x270 [ 351.195905][T14337] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 351.200852][T14337] ? enqueue_hrtimer+0xca/0x240 [ 351.205537][T14337] ? __hrtimer_run_queues+0x46b/0xad0 [ 351.210748][T14337] kernel_clone+0x21e/0x9e0 [ 351.215100][T14337] ? create_io_thread+0x1e0/0x1e0 [ 351.219949][T14337] ? clockevents_program_event+0x22f/0x300 [ 351.225596][T14337] __x64_sys_clone+0x23f/0x290 [ 351.230189][T14337] ? __do_sys_vfork+0x130/0x130 [ 351.234877][T14337] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 351.240690][T14337] do_syscall_64+0x3d/0xb0 [ 351.244945][T14337] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 351.250582][T14337] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 351.256315][T14337] RIP: 0033:0x7fd15e9c4da9 [ 351.260569][T14337] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 351.280761][T14337] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 351.288998][T14337] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 351.296897][T14337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 351.304706][T14337] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 08:37:21 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x130, 0x130, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xff, 0x7cbc}}, @struct={0x7, 0x8, 0x0, 0x4, 0x1, 0x1c0, [{0xf, 0x1, 0x40}, {0x6, 0x1}, {0x8, 0x5, 0x6}, {0x7, 0x3, 0xffff4949}, {0x6, 0x0, 0x4}, {0x0, 0x8, 0x1}, {0xf, 0x2, 0xf}, {0x9, 0x1, 0xe179}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x4f, 0x1}, @fwd={0x4}, @const={0x2, 0x0, 0x0, 0xa, 0x1}, @struct={0xc, 0x3, 0x0, 0x4, 0x0, 0x7, [{0x10, 0x1, 0x4872}, {0xe, 0x1}, {0xd, 0x0, 0xad}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x2}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xf, 0x2}, {0xb, 0x4}, {0xd, 0x5}, {0x4, 0x3}, {0x3, 0x2}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000440)=""/163, 0x14c, 0xa3, 0x1, 0x741}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x1, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r3, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair(0xf, 0x1, 0x4, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) sendmsg$inet(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)}, {&(0x7f0000000780)="26dd8df3ea6fe87a52fa8b965ed23930cd71de2321b8e5198393c12dd8ccccf2fe5539bc2291bc3601e8eb18793901b3063165ef1c45f962bc4393db52ed895106397ca32807c171a08e8249376aa8fadf17d72067ba7086478b181896f1a3d8ee4050293013bbc0de71a9e738652a961acaee3965e0319da3ca06c3f887e2fd977560732f513549d599957e5b0d22fe3700c47f70ae56c3db3fa2c9dcb208b9a4814fe6a7c4e0d9be494738d54bd3c60baf3954f0f3366f5124c3e0ba9aa1a3a1c53405bb01e5db2ae720251985fac076b4ba4b40c0d0677066db9ad3110b392f2d748ccd0a8b3ee545271c04", 0xed}, {&(0x7f0000000880)="7e78c586ec6b1d64def6c4551064cf98a70cabf24c4e3d7568cab3e8d0ab89b6b3e1c7c44113237eaca51abc6c0717c3e80799711a420bfd3d3ada9d8a8e70218aaed4980aae3412694efa77519ec684109f75639796779be51472f543f550ad2d7e22e619d2531dba1ad431e7757767eacd3fad888f1dd5acedf167c363e59c04ca5e75183f0318a7cc26dd820b5832061c393bca11a5f6b1686dae48d4b65103d944c33af9d0859ca677b73fa5f85b227ad79979a27b4b1c1712af64661af45cd1a0c5c717fd06054124bd48c40b764709e2a2323d001c2331f237", 0xdc}, {&(0x7f0000000a40)="047353b70eb8cf02e36a0bdff96461634306cbd5b8c9872626f6d1a80453754da60f05b69395a96800a439cb789390b54a5456636abb84058e11dd0e21a382437cb20b0ff79eef142151a8edb6bca644f0f47b24c1472bfcbb53b28e999b1f93bf92d350d69819015c60344f257a13f2cefe0036bcc0697b1d5a2e590e713f9cbd3697432f0d13a6676fa49edef17ce2768aba710c55014da61746b1320421a644d9c9f161666ea9a0686e1bc9339055e3f13e868107d475050193e5a01683bf5e636c0c5581c373613a4443bf9bd125bd8a7f7d6dcafb6a70141fefaf21e7a0d872fa9b3e54e929c3d63430a9a1073f0934adfbd0", 0xf5}], 0x4, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1d}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @loopback}}}], 0xf8}, 0x40) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001000)=@generic={&(0x7f0000000fc0)='./file0\x00', 0x0, 0x30}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r8, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000001100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x92, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 351.312519][T14337] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 351.320331][T14337] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 351.328151][T14337] 08:37:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:21 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) (async, rerun: 64) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x130, 0x130, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xff, 0x7cbc}}, @struct={0x7, 0x8, 0x0, 0x4, 0x1, 0x1c0, [{0xf, 0x1, 0x40}, {0x6, 0x1}, {0x8, 0x5, 0x6}, {0x7, 0x3, 0xffff4949}, {0x6, 0x0, 0x4}, {0x0, 0x8, 0x1}, {0xf, 0x2, 0xf}, {0x9, 0x1, 0xe179}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x4f, 0x1}, @fwd={0x4}, @const={0x2, 0x0, 0x0, 0xa, 0x1}, @struct={0xc, 0x3, 0x0, 0x4, 0x0, 0x7, [{0x10, 0x1, 0x4872}, {0xe, 0x1}, {0xd, 0x0, 0xad}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x2}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xf, 0x2}, {0xb, 0x4}, {0xd, 0x5}, {0x4, 0x3}, {0x3, 0x2}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000440)=""/163, 0x14c, 0xa3, 0x1, 0x741}, 0x20) (rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x1, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r3, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 64) socketpair(0xf, 0x1, 0x4, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) (async) sendmsg$inet(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)}, {&(0x7f0000000780)="26dd8df3ea6fe87a52fa8b965ed23930cd71de2321b8e5198393c12dd8ccccf2fe5539bc2291bc3601e8eb18793901b3063165ef1c45f962bc4393db52ed895106397ca32807c171a08e8249376aa8fadf17d72067ba7086478b181896f1a3d8ee4050293013bbc0de71a9e738652a961acaee3965e0319da3ca06c3f887e2fd977560732f513549d599957e5b0d22fe3700c47f70ae56c3db3fa2c9dcb208b9a4814fe6a7c4e0d9be494738d54bd3c60baf3954f0f3366f5124c3e0ba9aa1a3a1c53405bb01e5db2ae720251985fac076b4ba4b40c0d0677066db9ad3110b392f2d748ccd0a8b3ee545271c04", 0xed}, {&(0x7f0000000880)="7e78c586ec6b1d64def6c4551064cf98a70cabf24c4e3d7568cab3e8d0ab89b6b3e1c7c44113237eaca51abc6c0717c3e80799711a420bfd3d3ada9d8a8e70218aaed4980aae3412694efa77519ec684109f75639796779be51472f543f550ad2d7e22e619d2531dba1ad431e7757767eacd3fad888f1dd5acedf167c363e59c04ca5e75183f0318a7cc26dd820b5832061c393bca11a5f6b1686dae48d4b65103d944c33af9d0859ca677b73fa5f85b227ad79979a27b4b1c1712af64661af45cd1a0c5c717fd06054124bd48c40b764709e2a2323d001c2331f237", 0xdc}, {&(0x7f0000000a40)="047353b70eb8cf02e36a0bdff96461634306cbd5b8c9872626f6d1a80453754da60f05b69395a96800a439cb789390b54a5456636abb84058e11dd0e21a382437cb20b0ff79eef142151a8edb6bca644f0f47b24c1472bfcbb53b28e999b1f93bf92d350d69819015c60344f257a13f2cefe0036bcc0697b1d5a2e590e713f9cbd3697432f0d13a6676fa49edef17ce2768aba710c55014da61746b1320421a644d9c9f161666ea9a0686e1bc9339055e3f13e868107d475050193e5a01683bf5e636c0c5581c373613a4443bf9bd125bd8a7f7d6dcafb6a70141fefaf21e7a0d872fa9b3e54e929c3d63430a9a1073f0934adfbd0", 0xf5}], 0x4, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1d}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @loopback}}}], 0xf8}, 0x40) (async) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001000)=@generic={&(0x7f0000000fc0)='./file0\x00', 0x0, 0x30}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r8, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000001100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x92, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xf0ff1f00000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async, rerun: 64) r1 = syz_clone(0x4000400, &(0x7f0000000200)="aa8a9f0d5a9fd454cba2c373d254289be8803dabc6d6a07bb17e70a17eec6fd4bc780af606b3d8f914ff4b9cedca3e44206d6bea1f4fcbfae7b13450e52914d93dfe734b06b70c61e19c228121b02d1203b22292cc9bfa38af17643b9baff2dd0c121edd981dcbbf1bf6ab5e31b75a1ff781f5691c7808dda2e23ec3e4af122fd66067e2cde0dd6f8b32c0de96330f64a742857b93397641306bef770c54b8a188", 0xa1, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="11b162c8ace0e10c8a6c63ffffa9edfbbe0740614174ad728421f949a58dd64f4371abb19dc6f409144669e680ba708359b82c72c7fe273ffde95f3124d097d57c2400ef6cbc7961c5b58d88ca7453fb76a6a3c3aa66b18caecf5daded2d11ca69db89d71d671d80c5784bd78cb6aa57a393d2402426450cd7625ef069c84bcbe7ac10e535275381c88005f73518cc") perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x3, 0x3, 0x5, 0x0, 0x5e, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x4204, 0x7d05e077, 0xfffffc00, 0x3, 0x0, 0x401, 0x1, 0x0, 0x9, 0x0, 0x9}, r1, 0x1, r0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:21 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x130, 0x130, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xff, 0x7cbc}}, @struct={0x7, 0x8, 0x0, 0x4, 0x1, 0x1c0, [{0xf, 0x1, 0x40}, {0x6, 0x1}, {0x8, 0x5, 0x6}, {0x7, 0x3, 0xffff4949}, {0x6, 0x0, 0x4}, {0x0, 0x8, 0x1}, {0xf, 0x2, 0xf}, {0x9, 0x1, 0xe179}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x4f, 0x1}, @fwd={0x4}, @const={0x2, 0x0, 0x0, 0xa, 0x1}, @struct={0xc, 0x3, 0x0, 0x4, 0x0, 0x7, [{0x10, 0x1, 0x4872}, {0xe, 0x1}, {0xd, 0x0, 0xad}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x2}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xf, 0x2}, {0xb, 0x4}, {0xd, 0x5}, {0x4, 0x3}, {0x3, 0x2}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000440)=""/163, 0x14c, 0xa3, 0x1, 0x741}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x1, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r3, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) socketpair(0xf, 0x1, 0x4, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) (async) sendmsg$inet(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)}, {&(0x7f0000000780)="26dd8df3ea6fe87a52fa8b965ed23930cd71de2321b8e5198393c12dd8ccccf2fe5539bc2291bc3601e8eb18793901b3063165ef1c45f962bc4393db52ed895106397ca32807c171a08e8249376aa8fadf17d72067ba7086478b181896f1a3d8ee4050293013bbc0de71a9e738652a961acaee3965e0319da3ca06c3f887e2fd977560732f513549d599957e5b0d22fe3700c47f70ae56c3db3fa2c9dcb208b9a4814fe6a7c4e0d9be494738d54bd3c60baf3954f0f3366f5124c3e0ba9aa1a3a1c53405bb01e5db2ae720251985fac076b4ba4b40c0d0677066db9ad3110b392f2d748ccd0a8b3ee545271c04", 0xed}, {&(0x7f0000000880)="7e78c586ec6b1d64def6c4551064cf98a70cabf24c4e3d7568cab3e8d0ab89b6b3e1c7c44113237eaca51abc6c0717c3e80799711a420bfd3d3ada9d8a8e70218aaed4980aae3412694efa77519ec684109f75639796779be51472f543f550ad2d7e22e619d2531dba1ad431e7757767eacd3fad888f1dd5acedf167c363e59c04ca5e75183f0318a7cc26dd820b5832061c393bca11a5f6b1686dae48d4b65103d944c33af9d0859ca677b73fa5f85b227ad79979a27b4b1c1712af64661af45cd1a0c5c717fd06054124bd48c40b764709e2a2323d001c2331f237", 0xdc}, {&(0x7f0000000a40)="047353b70eb8cf02e36a0bdff96461634306cbd5b8c9872626f6d1a80453754da60f05b69395a96800a439cb789390b54a5456636abb84058e11dd0e21a382437cb20b0ff79eef142151a8edb6bca644f0f47b24c1472bfcbb53b28e999b1f93bf92d350d69819015c60344f257a13f2cefe0036bcc0697b1d5a2e590e713f9cbd3697432f0d13a6676fa49edef17ce2768aba710c55014da61746b1320421a644d9c9f161666ea9a0686e1bc9339055e3f13e868107d475050193e5a01683bf5e636c0c5581c373613a4443bf9bd125bd8a7f7d6dcafb6a70141fefaf21e7a0d872fa9b3e54e929c3d63430a9a1073f0934adfbd0", 0xf5}], 0x4, &(0x7f0000000d40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1d}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @loopback}}}], 0xf8}, 0x40) (async) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001000)=@generic={&(0x7f0000000fc0)='./file0\x00', 0x0, 0x30}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r8, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000001100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x92, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="181000001800ff0f0000000000000000850000006d000000a60000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x6) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r3, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000680)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000000)=0x4) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @generic={0x3, 0x5, 0x8, 0xfff, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x17d0}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}]}, &(0x7f0000000240)='GPL\x00', 0xffff, 0x2c, &(0x7f0000000280)=""/44, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x5, 0xff}, 0x10, 0x83ab, r2, 0x5, &(0x7f0000000400)=[r5, 0x1], &(0x7f0000000600)=[{0x2, 0x3, 0x8, 0x6}, {0x3, 0x1, 0xa, 0x8}, {0x4, 0x3, 0x7, 0xa}, {0x4, 0x3, 0xb, 0x5}, {0x2, 0x3, 0xc, 0x2}], 0x10, 0x1}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x100000000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:21 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000030000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000047010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000951fd7ec"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='jbd2_handle_stats\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x8d, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x9, &(0x7f0000000180)=@framed={{}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0x0, 0x2, 0xd, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x601adaa5, 0xea, &(0x7f0000000440)=""/234, 0x0, 0x75, '\x00', r7, 0xa, r6, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xf, 0x1, 0xfffffffe}, 0x10, r8, 0xffffffffffffffff, 0x7, &(0x7f0000000880)=[r6], &(0x7f00000008c0)=[{0x3, 0x5, 0x8, 0x3}, {0x3, 0x5, 0x9, 0xc}, {0x0, 0x5, 0x3, 0x8}, {0x1, 0x4, 0xa, 0x7}, {0x5, 0x5, 0x5, 0x2}, {0x2, 0x3, 0x8, 0xa}, {0x5, 0x3, 0xf, 0x1}], 0x10, 0x80000001}, 0x90) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0x20, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xcb}, [@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd0a9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x101}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x9, 0x5, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x14, &(0x7f0000000100)=""/20, 0x41000, 0x22, '\x00', 0x0, 0x30, r4, 0x8, &(0x7f0000000240)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3, 0x1}, 0x10, r8, r0, 0x8, &(0x7f0000000540)=[r9, r10, r11], &(0x7f0000000580)=[{0x4, 0x1, 0x0, 0x86e784c25d2db8ce}, {0x3, 0x4, 0x7}, {0x0, 0x2, 0x1, 0xc}, {0x5, 0x2, 0x2, 0x4}, {0x5, 0x5, 0xb, 0xa}, {0x2, 0x1, 0x5}, {0x0, 0x4, 0x9, 0xb}, {0x4, 0x2, 0xb, 0x7}], 0x10, 0x9}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="181000001800ff0f0000000000000000850000006d000000a60000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="181000001800ff0f0000000000000000850000006d000000a60000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) (async) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x6) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r3, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000680)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000000)=0x4) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @generic={0x3, 0x5, 0x8, 0xfff, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x17d0}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}]}, &(0x7f0000000240)='GPL\x00', 0xffff, 0x2c, &(0x7f0000000280)=""/44, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x5, 0xff}, 0x10, 0x83ab, r2, 0x5, &(0x7f0000000400)=[r5, 0x1], &(0x7f0000000600)=[{0x2, 0x3, 0x8, 0x6}, {0x3, 0x1, 0xa, 0x8}, {0x4, 0x3, 0x7, 0xa}, {0x4, 0x3, 0xb, 0x5}, {0x2, 0x3, 0xc, 0x2}], 0x10, 0x1}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r1 = syz_clone(0x4000400, &(0x7f0000000200)="aa8a9f0d5a9fd454cba2c373d254289be8803dabc6d6a07bb17e70a17eec6fd4bc780af606b3d8f914ff4b9cedca3e44206d6bea1f4fcbfae7b13450e52914d93dfe734b06b70c61e19c228121b02d1203b22292cc9bfa38af17643b9baff2dd0c121edd981dcbbf1bf6ab5e31b75a1ff781f5691c7808dda2e23ec3e4af122fd66067e2cde0dd6f8b32c0de96330f64a742857b93397641306bef770c54b8a188", 0xa1, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="11b162c8ace0e10c8a6c63ffffa9edfbbe0740614174ad728421f949a58dd64f4371abb19dc6f409144669e680ba708359b82c72c7fe273ffde95f3124d097d57c2400ef6cbc7961c5b58d88ca7453fb76a6a3c3aa66b18caecf5daded2d11ca69db89d71d671d80c5784bd78cb6aa57a393d2402426450cd7625ef069c84bcbe7ac10e535275381c88005f73518cc") perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x3, 0x3, 0x5, 0x0, 0x5e, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x4204, 0x7d05e077, 0xfffffc00, 0x3, 0x0, 0x401, 0x1, 0x0, 0x9, 0x0, 0x9}, r1, 0x1, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) syz_clone(0x4000400, &(0x7f0000000200)="aa8a9f0d5a9fd454cba2c373d254289be8803dabc6d6a07bb17e70a17eec6fd4bc780af606b3d8f914ff4b9cedca3e44206d6bea1f4fcbfae7b13450e52914d93dfe734b06b70c61e19c228121b02d1203b22292cc9bfa38af17643b9baff2dd0c121edd981dcbbf1bf6ab5e31b75a1ff781f5691c7808dda2e23ec3e4af122fd66067e2cde0dd6f8b32c0de96330f64a742857b93397641306bef770c54b8a188", 0xa1, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000400)="11b162c8ace0e10c8a6c63ffffa9edfbbe0740614174ad728421f949a58dd64f4371abb19dc6f409144669e680ba708359b82c72c7fe273ffde95f3124d097d57c2400ef6cbc7961c5b58d88ca7453fb76a6a3c3aa66b18caecf5daded2d11ca69db89d71d671d80c5784bd78cb6aa57a393d2402426450cd7625ef069c84bcbe7ac10e535275381c88005f73518cc") (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x3, 0x3, 0x5, 0x0, 0x5e, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x4204, 0x7d05e077, 0xfffffc00, 0x3, 0x0, 0x401, 0x1, 0x0, 0x9, 0x0, 0x9}, r1, 0x1, r0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) 08:37:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000030000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000047010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000951fd7ec"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='jbd2_handle_stats\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x8d, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x9, &(0x7f0000000180)=@framed={{}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0x0, 0x2, 0xd, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x601adaa5, 0xea, &(0x7f0000000440)=""/234, 0x0, 0x75, '\x00', r7, 0xa, r6, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xf, 0x1, 0xfffffffe}, 0x10, r8, 0xffffffffffffffff, 0x7, &(0x7f0000000880)=[r6], &(0x7f00000008c0)=[{0x3, 0x5, 0x8, 0x3}, {0x3, 0x5, 0x9, 0xc}, {0x0, 0x5, 0x3, 0x8}, {0x1, 0x4, 0xa, 0x7}, {0x5, 0x5, 0x5, 0x2}, {0x2, 0x3, 0x8, 0xa}, {0x5, 0x3, 0xf, 0x1}], 0x10, 0x80000001}, 0x90) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0x20, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xcb}, [@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd0a9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x101}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x9, 0x5, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x14, &(0x7f0000000100)=""/20, 0x41000, 0x22, '\x00', 0x0, 0x30, r4, 0x8, &(0x7f0000000240)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3, 0x1}, 0x10, r8, r0, 0x8, &(0x7f0000000540)=[r9, r10, r11], &(0x7f0000000580)=[{0x4, 0x1, 0x0, 0x86e784c25d2db8ce}, {0x3, 0x4, 0x7}, {0x0, 0x2, 0x1, 0xc}, {0x5, 0x2, 0x2, 0x4}, {0x5, 0x5, 0xb, 0xa}, {0x2, 0x1, 0x5}, {0x0, 0x4, 0x9, 0xb}, {0x4, 0x2, 0xb, 0x7}], 0x10, 0x9}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000030000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000047010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000951fd7ec"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='jbd2_handle_stats\x00', r5}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x8d, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x9, &(0x7f0000000180)=@framed={{}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @alu={0x7, 0x0, 0x0, 0x2, 0xd, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x601adaa5, 0xea, &(0x7f0000000440)=""/234, 0x0, 0x75, '\x00', r7, 0xa, r6, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xf, 0x1, 0xfffffffe}, 0x10, r8, 0xffffffffffffffff, 0x7, &(0x7f0000000880)=[r6], &(0x7f00000008c0)=[{0x3, 0x5, 0x8, 0x3}, {0x3, 0x5, 0x9, 0xc}, {0x0, 0x5, 0x3, 0x8}, {0x1, 0x4, 0xa, 0x7}, {0x5, 0x5, 0x5, 0x2}, {0x2, 0x3, 0x8, 0xa}, {0x5, 0x3, 0xf, 0x1}], 0x10, 0x80000001}, 0x90) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0x20, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xcb}, [@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd0a9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x101}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x9, 0x5, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x14, &(0x7f0000000100)=""/20, 0x41000, 0x22, '\x00', 0x0, 0x30, r4, 0x8, &(0x7f0000000240)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x3, 0x1}, 0x10, r8, r0, 0x8, &(0x7f0000000540)=[r9, r10, r11], &(0x7f0000000580)=[{0x4, 0x1, 0x0, 0x86e784c25d2db8ce}, {0x3, 0x4, 0x7}, {0x0, 0x2, 0x1, 0xc}, {0x5, 0x2, 0x2, 0x4}, {0x5, 0x5, 0xb, 0xa}, {0x2, 0x1, 0x5}, {0x0, 0x4, 0x9, 0xb}, {0x4, 0x2, 0xb, 0x7}], 0x10, 0x9}, 0x90) (async, rerun: 64) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (rerun: 64) 08:37:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="181000001800ff0f0000000000000000850000006d000000a60000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x6) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r3, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000680)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000680)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000000)=0x4) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000000)=0x4) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @generic={0x3, 0x5, 0x8, 0xfff, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x17d0}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}]}, &(0x7f0000000240)='GPL\x00', 0xffff, 0x2c, &(0x7f0000000280)=""/44, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x5, 0xff}, 0x10, 0x83ab, r2, 0x5, &(0x7f0000000400)=[r5, 0x1], &(0x7f0000000600)=[{0x2, 0x3, 0x8, 0x6}, {0x3, 0x1, 0xa, 0x8}, {0x4, 0x3, 0x7, 0xa}, {0x4, 0x3, 0xb, 0x5}, {0x2, 0x3, 0xc, 0x2}], 0x10, 0x1}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x18200) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x200000000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socketpair(0x11, 0x4, 0x3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 71) 08:37:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socketpair(0x11, 0x4, 0x3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 351.908990][T14404] FAULT_INJECTION: forcing a failure. [ 351.908990][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 351.948908][T14404] CPU: 1 PID: 14404 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 351.959081][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 351.968975][T14404] Call Trace: [ 351.972095][T14404] [ 351.974874][T14404] dump_stack_lvl+0x151/0x1b7 [ 351.979392][T14404] ? io_uring_drop_tctx_refs+0x190/0x190 [ 351.984860][T14404] ? irqentry_exit+0x30/0x40 [ 351.989282][T14404] dump_stack+0x15/0x17 [ 351.993277][T14404] should_fail+0x3c6/0x510 [ 351.997537][T14404] __should_failslab+0xa4/0xe0 [ 352.002127][T14404] ? vm_area_dup+0x26/0x230 [ 352.006464][T14404] should_failslab+0x9/0x20 [ 352.010802][T14404] slab_pre_alloc_hook+0x37/0xd0 [ 352.015580][T14404] ? vm_area_dup+0x26/0x230 [ 352.019916][T14404] kmem_cache_alloc+0x44/0x200 [ 352.024524][T14404] vm_area_dup+0x26/0x230 [ 352.028683][T14404] copy_mm+0x9a1/0x13e0 [ 352.032689][T14404] ? copy_signal+0x610/0x610 [ 352.037103][T14404] ? __init_rwsem+0xd6/0x1c0 [ 352.041532][T14404] ? copy_signal+0x4e3/0x610 [ 352.045958][T14404] copy_process+0x1149/0x3290 [ 352.050473][T14404] ? timerqueue_add+0x250/0x270 [ 352.055330][T14404] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 352.060278][T14404] ? enqueue_hrtimer+0xca/0x240 [ 352.064964][T14404] ? __hrtimer_run_queues+0x46b/0xad0 [ 352.070172][T14404] kernel_clone+0x21e/0x9e0 [ 352.074514][T14404] ? irqentry_exit+0x30/0x40 [ 352.078940][T14404] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 352.084578][T14404] ? create_io_thread+0x1e0/0x1e0 [ 352.089453][T14404] __x64_sys_clone+0x23f/0x290 [ 352.094041][T14404] ? __do_sys_vfork+0x130/0x130 [ 352.098729][T14404] ? debug_smp_processor_id+0x17/0x20 [ 352.104020][T14404] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 352.109927][T14404] ? exit_to_user_mode_prepare+0x39/0xa0 [ 352.115477][T14404] do_syscall_64+0x3d/0xb0 [ 352.119730][T14404] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 352.125372][T14404] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 352.131101][T14404] RIP: 0033:0x7fd15e9c4da9 [ 352.135360][T14404] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 08:37:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x700000000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 352.154793][T14404] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 352.163038][T14404] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 352.170847][T14404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 352.178658][T14404] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 352.186517][T14404] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 352.194368][T14404] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 352.202189][T14404] 08:37:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x800, 0x8}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000a40)="9d45ed5036e82bb7dbf4aeaac8325737bef2c3686fe4fed2f5143a9d66d9b1a3ead43124cf2a597466ce404c37a702276ed31aa0e8500bee1ade35c60bdf992bd094f3da4e381050cbab0598ca2dad144ebd04a11d3ab123a13a1c688af35485ecbb1327390a487893329e31b2a10e6b0783cb753d73d9b3fd50efb7821ca32633ec571bad0c8647a2166d5945e464bd1a6ac9f973ec5749133bca38007c48e6290bce86f84f8f8704ecaa33d119460e3b136dacd6f2929e38d59d5835b8c09dab59f86385f7c3a117873056aeaeb57b5741aee9e8be3a3faff6223ef0da8295b696e5f5c12216fb6bbab782eec08a10a5abf364bfdb59b25391cad44dacab77d63bcb0572af6789eddf4c504505219c621e679e7e48ecded96dc149a500e26e9cf98d725a4cf011f1d2ad576925f5a74f4805e97fee22da6ad0ebb9551549e46631b7c9b217266c56fcac15a37a6bcbecae2b26e9b3e052d6473f3f0f0c5e1903c5c9595abec20eb3b3ec7e3136d436927728772738b435745239df93f315bcdd8ca4c5bfe300b00241c29a681fe2972f4733c1022ec7f6cbfbce9acc0de38bfc1753292a97bdee1f9060cb276d38c247eec05c0ec3c3e2827a924df77b7ff79be9e3cb5ac320a368a1b127305320de1d70d2443b12ae6df9ba1b0397d2d4fa872ea40dda5187860a96a232242501d6177e16ebedf73be2183c4d6e6c1fa9639f767b3986d8e14747e01b4e82072b02da9f9b211e8927e060a5b9a63a1e99ef78f8de89f13dbb373941be201bbc46d6d5a54bdbccdeadb4c2c0e874cd7a7f04ade8c89c22c4d6c985ee529d7d1ab735cb428f8df33e92bbb2ee355055a3ba0911d9ff620f156abc4784f2077266431c0bc62e393d5991b822ed505258e2dabe0ac39bf7a180ad1a04b49e7087951b838ff82c8c15cad11a8f3807ce7a014bb22c232181f9127f93a2d09398c77922324901b97163dcbb5f293bf9eabf7cf2257e5a16f966563b571421ac45ef06e6877a675f213e33771df457583343d37953ca748b7f51c15a5084661361e7fb90ef65512817fa319b9ac2d5cfa2af6c0b2ae1e5040f3a7d7e40cfc36f1e88b22ee4770d23512c1876191de539510742a5d75cd3032119e22a3e6791fc6754f09af03127e2c7482c7d6a2d5c7faefa9e51fc6dbb9b0dfee2da186e7943d735588a25afa14d88777b77295b50c2a04928928d709747023c5ac87f9bff3e7b55763f1d2878787eabfbf3442908ce970854d4df16983988862e6a838bd044ba774d8a290610ad1be6c45b17ebf06df386d17a81b447c1dfa43c3727173b4daa49e6cd3760574a0a35da6555dbe110a3a4259325f8125b133026ea6f1215ba2b2194b3849ca6d23d321b8cb0a94d003f3804c2c4131f2c1e043fe47a5fb6f2c153256aa99afe358eae18b8254c5200e06ecb878d06b97a52afb720ba2b22a1f710e72f5219a24212d2fe5f00bb6210679a08a9c9ce5bd87d154cbcdfbbce0c69a42720c2472e173e33c75024f98394933a29eb221ed634bc18cfb28701d08fa3d4fb74687a84a6890439c5f255bce8aff7debb2a9c2adad36059c3be09769f45a8752b6c2d0cb8668b633b282554a5799aee66b816060269bb66332d85e729ea534e2baa856174056633e32c4473451234f7513712cfadcfe0bd8de1053e8dea0e3d0645c343d4b51d36f7ea164d8ba24d04efdf115fb95a1f9f97acdacde98209e7429eec264c996dc1de0d5c6368120efb52bd48389e73bedf35916548be88d5548751bd40ab41e9d65a73b266846dc29ed796ccbc802fa02dac5af6dfeac85991fdd08fc02ade2e6b174af5240d6073020dadad309ba8690e56742267a7006d818f24302d7c17b18d6ab1371302503c1d7beb37d3ae68ff8e17d48a0de47c8fca18517347ed2eeeb369745dd1733e10e026554e7f93e006827995b5c5db716225c33337bf7c06ecd773e0a443c8a6874d4c873f302dd248b6a2a3ba21bcf96a34df98dff8cd4a9539d1618905962388a54b9865216f72e8404c52a6874b7a6abe1c01d85f57254b57e6e831c8ded713a0ca77dc0b451110e6b692e954c9e1198d21175789de645613e4c1b5a964f1d6ddc7583726afd2c8d84569dda11ddf60982559cef554853819f62181d23c44594fd63c997e1f507d20fe72afff11cd5490d638ee17c7b50a0683873b06838fededb6f5e3ead45a0419da2960b0502ef42786aa547f6dcec4f5be00c223a7e0042f46a3435c4c80579507c9672ad55576a7c715ea6c615c81b7b463268bed534717581f0aee999de60f6d9597fec883253f3240f7909266df668334f7c62c75790cee928e0f3d9253a8b72eafb0ac6ccea80f94b5576e619998da9b264fb5f6225557fe6e14b5e61947c0d23118a96a1ffc0ec61c0caa73acad33a10e8e37435926e8b92bb233b87e0e16f05fd00d864c3e0df7839572d1754c0edbe78ece63d07f45381e59f29aca894069a9de93b84001884db9ab2b1506ab0589dd23b351d7b2cf38297bc53442c5fafc5f0ebd4b815f949a806e343d86750a14c03ba25fd1436fe798a771e755a1b25e5425888c772f8ba31b3083411ce326368dc8c25e2a47e4cfe3f2f32caefa86244880ab7c348c8103e3ef9e3556b209b930ec9898f34d3e94d26a9c028a2e12aa43115347e444e8e7df35ccc809fd5963b9a55f3c8533ede0719339fb7435daa69c9ec699f709301fc00a27ee1fbd59ef42b101e88a4994466763bf6ef0b16d65a90bcb45c13aa7ca455c43a49a82bc1ea3a556ba4b46525c45afedb1f62643e866eaff99681c591f78a8b91f90f1efba33277795d399c54c28b167bb8817f0c9fda3883898b0182530eca388d39beaca6f3f021b5e8c9aed6e281e135652feab11299d1e10f4b3a89780a0108b29ae2cc43de5d1eb4cd671a5c67f45233c08f469891dbcecf35bc771760bc7fa39626707b9165f693e88c2c9ca024b19614d04d8aaa823f74fa1b3c437782b45a51b08f684c504cb0ac81b82023f1b555424b8b941baec28c9862cab9920a7080db54db1c6a041349a3acbd2b390d0e1e327b9130ad354630cdd4160df62fdf133359cc9447fcac93dac737c0c8b7e842687c11917067790515f7eb3c8c04126a41493f1965e135c195ab1b8dff929b30717541c6c287cfa7e874aedd816cc17795b3aaf926079a657afe82fb63a0cc848209e6bdf94453de32d7ba49713015463b31718b299aa8eefae8639e6d2bcd0936e1ce319aa21186c52b6fa199ccbc18af40c3a486cf644f8addf5acb391f1ea11a0efcd2c43210f9445a071898f4923218ef8337eded3c322b79206410d6513ba30b459b715761f28b426ef5e009f71eeb2b278bfc7fd5c688ca2e896bbbf140a17a17b4d0466460a44989b640c5916069e4f35ca08c2f98b11ed31d807549ba6c0a733a521771bf3e56fb56f5adb4081ab481d669fe9b48dcc034540b10f778577d1d75c1b4574b4090621a41e2308de0b7aeb2affac5cee531e850cb4a6f384f58a444dd4258440139e784a702270d6bd1f97ca8aeb0e75ef8de27d38a01f21ff8d9752c5782d67670f357a45ac92238634f6cc81e8ed22a94de630603b2c1c95c22e3f75ae535baf3e27c8a6c3f8cb212c23ad3f5686bc99866e7ca92f204725af739e2d5139e18268714eaca110e5b4d35746798ccd6466c0b6fd3200c82fb15920b70859d54575c66c4ece3723c06134b47b7cfe3fbe0fa6a8d08375bf5cafc54c4a90c73886e1f4bcf9af6e49f6c66b8fc86bb933ad24a0f09fc63029955d26e10188d808b5f2294dfe57aafac2274c3899abc56f9810820fea20e0f010df25e2af9604d3cfba0f8ac8051b513804e02e2798cbe1f66c293a236973755469af8689ed8c34bfb91ca09f8d3582586001f458611dd9210d3ed775589e64ec67fdccdd00bbb8e28bfd84125c4be368ee93c5840f6942f4af37d7ed6298051e3527a55e4586fee51de5d9ea52ca8c754baf280f754733fe773d2dca63e7457e1ce7eeab7cd73f0b6b6707cb3e10c4d3f22ed57b2882dc28748dcc220b21332acc62dc9b9a57bf951ea031f702784c09913c82cb6fe754cda91423881bc77e058e92cf669d03c35b2da130758cac150020445c1baee052167c9ea84efb998fead69387c2f96b4d795d963a7fe8e951a88d8095bfe54bfab048087a5b536b653b8670f35e1fbaee23bf0fd0108992dfa2d347e5ba9cf26d5062a2a63687191578d9703d229deed6368f079d367c7f8a03a39f699f5ce71756aceae4b7e418ec42ff93b725cf8d01be80c29e2240a920103485545cb6c54974f5d13e3511d3c16b4ac5efd0c9742d4bfad0dbe6106b6610891042a4fa927551f392f28e91564f720f9ffd0c24f987479cef77adfce4be029da4b279967b4d2e895de4307b4d32c45199719ae355fa4337a9f811cead54b95fb33f5e74877a68e304e092222e84d1dbbf7c0869b332f3fbd0dcda5c14929f21b23ffebd23b05ce19c1dd994acf34aaf93e2897ce8d1d47efddd54f00c7f44ce3dd9f15fb6dfb43a04836c80a1090301ae37ae09ca816086a4473892772bc6603afc605c5f78edca67d0538648ff8f781f928681d5895f551fac45a4c11fdbd4694898ebc19c0ae78f9753669604e72a84a0f267559d098ffae93c62eedb038f383d52eb3f15224090acbf1330b9ff362724fa519a94f38470a93340730bd64b78fd88acbb6a997534f4356985cfdfb00faa20313f522e6ea4327fc413aeaf83f3e85e1a0e1a84867454d03c51d115f05a71b3355f5dd91c0d60308c6eb62158172d7104265a997b0f975aa9d3bb89d0f51174e5736c885ebcff336cbea3d07103cee14fadb1aa21199b40b1a192af87105dbcc5fc2f2bb3e9675bfa6980e569751f1b1c491146524b2fd88623273bb79ad964491f5bfe547bfb95e4ccbaaa4f847997856e883a74ba3c62f0008cba692f9199641fbaa69efadd6d0fab491fc3c43b4176d3fc05ee0d6e97ef24bbe66f6c3c4204393ae99121ff804cc84e9267c034964e5215e511fa464ca7c81a518472864d1dd952d43210a13651f2e38d372bd1c1fcceeb07a63aa7205c65ebe54688ab8b6782f1f991026b70a4f389637f29aef70748860f19535c1688a066ae334b19b7db2bccab571496a5796c6205ab44b738887ed453ba5a4282045dc9f0f737f7f6e52172557a46f5a7c61fe434aa13aa0c176ac5602b414b9099ac30a3606e0ff3dac6f55e99a8b788356fa420543989f438132ab8799829d2a93d2dd28eeb1ff261068c48f05a5cfe85daec86eee6f95dfbc3784f03351e2dc4799e8669cb9cd35ac852741b5184987792afbe6ca92e5ebd246c9c32acd47219f2f5e8b3a65db82a48b86b03cb626ea45e797a24395d8bf8e3ed74ee249e702155db5040af6e4e50cfc29c995932d8b3c39e8a9c80e2d29c96c71d4c0274377f41725bacd9a253a7761e402742705bf16c31c04e8f21875cf38de9793865d206b9eaa3e8101c065c944215f9f29fbf0563b3e5d6609e04f6f05e0d3c03d3b9e6335ba82cd04f08c31d7258c4539d92f500340579e4c094b25fbae78a6e7c6f2d85efa4445433db4b798934045db10fa4485bc49758cc29f1f55b7bc2fe88f3ea0685948ad5fccf5395fc46c5e9d8b6315f5e75f9ac5c1428bbaff74887a4f6d23164bd7c006beec1585bc6fc02687adc684a0f8a28bcdc810c72839da6a2463a0a3236deca55f45aec4020759a08cedb9ae85f6dc2b169f13b8f1aa62", &(0x7f00000000c0)=""/137}, 0x20) 08:37:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) socketpair(0x11, 0x4, 0x3, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x800000000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 72) [ 352.463912][T14437] FAULT_INJECTION: forcing a failure. [ 352.463912][T14437] name failslab, interval 1, probability 0, space 0, times 0 [ 352.484273][T14437] CPU: 0 PID: 14437 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 352.494448][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 352.504345][T14437] Call Trace: [ 352.507462][T14437] [ 352.510328][T14437] dump_stack_lvl+0x151/0x1b7 [ 352.514845][T14437] ? io_uring_drop_tctx_refs+0x190/0x190 [ 352.520309][T14437] dump_stack+0x15/0x17 [ 352.524385][T14437] should_fail+0x3c6/0x510 [ 352.528642][T14437] __should_failslab+0xa4/0xe0 [ 352.533240][T14437] ? vm_area_dup+0x26/0x230 [ 352.537578][T14437] should_failslab+0x9/0x20 [ 352.541915][T14437] slab_pre_alloc_hook+0x37/0xd0 [ 352.546694][T14437] ? vm_area_dup+0x26/0x230 [ 352.551027][T14437] kmem_cache_alloc+0x44/0x200 [ 352.555630][T14437] vm_area_dup+0x26/0x230 [ 352.559793][T14437] copy_mm+0x9a1/0x13e0 [ 352.563786][T14437] ? copy_signal+0x610/0x610 [ 352.568211][T14437] ? __init_rwsem+0xd6/0x1c0 [ 352.572636][T14437] ? copy_signal+0x4e3/0x610 [ 352.577158][T14437] copy_process+0x1149/0x3290 [ 352.581673][T14437] ? timerqueue_add+0x250/0x270 [ 352.586358][T14437] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 352.591294][T14437] ? enqueue_hrtimer+0xca/0x240 [ 352.595984][T14437] ? __hrtimer_run_queues+0x46b/0xad0 [ 352.601191][T14437] kernel_clone+0x21e/0x9e0 [ 352.605532][T14437] ? irqentry_exit+0x30/0x40 [ 352.609954][T14437] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 352.615603][T14437] ? create_io_thread+0x1e0/0x1e0 [ 352.620462][T14437] __x64_sys_clone+0x23f/0x290 [ 352.625057][T14437] ? __do_sys_vfork+0x130/0x130 [ 352.629753][T14437] ? debug_smp_processor_id+0x17/0x20 [ 352.634952][T14437] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 352.640854][T14437] ? exit_to_user_mode_prepare+0x39/0xa0 [ 352.646340][T14437] do_syscall_64+0x3d/0xb0 [ 352.650580][T14437] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 352.656214][T14437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 352.661945][T14437] RIP: 0033:0x7fd15e9c4da9 [ 352.666289][T14437] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 352.685814][T14437] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 352.694146][T14437] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 352.701957][T14437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 08:37:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x900000000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 352.709767][T14437] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 352.717581][T14437] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 352.725387][T14437] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 352.733206][T14437] 08:37:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x24, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x20, 0x10}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3ff, 0x3, 0x1, 0x800, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x5}, {0x8, 0x2}, {0x10, 0x4}, {0x0, 0x2}, {0xd}, {0x3, 0x5}]}, @func={0x10, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x5f, 0x61, 0x0]}}, &(0x7f0000000480)=""/110, 0x69, 0x6e, 0x1, 0x20}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000001000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b700008500000083000000bf0900e00000000055090100000000009500000000000000181100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x32, r5, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xd, 0x3, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000005c0), &(0x7f0000000640)=[{0x1, 0x1, 0x6, 0x2}, {0x5, 0x2, 0x10, 0x9}, {0x2, 0x1, 0x0, 0x8}, {0x5, 0x3, 0xf, 0x8}, {0x3, 0x1, 0xb, 0x8}, {0x4, 0x4, 0x7, 0x9}], 0x10, 0x6a386026}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0xffffffff, 0x4, 0x5660, 0x88, r2, 0x3fff8, '\x00', r4, r5, 0x5, 0x1, 0x4}, 0x48) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f00000005c0)='oom_score_adj_update\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000d40)={&(0x7f0000000bc0)=""/207, 0xcf, 0x0, &(0x7f0000000cc0)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xa, 0x15, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xb5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='syzkaller\x00', 0xcb6, 0x0, 0x0, 0x41000, 0x20, '\x00', r4, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xe, 0x0, 0xffff}, 0x10, r9, r6, 0x3, &(0x7f0000000dc0)=[r3, r7, r7], &(0x7f0000000e00)=[{0x4, 0x3, 0xb, 0x7}, {0x5, 0x3, 0x4, 0x6}, {0x1, 0x1, 0x8, 0x4}], 0x10, 0x2}, 0x90) 08:37:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 73) 08:37:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x24, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async, rerun: 32) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x20, 0x10}, 0xc) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3ff, 0x3, 0x1, 0x800, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x6}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x5}, {0x8, 0x2}, {0x10, 0x4}, {0x0, 0x2}, {0xd}, {0x3, 0x5}]}, @func={0x10, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x5f, 0x61, 0x0]}}, &(0x7f0000000480)=""/110, 0x69, 0x6e, 0x1, 0x20}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000001000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b700008500000083000000bf0900e00000000055090100000000009500000000000000181100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x32, r5, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xd, 0x3, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000005c0), &(0x7f0000000640)=[{0x1, 0x1, 0x6, 0x2}, {0x5, 0x2, 0x10, 0x9}, {0x2, 0x1, 0x0, 0x8}, {0x5, 0x3, 0xf, 0x8}, {0x3, 0x1, 0xb, 0x8}, {0x4, 0x4, 0x7, 0x9}], 0x10, 0x6a386026}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0xffffffff, 0x4, 0x5660, 0x88, r2, 0x3fff8, '\x00', r4, r5, 0x5, 0x1, 0x4}, 0x48) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f00000005c0)='oom_score_adj_update\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000d40)={&(0x7f0000000bc0)=""/207, 0xcf, 0x0, &(0x7f0000000cc0)=""/68, 0x44}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xa, 0x15, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xb5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='syzkaller\x00', 0xcb6, 0x0, 0x0, 0x41000, 0x20, '\x00', r4, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xe, 0x0, 0xffff}, 0x10, r9, r6, 0x3, &(0x7f0000000dc0)=[r3, r7, r7], &(0x7f0000000e00)=[{0x4, 0x3, 0xb, 0x7}, {0x5, 0x3, 0x4, 0x6}, {0x1, 0x1, 0x8, 0x4}], 0x10, 0x2}, 0x90) [ 352.877282][T14445] FAULT_INJECTION: forcing a failure. [ 352.877282][T14445] name failslab, interval 1, probability 0, space 0, times 0 [ 352.895494][T14445] CPU: 1 PID: 14445 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 352.905674][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 352.915567][T14445] Call Trace: [ 352.918688][T14445] [ 352.921469][T14445] dump_stack_lvl+0x151/0x1b7 [ 352.925978][T14445] ? io_uring_drop_tctx_refs+0x190/0x190 [ 352.931451][T14445] dump_stack+0x15/0x17 [ 352.935440][T14445] should_fail+0x3c6/0x510 [ 352.939694][T14445] __should_failslab+0xa4/0xe0 [ 352.944294][T14445] ? vm_area_dup+0x26/0x230 [ 352.948642][T14445] should_failslab+0x9/0x20 [ 352.952980][T14445] slab_pre_alloc_hook+0x37/0xd0 [ 352.957746][T14445] ? vm_area_dup+0x26/0x230 [ 352.962086][T14445] kmem_cache_alloc+0x44/0x200 [ 352.966684][T14445] vm_area_dup+0x26/0x230 [ 352.970858][T14445] copy_mm+0x9a1/0x13e0 [ 352.974841][T14445] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 352.980496][T14445] ? copy_signal+0x610/0x610 [ 352.984913][T14445] ? __init_rwsem+0xd6/0x1c0 [ 352.989344][T14445] ? copy_signal+0x4e3/0x610 [ 352.993768][T14445] copy_process+0x1149/0x3290 [ 352.998300][T14445] ? proc_fail_nth_write+0x20b/0x290 [ 353.003410][T14445] ? vfs_write+0x278/0x1110 [ 353.007737][T14445] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 353.012685][T14445] ? vfs_write+0x9ec/0x1110 [ 353.017023][T14445] ? __hrtimer_run_queues+0x46b/0xad0 [ 353.022234][T14445] kernel_clone+0x21e/0x9e0 [ 353.026582][T14445] ? create_io_thread+0x1e0/0x1e0 [ 353.031434][T14445] ? mutex_unlock+0xb2/0x260 [ 353.035861][T14445] ? __mutex_lock_slowpath+0x10/0x10 [ 353.040982][T14445] __x64_sys_clone+0x23f/0x290 [ 353.045584][T14445] ? __do_sys_vfork+0x130/0x130 [ 353.050266][T14445] ? ksys_write+0x260/0x2c0 [ 353.054606][T14445] ? debug_smp_processor_id+0x17/0x20 [ 353.059843][T14445] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 353.065888][T14445] ? exit_to_user_mode_prepare+0x39/0xa0 [ 353.071487][T14445] do_syscall_64+0x3d/0xb0 [ 353.075721][T14445] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 353.081362][T14445] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 353.087092][T14445] RIP: 0033:0x7fd15e9c4da9 [ 353.091351][T14445] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 353.110784][T14445] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 353.119029][T14445] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 08:37:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x1100000000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x24, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x20, 0x10}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3ff, 0x3, 0x1, 0x800, r2, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x5}, {0x8, 0x2}, {0x10, 0x4}, {0x0, 0x2}, {0xd}, {0x3, 0x5}]}, @func={0x10, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x5f, 0x61, 0x0]}}, &(0x7f0000000480)=""/110, 0x69, 0x6e, 0x1, 0x20}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000001000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b700008500000083000000bf0900e00000000055090100000000009500000000000000181100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x32, r5, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xd, 0x3, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f00000005c0), &(0x7f0000000640)=[{0x1, 0x1, 0x6, 0x2}, {0x5, 0x2, 0x10, 0x9}, {0x2, 0x1, 0x0, 0x8}, {0x5, 0x3, 0xf, 0x8}, {0x3, 0x1, 0xb, 0x8}, {0x4, 0x4, 0x7, 0x9}], 0x10, 0x6a386026}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0xffffffff, 0x4, 0x5660, 0x88, r2, 0x3fff8, '\x00', r4, r5, 0x5, 0x1, 0x4}, 0x48) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f00000005c0)='oom_score_adj_update\x00', r6}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000d40)={&(0x7f0000000bc0)=""/207, 0xcf, 0x0, &(0x7f0000000cc0)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xa, 0x15, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xb5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='syzkaller\x00', 0xcb6, 0x0, 0x0, 0x41000, 0x20, '\x00', r4, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xe, 0x0, 0xffff}, 0x10, r9, r6, 0x3, &(0x7f0000000dc0)=[r3, r7, r7], &(0x7f0000000e00)=[{0x4, 0x3, 0xb, 0x7}, {0x5, 0x3, 0x4, 0x6}, {0x1, 0x1, 0x8, 0x4}], 0x10, 0x2}, 0x90) [ 353.126836][T14445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 353.134648][T14445] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 353.142460][T14445] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 353.150278][T14445] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 353.158090][T14445] 08:37:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000000000000a271000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x3f, 0x1, 0x4, 0x0, 0x20, 0x48a81, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x414, 0x7, 0x36, 0x8, 0x9, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xf, r0, 0x9) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x800, 0x8}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000a40)="9d45ed5036e82bb7dbf4aeaac8325737bef2c3686fe4fed2f5143a9d66d9b1a3ead43124cf2a597466ce404c37a702276ed31aa0e8500bee1ade35c60bdf992bd094f3da4e381050cbab0598ca2dad144ebd04a11d3ab123a13a1c688af35485ecbb1327390a487893329e31b2a10e6b0783cb753d73d9b3fd50efb7821ca32633ec571bad0c8647a2166d5945e464bd1a6ac9f973ec5749133bca38007c48e6290bce86f84f8f8704ecaa33d119460e3b136dacd6f2929e38d59d5835b8c09dab59f86385f7c3a117873056aeaeb57b5741aee9e8be3a3faff6223ef0da8295b696e5f5c12216fb6bbab782eec08a10a5abf364bfdb59b25391cad44dacab77d63bcb0572af6789eddf4c504505219c621e679e7e48ecded96dc149a500e26e9cf98d725a4cf011f1d2ad576925f5a74f4805e97fee22da6ad0ebb9551549e46631b7c9b217266c56fcac15a37a6bcbecae2b26e9b3e052d6473f3f0f0c5e1903c5c9595abec20eb3b3ec7e3136d436927728772738b435745239df93f315bcdd8ca4c5bfe300b00241c29a681fe2972f4733c1022ec7f6cbfbce9acc0de38bfc1753292a97bdee1f9060cb276d38c247eec05c0ec3c3e2827a924df77b7ff79be9e3cb5ac320a368a1b127305320de1d70d2443b12ae6df9ba1b0397d2d4fa872ea40dda5187860a96a232242501d6177e16ebedf73be2183c4d6e6c1fa9639f767b3986d8e14747e01b4e82072b02da9f9b211e8927e060a5b9a63a1e99ef78f8de89f13dbb373941be201bbc46d6d5a54bdbccdeadb4c2c0e874cd7a7f04ade8c89c22c4d6c985ee529d7d1ab735cb428f8df33e92bbb2ee355055a3ba0911d9ff620f156abc4784f2077266431c0bc62e393d5991b822ed505258e2dabe0ac39bf7a180ad1a04b49e7087951b838ff82c8c15cad11a8f3807ce7a014bb22c232181f9127f93a2d09398c77922324901b97163dcbb5f293bf9eabf7cf2257e5a16f966563b571421ac45ef06e6877a675f213e33771df457583343d37953ca748b7f51c15a5084661361e7fb90ef65512817fa319b9ac2d5cfa2af6c0b2ae1e5040f3a7d7e40cfc36f1e88b22ee4770d23512c1876191de539510742a5d75cd3032119e22a3e6791fc6754f09af03127e2c7482c7d6a2d5c7faefa9e51fc6dbb9b0dfee2da186e7943d735588a25afa14d88777b77295b50c2a04928928d709747023c5ac87f9bff3e7b55763f1d2878787eabfbf3442908ce970854d4df16983988862e6a838bd044ba774d8a290610ad1be6c45b17ebf06df386d17a81b447c1dfa43c3727173b4daa49e6cd3760574a0a35da6555dbe110a3a4259325f8125b133026ea6f1215ba2b2194b3849ca6d23d321b8cb0a94d003f3804c2c4131f2c1e043fe47a5fb6f2c153256aa99afe358eae18b8254c5200e06ecb878d06b97a52afb720ba2b22a1f710e72f5219a24212d2fe5f00bb6210679a08a9c9ce5bd87d154cbcdfbbce0c69a42720c2472e173e33c75024f98394933a29eb221ed634bc18cfb28701d08fa3d4fb74687a84a6890439c5f255bce8aff7debb2a9c2adad36059c3be09769f45a8752b6c2d0cb8668b633b282554a5799aee66b816060269bb66332d85e729ea534e2baa856174056633e32c4473451234f7513712cfadcfe0bd8de1053e8dea0e3d0645c343d4b51d36f7ea164d8ba24d04efdf115fb95a1f9f97acdacde98209e7429eec264c996dc1de0d5c6368120efb52bd48389e73bedf35916548be88d5548751bd40ab41e9d65a73b266846dc29ed796ccbc802fa02dac5af6dfeac85991fdd08fc02ade2e6b174af5240d6073020dadad309ba8690e56742267a7006d818f24302d7c17b18d6ab1371302503c1d7beb37d3ae68ff8e17d48a0de47c8fca18517347ed2eeeb369745dd1733e10e026554e7f93e006827995b5c5db716225c33337bf7c06ecd773e0a443c8a6874d4c873f302dd248b6a2a3ba21bcf96a34df98dff8cd4a9539d1618905962388a54b9865216f72e8404c52a6874b7a6abe1c01d85f57254b57e6e831c8ded713a0ca77dc0b451110e6b692e954c9e1198d21175789de645613e4c1b5a964f1d6ddc7583726afd2c8d84569dda11ddf60982559cef554853819f62181d23c44594fd63c997e1f507d20fe72afff11cd5490d638ee17c7b50a0683873b06838fededb6f5e3ead45a0419da2960b0502ef42786aa547f6dcec4f5be00c223a7e0042f46a3435c4c80579507c9672ad55576a7c715ea6c615c81b7b463268bed534717581f0aee999de60f6d9597fec883253f3240f7909266df668334f7c62c75790cee928e0f3d9253a8b72eafb0ac6ccea80f94b5576e619998da9b264fb5f6225557fe6e14b5e61947c0d23118a96a1ffc0ec61c0caa73acad33a10e8e37435926e8b92bb233b87e0e16f05fd00d864c3e0df7839572d1754c0edbe78ece63d07f45381e59f29aca894069a9de93b84001884db9ab2b1506ab0589dd23b351d7b2cf38297bc53442c5fafc5f0ebd4b815f949a806e343d86750a14c03ba25fd1436fe798a771e755a1b25e5425888c772f8ba31b3083411ce326368dc8c25e2a47e4cfe3f2f32caefa86244880ab7c348c8103e3ef9e3556b209b930ec9898f34d3e94d26a9c028a2e12aa43115347e444e8e7df35ccc809fd5963b9a55f3c8533ede0719339fb7435daa69c9ec699f709301fc00a27ee1fbd59ef42b101e88a4994466763bf6ef0b16d65a90bcb45c13aa7ca455c43a49a82bc1ea3a556ba4b46525c45afedb1f62643e866eaff99681c591f78a8b91f90f1efba33277795d399c54c28b167bb8817f0c9fda3883898b0182530eca388d39beaca6f3f021b5e8c9aed6e281e135652feab11299d1e10f4b3a89780a0108b29ae2cc43de5d1eb4cd671a5c67f45233c08f469891dbcecf35bc771760bc7fa39626707b9165f693e88c2c9ca024b19614d04d8aaa823f74fa1b3c437782b45a51b08f684c504cb0ac81b82023f1b555424b8b941baec28c9862cab9920a7080db54db1c6a041349a3acbd2b390d0e1e327b9130ad354630cdd4160df62fdf133359cc9447fcac93dac737c0c8b7e842687c11917067790515f7eb3c8c04126a41493f1965e135c195ab1b8dff929b30717541c6c287cfa7e874aedd816cc17795b3aaf926079a657afe82fb63a0cc848209e6bdf94453de32d7ba49713015463b31718b299aa8eefae8639e6d2bcd0936e1ce319aa21186c52b6fa199ccbc18af40c3a486cf644f8addf5acb391f1ea11a0efcd2c43210f9445a071898f4923218ef8337eded3c322b79206410d6513ba30b459b715761f28b426ef5e009f71eeb2b278bfc7fd5c688ca2e896bbbf140a17a17b4d0466460a44989b640c5916069e4f35ca08c2f98b11ed31d807549ba6c0a733a521771bf3e56fb56f5adb4081ab481d669fe9b48dcc034540b10f778577d1d75c1b4574b4090621a41e2308de0b7aeb2affac5cee531e850cb4a6f384f58a444dd4258440139e784a702270d6bd1f97ca8aeb0e75ef8de27d38a01f21ff8d9752c5782d67670f357a45ac92238634f6cc81e8ed22a94de630603b2c1c95c22e3f75ae535baf3e27c8a6c3f8cb212c23ad3f5686bc99866e7ca92f204725af739e2d5139e18268714eaca110e5b4d35746798ccd6466c0b6fd3200c82fb15920b70859d54575c66c4ece3723c06134b47b7cfe3fbe0fa6a8d08375bf5cafc54c4a90c73886e1f4bcf9af6e49f6c66b8fc86bb933ad24a0f09fc63029955d26e10188d808b5f2294dfe57aafac2274c3899abc56f9810820fea20e0f010df25e2af9604d3cfba0f8ac8051b513804e02e2798cbe1f66c293a236973755469af8689ed8c34bfb91ca09f8d3582586001f458611dd9210d3ed775589e64ec67fdccdd00bbb8e28bfd84125c4be368ee93c5840f6942f4af37d7ed6298051e3527a55e4586fee51de5d9ea52ca8c754baf280f754733fe773d2dca63e7457e1ce7eeab7cd73f0b6b6707cb3e10c4d3f22ed57b2882dc28748dcc220b21332acc62dc9b9a57bf951ea031f702784c09913c82cb6fe754cda91423881bc77e058e92cf669d03c35b2da130758cac150020445c1baee052167c9ea84efb998fead69387c2f96b4d795d963a7fe8e951a88d8095bfe54bfab048087a5b536b653b8670f35e1fbaee23bf0fd0108992dfa2d347e5ba9cf26d5062a2a63687191578d9703d229deed6368f079d367c7f8a03a39f699f5ce71756aceae4b7e418ec42ff93b725cf8d01be80c29e2240a920103485545cb6c54974f5d13e3511d3c16b4ac5efd0c9742d4bfad0dbe6106b6610891042a4fa927551f392f28e91564f720f9ffd0c24f987479cef77adfce4be029da4b279967b4d2e895de4307b4d32c45199719ae355fa4337a9f811cead54b95fb33f5e74877a68e304e092222e84d1dbbf7c0869b332f3fbd0dcda5c14929f21b23ffebd23b05ce19c1dd994acf34aaf93e2897ce8d1d47efddd54f00c7f44ce3dd9f15fb6dfb43a04836c80a1090301ae37ae09ca816086a4473892772bc6603afc605c5f78edca67d0538648ff8f781f928681d5895f551fac45a4c11fdbd4694898ebc19c0ae78f9753669604e72a84a0f267559d098ffae93c62eedb038f383d52eb3f15224090acbf1330b9ff362724fa519a94f38470a93340730bd64b78fd88acbb6a997534f4356985cfdfb00faa20313f522e6ea4327fc413aeaf83f3e85e1a0e1a84867454d03c51d115f05a71b3355f5dd91c0d60308c6eb62158172d7104265a997b0f975aa9d3bb89d0f51174e5736c885ebcff336cbea3d07103cee14fadb1aa21199b40b1a192af87105dbcc5fc2f2bb3e9675bfa6980e569751f1b1c491146524b2fd88623273bb79ad964491f5bfe547bfb95e4ccbaaa4f847997856e883a74ba3c62f0008cba692f9199641fbaa69efadd6d0fab491fc3c43b4176d3fc05ee0d6e97ef24bbe66f6c3c4204393ae99121ff804cc84e9267c034964e5215e511fa464ca7c81a518472864d1dd952d43210a13651f2e38d372bd1c1fcceeb07a63aa7205c65ebe54688ab8b6782f1f991026b70a4f389637f29aef70748860f19535c1688a066ae334b19b7db2bccab571496a5796c6205ab44b738887ed453ba5a4282045dc9f0f737f7f6e52172557a46f5a7c61fe434aa13aa0c176ac5602b414b9099ac30a3606e0ff3dac6f55e99a8b788356fa420543989f438132ab8799829d2a93d2dd28eeb1ff261068c48f05a5cfe85daec86eee6f95dfbc3784f03351e2dc4799e8669cb9cd35ac852741b5184987792afbe6ca92e5ebd246c9c32acd47219f2f5e8b3a65db82a48b86b03cb626ea45e797a24395d8bf8e3ed74ee249e702155db5040af6e4e50cfc29c995932d8b3c39e8a9c80e2d29c96c71d4c0274377f41725bacd9a253a7761e402742705bf16c31c04e8f21875cf38de9793865d206b9eaa3e8101c065c944215f9f29fbf0563b3e5d6609e04f6f05e0d3c03d3b9e6335ba82cd04f08c31d7258c4539d92f500340579e4c094b25fbae78a6e7c6f2d85efa4445433db4b798934045db10fa4485bc49758cc29f1f55b7bc2fe88f3ea0685948ad5fccf5395fc46c5e9d8b6315f5e75f9ac5c1428bbaff74887a4f6d23164bd7c006beec1585bc6fc02687adc684a0f8a28bcdc810c72839da6a2463a0a3236deca55f45aec4020759a08cedb9ae85f6dc2b169f13b8f1aa62", &(0x7f00000000c0)=""/137}, 0x20) 08:37:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000000000000a271000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x3f, 0x1, 0x4, 0x0, 0x20, 0x48a81, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x414, 0x7, 0x36, 0x8, 0x9, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xf, r0, 0x9) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000000000000a271000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x3f, 0x1, 0x4, 0x0, 0x20, 0x48a81, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x414, 0x7, 0x36, 0x8, 0x9, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xf, r0, 0x9) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x1f00000000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000000000000a271000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x3f, 0x1, 0x4, 0x0, 0x20, 0x48a81, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x414, 0x7, 0x36, 0x8, 0x9, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xf, r0, 0x9) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000000000000a271000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x3f, 0x1, 0x4, 0x0, 0x20, 0x48a81, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x414, 0x7, 0x36, 0x8, 0x9, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xf, r0, 0x9) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x2000000000000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x800, 0x8}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000a40)="9d45ed5036e82bb7dbf4aeaac8325737bef2c3686fe4fed2f5143a9d66d9b1a3ead43124cf2a597466ce404c37a702276ed31aa0e8500bee1ade35c60bdf992bd094f3da4e381050cbab0598ca2dad144ebd04a11d3ab123a13a1c688af35485ecbb1327390a487893329e31b2a10e6b0783cb753d73d9b3fd50efb7821ca32633ec571bad0c8647a2166d5945e464bd1a6ac9f973ec5749133bca38007c48e6290bce86f84f8f8704ecaa33d119460e3b136dacd6f2929e38d59d5835b8c09dab59f86385f7c3a117873056aeaeb57b5741aee9e8be3a3faff6223ef0da8295b696e5f5c12216fb6bbab782eec08a10a5abf364bfdb59b25391cad44dacab77d63bcb0572af6789eddf4c504505219c621e679e7e48ecded96dc149a500e26e9cf98d725a4cf011f1d2ad576925f5a74f4805e97fee22da6ad0ebb9551549e46631b7c9b217266c56fcac15a37a6bcbecae2b26e9b3e052d6473f3f0f0c5e1903c5c9595abec20eb3b3ec7e3136d436927728772738b435745239df93f315bcdd8ca4c5bfe300b00241c29a681fe2972f4733c1022ec7f6cbfbce9acc0de38bfc1753292a97bdee1f9060cb276d38c247eec05c0ec3c3e2827a924df77b7ff79be9e3cb5ac320a368a1b127305320de1d70d2443b12ae6df9ba1b0397d2d4fa872ea40dda5187860a96a232242501d6177e16ebedf73be2183c4d6e6c1fa9639f767b3986d8e14747e01b4e82072b02da9f9b211e8927e060a5b9a63a1e99ef78f8de89f13dbb373941be201bbc46d6d5a54bdbccdeadb4c2c0e874cd7a7f04ade8c89c22c4d6c985ee529d7d1ab735cb428f8df33e92bbb2ee355055a3ba0911d9ff620f156abc4784f2077266431c0bc62e393d5991b822ed505258e2dabe0ac39bf7a180ad1a04b49e7087951b838ff82c8c15cad11a8f3807ce7a014bb22c232181f9127f93a2d09398c77922324901b97163dcbb5f293bf9eabf7cf2257e5a16f966563b571421ac45ef06e6877a675f213e33771df457583343d37953ca748b7f51c15a5084661361e7fb90ef65512817fa319b9ac2d5cfa2af6c0b2ae1e5040f3a7d7e40cfc36f1e88b22ee4770d23512c1876191de539510742a5d75cd3032119e22a3e6791fc6754f09af03127e2c7482c7d6a2d5c7faefa9e51fc6dbb9b0dfee2da186e7943d735588a25afa14d88777b77295b50c2a04928928d709747023c5ac87f9bff3e7b55763f1d2878787eabfbf3442908ce970854d4df16983988862e6a838bd044ba774d8a290610ad1be6c45b17ebf06df386d17a81b447c1dfa43c3727173b4daa49e6cd3760574a0a35da6555dbe110a3a4259325f8125b133026ea6f1215ba2b2194b3849ca6d23d321b8cb0a94d003f3804c2c4131f2c1e043fe47a5fb6f2c153256aa99afe358eae18b8254c5200e06ecb878d06b97a52afb720ba2b22a1f710e72f5219a24212d2fe5f00bb6210679a08a9c9ce5bd87d154cbcdfbbce0c69a42720c2472e173e33c75024f98394933a29eb221ed634bc18cfb28701d08fa3d4fb74687a84a6890439c5f255bce8aff7debb2a9c2adad36059c3be09769f45a8752b6c2d0cb8668b633b282554a5799aee66b816060269bb66332d85e729ea534e2baa856174056633e32c4473451234f7513712cfadcfe0bd8de1053e8dea0e3d0645c343d4b51d36f7ea164d8ba24d04efdf115fb95a1f9f97acdacde98209e7429eec264c996dc1de0d5c6368120efb52bd48389e73bedf35916548be88d5548751bd40ab41e9d65a73b266846dc29ed796ccbc802fa02dac5af6dfeac85991fdd08fc02ade2e6b174af5240d6073020dadad309ba8690e56742267a7006d818f24302d7c17b18d6ab1371302503c1d7beb37d3ae68ff8e17d48a0de47c8fca18517347ed2eeeb369745dd1733e10e026554e7f93e006827995b5c5db716225c33337bf7c06ecd773e0a443c8a6874d4c873f302dd248b6a2a3ba21bcf96a34df98dff8cd4a9539d1618905962388a54b9865216f72e8404c52a6874b7a6abe1c01d85f57254b57e6e831c8ded713a0ca77dc0b451110e6b692e954c9e1198d21175789de645613e4c1b5a964f1d6ddc7583726afd2c8d84569dda11ddf60982559cef554853819f62181d23c44594fd63c997e1f507d20fe72afff11cd5490d638ee17c7b50a0683873b06838fededb6f5e3ead45a0419da2960b0502ef42786aa547f6dcec4f5be00c223a7e0042f46a3435c4c80579507c9672ad55576a7c715ea6c615c81b7b463268bed534717581f0aee999de60f6d9597fec883253f3240f7909266df668334f7c62c75790cee928e0f3d9253a8b72eafb0ac6ccea80f94b5576e619998da9b264fb5f6225557fe6e14b5e61947c0d23118a96a1ffc0ec61c0caa73acad33a10e8e37435926e8b92bb233b87e0e16f05fd00d864c3e0df7839572d1754c0edbe78ece63d07f45381e59f29aca894069a9de93b84001884db9ab2b1506ab0589dd23b351d7b2cf38297bc53442c5fafc5f0ebd4b815f949a806e343d86750a14c03ba25fd1436fe798a771e755a1b25e5425888c772f8ba31b3083411ce326368dc8c25e2a47e4cfe3f2f32caefa86244880ab7c348c8103e3ef9e3556b209b930ec9898f34d3e94d26a9c028a2e12aa43115347e444e8e7df35ccc809fd5963b9a55f3c8533ede0719339fb7435daa69c9ec699f709301fc00a27ee1fbd59ef42b101e88a4994466763bf6ef0b16d65a90bcb45c13aa7ca455c43a49a82bc1ea3a556ba4b46525c45afedb1f62643e866eaff99681c591f78a8b91f90f1efba33277795d399c54c28b167bb8817f0c9fda3883898b0182530eca388d39beaca6f3f021b5e8c9aed6e281e135652feab11299d1e10f4b3a89780a0108b29ae2cc43de5d1eb4cd671a5c67f45233c08f469891dbcecf35bc771760bc7fa39626707b9165f693e88c2c9ca024b19614d04d8aaa823f74fa1b3c437782b45a51b08f684c504cb0ac81b82023f1b555424b8b941baec28c9862cab9920a7080db54db1c6a041349a3acbd2b390d0e1e327b9130ad354630cdd4160df62fdf133359cc9447fcac93dac737c0c8b7e842687c11917067790515f7eb3c8c04126a41493f1965e135c195ab1b8dff929b30717541c6c287cfa7e874aedd816cc17795b3aaf926079a657afe82fb63a0cc848209e6bdf94453de32d7ba49713015463b31718b299aa8eefae8639e6d2bcd0936e1ce319aa21186c52b6fa199ccbc18af40c3a486cf644f8addf5acb391f1ea11a0efcd2c43210f9445a071898f4923218ef8337eded3c322b79206410d6513ba30b459b715761f28b426ef5e009f71eeb2b278bfc7fd5c688ca2e896bbbf140a17a17b4d0466460a44989b640c5916069e4f35ca08c2f98b11ed31d807549ba6c0a733a521771bf3e56fb56f5adb4081ab481d669fe9b48dcc034540b10f778577d1d75c1b4574b4090621a41e2308de0b7aeb2affac5cee531e850cb4a6f384f58a444dd4258440139e784a702270d6bd1f97ca8aeb0e75ef8de27d38a01f21ff8d9752c5782d67670f357a45ac92238634f6cc81e8ed22a94de630603b2c1c95c22e3f75ae535baf3e27c8a6c3f8cb212c23ad3f5686bc99866e7ca92f204725af739e2d5139e18268714eaca110e5b4d35746798ccd6466c0b6fd3200c82fb15920b70859d54575c66c4ece3723c06134b47b7cfe3fbe0fa6a8d08375bf5cafc54c4a90c73886e1f4bcf9af6e49f6c66b8fc86bb933ad24a0f09fc63029955d26e10188d808b5f2294dfe57aafac2274c3899abc56f9810820fea20e0f010df25e2af9604d3cfba0f8ac8051b513804e02e2798cbe1f66c293a236973755469af8689ed8c34bfb91ca09f8d3582586001f458611dd9210d3ed775589e64ec67fdccdd00bbb8e28bfd84125c4be368ee93c5840f6942f4af37d7ed6298051e3527a55e4586fee51de5d9ea52ca8c754baf280f754733fe773d2dca63e7457e1ce7eeab7cd73f0b6b6707cb3e10c4d3f22ed57b2882dc28748dcc220b21332acc62dc9b9a57bf951ea031f702784c09913c82cb6fe754cda91423881bc77e058e92cf669d03c35b2da130758cac150020445c1baee052167c9ea84efb998fead69387c2f96b4d795d963a7fe8e951a88d8095bfe54bfab048087a5b536b653b8670f35e1fbaee23bf0fd0108992dfa2d347e5ba9cf26d5062a2a63687191578d9703d229deed6368f079d367c7f8a03a39f699f5ce71756aceae4b7e418ec42ff93b725cf8d01be80c29e2240a920103485545cb6c54974f5d13e3511d3c16b4ac5efd0c9742d4bfad0dbe6106b6610891042a4fa927551f392f28e91564f720f9ffd0c24f987479cef77adfce4be029da4b279967b4d2e895de4307b4d32c45199719ae355fa4337a9f811cead54b95fb33f5e74877a68e304e092222e84d1dbbf7c0869b332f3fbd0dcda5c14929f21b23ffebd23b05ce19c1dd994acf34aaf93e2897ce8d1d47efddd54f00c7f44ce3dd9f15fb6dfb43a04836c80a1090301ae37ae09ca816086a4473892772bc6603afc605c5f78edca67d0538648ff8f781f928681d5895f551fac45a4c11fdbd4694898ebc19c0ae78f9753669604e72a84a0f267559d098ffae93c62eedb038f383d52eb3f15224090acbf1330b9ff362724fa519a94f38470a93340730bd64b78fd88acbb6a997534f4356985cfdfb00faa20313f522e6ea4327fc413aeaf83f3e85e1a0e1a84867454d03c51d115f05a71b3355f5dd91c0d60308c6eb62158172d7104265a997b0f975aa9d3bb89d0f51174e5736c885ebcff336cbea3d07103cee14fadb1aa21199b40b1a192af87105dbcc5fc2f2bb3e9675bfa6980e569751f1b1c491146524b2fd88623273bb79ad964491f5bfe547bfb95e4ccbaaa4f847997856e883a74ba3c62f0008cba692f9199641fbaa69efadd6d0fab491fc3c43b4176d3fc05ee0d6e97ef24bbe66f6c3c4204393ae99121ff804cc84e9267c034964e5215e511fa464ca7c81a518472864d1dd952d43210a13651f2e38d372bd1c1fcceeb07a63aa7205c65ebe54688ab8b6782f1f991026b70a4f389637f29aef70748860f19535c1688a066ae334b19b7db2bccab571496a5796c6205ab44b738887ed453ba5a4282045dc9f0f737f7f6e52172557a46f5a7c61fe434aa13aa0c176ac5602b414b9099ac30a3606e0ff3dac6f55e99a8b788356fa420543989f438132ab8799829d2a93d2dd28eeb1ff261068c48f05a5cfe85daec86eee6f95dfbc3784f03351e2dc4799e8669cb9cd35ac852741b5184987792afbe6ca92e5ebd246c9c32acd47219f2f5e8b3a65db82a48b86b03cb626ea45e797a24395d8bf8e3ed74ee249e702155db5040af6e4e50cfc29c995932d8b3c39e8a9c80e2d29c96c71d4c0274377f41725bacd9a253a7761e402742705bf16c31c04e8f21875cf38de9793865d206b9eaa3e8101c065c944215f9f29fbf0563b3e5d6609e04f6f05e0d3c03d3b9e6335ba82cd04f08c31d7258c4539d92f500340579e4c094b25fbae78a6e7c6f2d85efa4445433db4b798934045db10fa4485bc49758cc29f1f55b7bc2fe88f3ea0685948ad5fccf5395fc46c5e9d8b6315f5e75f9ac5c1428bbaff74887a4f6d23164bd7c006beec1585bc6fc02687adc684a0f8a28bcdc810c72839da6a2463a0a3236deca55f45aec4020759a08cedb9ae85f6dc2b169f13b8f1aa62", &(0x7f00000000c0)=""/137}, 0x20) 08:37:23 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x4}, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x2b, r4}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000ac0), 0x0, 0x40007a, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r6, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x13, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x1, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], &(0x7f0000000200)='syzkaller\x00', 0xb0d9, 0xaf, &(0x7f00000002c0)=""/175, 0x40f00, 0x8, '\x00', r8, 0x35, r4, 0x8, &(0x7f0000000380)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xb, 0x67f7}, 0x10, r9, r7, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x32, 0xffffffe0, 0x53ea, r2, 0x1, '\x00', r8, r1, 0x1, 0x2, 0x4}, 0x48) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0xd, 0x5, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f0000000240)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3, 0xffffffffffffffff, r10, r11, r12], 0x0, 0x10, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) r15 = gettid() perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x81, 0xc4, 0x4, 0x0, 0x7fffffff, 0x2100, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xffff, 0x100000001}, 0x100000, 0x9, 0xff, 0x5, 0xe9, 0x5, 0x7, 0x0, 0xa341, 0x0, 0x8}, r15, 0x4, r13, 0xa) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 74) 08:37:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x942403a0ffffffff, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:23 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xeee, 0x0, r1, 0xae64, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x1e, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000700), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x0, 0x0, 0x4}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xfffffffc, 0xde, &(0x7f0000000200)=""/222, 0x41000, 0x27, '\x00', r3, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd}, 0x10, r5, r0, 0x4, &(0x7f0000000940)=[r1, r1, r1, r6], &(0x7f0000000980)=[{0x3, 0x3, 0x7, 0xc}, {0x5, 0x4, 0x6, 0x6}, {0x1, 0x3, 0x3, 0x1}, {0x1, 0x1, 0x0, 0xa}], 0x10, 0x7ff}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=r5, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xd, 0x1f, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ldst={0x3, 0x3, 0x3, 0x3, 0x1, 0x2, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x4, 0xeb, &(0x7f0000000d00)=""/235, 0x41000, 0x3, '\x00', r4, 0x30, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x1, 0x9, 0x7, 0x7}, 0x10, 0x0, r7, 0x8, &(0x7f0000000f00)=[r10], &(0x7f0000000f40)=[{0x1, 0x1, 0x7}, {0x0, 0x1, 0x9}, {0x4, 0x3, 0x3}, {0x2, 0x5, 0xe, 0xa}, {0x2, 0x5, 0xf, 0x8}, {0x5, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x0, 0xc}, {0x0, 0x1, 0x7, 0x9}], 0x10, 0x6}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r11) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") [ 353.574982][T14495] FAULT_INJECTION: forcing a failure. [ 353.574982][T14495] name failslab, interval 1, probability 0, space 0, times 0 [ 353.605444][T14495] CPU: 0 PID: 14495 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 353.615619][T14495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 353.625522][T14495] Call Trace: [ 353.628634][T14495] [ 353.631417][T14495] dump_stack_lvl+0x151/0x1b7 [ 353.635927][T14495] ? io_uring_drop_tctx_refs+0x190/0x190 [ 353.641397][T14495] dump_stack+0x15/0x17 [ 353.645388][T14495] should_fail+0x3c6/0x510 [ 353.649689][T14495] __should_failslab+0xa4/0xe0 [ 353.654241][T14495] ? anon_vma_clone+0x9a/0x500 [ 353.658839][T14495] should_failslab+0x9/0x20 [ 353.663177][T14495] slab_pre_alloc_hook+0x37/0xd0 [ 353.667953][T14495] ? anon_vma_clone+0x9a/0x500 [ 353.672552][T14495] kmem_cache_alloc+0x44/0x200 [ 353.677156][T14495] anon_vma_clone+0x9a/0x500 [ 353.681588][T14495] anon_vma_fork+0x91/0x4e0 [ 353.685917][T14495] ? anon_vma_name+0x4c/0x70 [ 353.690345][T14495] ? vm_area_dup+0x17a/0x230 [ 353.694769][T14495] copy_mm+0xa3a/0x13e0 [ 353.698768][T14495] ? copy_signal+0x610/0x610 [ 353.703187][T14495] ? __init_rwsem+0xd6/0x1c0 [ 353.707615][T14495] ? copy_signal+0x4e3/0x610 [ 353.712044][T14495] copy_process+0x1149/0x3290 [ 353.716565][T14495] ? timerqueue_add+0x250/0x270 [ 353.721243][T14495] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 353.726189][T14495] ? enqueue_hrtimer+0xca/0x240 [ 353.730872][T14495] ? __hrtimer_run_queues+0x46b/0xad0 [ 353.736080][T14495] kernel_clone+0x21e/0x9e0 [ 353.740420][T14495] ? irqentry_exit+0x30/0x40 [ 353.744854][T14495] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 353.750485][T14495] ? create_io_thread+0x1e0/0x1e0 [ 353.755358][T14495] __x64_sys_clone+0x23f/0x290 [ 353.759944][T14495] ? __do_sys_vfork+0x130/0x130 [ 353.764633][T14495] ? debug_smp_processor_id+0x17/0x20 [ 353.769840][T14495] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 353.775747][T14495] ? exit_to_user_mode_prepare+0x39/0xa0 [ 353.781210][T14495] do_syscall_64+0x3d/0xb0 [ 353.785468][T14495] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 353.791105][T14495] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 353.796834][T14495] RIP: 0033:0x7fd15e9c4da9 [ 353.801090][T14495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 08:37:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xf5ffffff00000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:24 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x4}, 0xc) (async, rerun: 64) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) (async, rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x2b, r4}, 0x90) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x80) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000ac0), 0x0, 0x40007a, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x10) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r6, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x13, 0x8, 0x0, 0x0}}, 0x10) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x1, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], &(0x7f0000000200)='syzkaller\x00', 0xb0d9, 0xaf, &(0x7f00000002c0)=""/175, 0x40f00, 0x8, '\x00', r8, 0x35, r4, 0x8, &(0x7f0000000380)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xb, 0x67f7}, 0x10, r9, r7, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x32, 0xffffffe0, 0x53ea, r2, 0x1, '\x00', r8, r1, 0x1, 0x2, 0x4}, 0x48) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0xd, 0x5, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f0000000240)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3, 0xffffffffffffffff, r10, r11, r12], 0x0, 0x10, 0x5}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r13 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) (async) r15 = gettid() perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x81, 0xc4, 0x4, 0x0, 0x7fffffff, 0x2100, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xffff, 0x100000001}, 0x100000, 0x9, 0xff, 0x5, 0xe9, 0x5, 0x7, 0x0, 0xa341, 0x0, 0x8}, r15, 0x4, r13, 0xa) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 353.820527][T14495] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 353.828770][T14495] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 353.836581][T14495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 353.844401][T14495] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 353.852204][T14495] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 353.860017][T14495] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 353.867951][T14495] 08:37:24 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x4}, 0xc) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x8}, 0xc) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x2b, r4}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x80) (async, rerun: 32) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000ac0), 0x0, 0x40007a, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r6, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x13, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x1, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], &(0x7f0000000200)='syzkaller\x00', 0xb0d9, 0xaf, &(0x7f00000002c0)=""/175, 0x40f00, 0x8, '\x00', r8, 0x35, r4, 0x8, &(0x7f0000000380)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xb, 0x67f7}, 0x10, r9, r7, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x32, 0xffffffe0, 0x53ea, r2, 0x1, '\x00', r8, r1, 0x1, 0x2, 0x4}, 0x48) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0xd, 0x5, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f0000000240)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r2, r3, 0xffffffffffffffff, r10, r11, r12], 0x0, 0x10, 0x5}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) r15 = gettid() perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x81, 0xc4, 0x4, 0x0, 0x7fffffff, 0x2100, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xffff, 0x100000001}, 0x100000, 0x9, 0xff, 0x5, 0xe9, 0x5, 0x7, 0x0, 0xa341, 0x0, 0x8}, r15, 0x4, r13, 0xa) (async, rerun: 64) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (rerun: 64) 08:37:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xfbffffff00000000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:24 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xeee, 0x0, r1, 0xae64, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000400)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x1e, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000700), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x0, 0x0, 0x4}, 0x48) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x0, 0x0, 0x4}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xfffffffc, 0xde, &(0x7f0000000200)=""/222, 0x41000, 0x27, '\x00', r3, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd}, 0x10, r5, r0, 0x4, &(0x7f0000000940)=[r1, r1, r1, r6], &(0x7f0000000980)=[{0x3, 0x3, 0x7, 0xc}, {0x5, 0x4, 0x6, 0x6}, {0x1, 0x3, 0x3, 0x1}, {0x1, 0x1, 0x0, 0xa}], 0x10, 0x7ff}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=r5, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xd, 0x1f, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ldst={0x3, 0x3, 0x3, 0x3, 0x1, 0x2, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x4, 0xeb, &(0x7f0000000d00)=""/235, 0x41000, 0x3, '\x00', r4, 0x30, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x1, 0x9, 0x7, 0x7}, 0x10, 0x0, r7, 0x8, &(0x7f0000000f00)=[r10], &(0x7f0000000f40)=[{0x1, 0x1, 0x7}, {0x0, 0x1, 0x9}, {0x4, 0x3, 0x3}, {0x2, 0x5, 0xe, 0xa}, {0x2, 0x5, 0xf, 0x8}, {0x5, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x0, 0xc}, {0x0, 0x1, 0x7, 0x9}], 0x10, 0x6}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xd, 0x1f, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ldst={0x3, 0x3, 0x3, 0x3, 0x1, 0x2, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x4, 0xeb, &(0x7f0000000d00)=""/235, 0x41000, 0x3, '\x00', r4, 0x30, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x1, 0x9, 0x7, 0x7}, 0x10, 0x0, r7, 0x8, &(0x7f0000000f00)=[r10], &(0x7f0000000f40)=[{0x1, 0x1, 0x7}, {0x0, 0x1, 0x9}, {0x4, 0x3, 0x3}, {0x2, 0x5, 0xe, 0xa}, {0x2, 0x5, 0xf, 0x8}, {0x5, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x0, 0xc}, {0x0, 0x1, 0x7, 0x9}], 0x10, 0x6}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r11) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xffffffffa002a000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xffffffffa0032494, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 75) 08:37:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab307fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:24 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xeee, 0x0, r1, 0xae64, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000400)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x1e, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000700), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x1e, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f0000000700), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x0, 0x0, 0x4}, 0x48) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', 0x0, r1, 0x0, 0x0, 0x4}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xfffffffc, 0xde, &(0x7f0000000200)=""/222, 0x41000, 0x27, '\x00', r3, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd}, 0x10, r5, r0, 0x4, &(0x7f0000000940)=[r1, r1, r1, r6], &(0x7f0000000980)=[{0x3, 0x3, 0x7, 0xc}, {0x5, 0x4, 0x6, 0x6}, {0x1, 0x3, 0x3, 0x1}, {0x1, 0x1, 0x0, 0xa}], 0x10, 0x7ff}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=r5, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xd, 0x1f, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ldst={0x3, 0x3, 0x3, 0x3, 0x1, 0x2, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x4, 0xeb, &(0x7f0000000d00)=""/235, 0x41000, 0x3, '\x00', r4, 0x30, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x1, 0x9, 0x7, 0x7}, 0x10, 0x0, r7, 0x8, &(0x7f0000000f00)=[r10], &(0x7f0000000f40)=[{0x1, 0x1, 0x7}, {0x0, 0x1, 0x9}, {0x4, 0x3, 0x3}, {0x2, 0x5, 0xe, 0xa}, {0x2, 0x5, 0xf, 0x8}, {0x5, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x0, 0xc}, {0x0, 0x1, 0x7, 0x9}], 0x10, 0x6}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xd, 0x1f, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ldst={0x3, 0x3, 0x3, 0x3, 0x1, 0x2, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x4, 0xeb, &(0x7f0000000d00)=""/235, 0x41000, 0x3, '\x00', r4, 0x30, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x1, 0x9, 0x7, 0x7}, 0x10, 0x0, r7, 0x8, &(0x7f0000000f00)=[r10], &(0x7f0000000f40)=[{0x1, 0x1, 0x7}, {0x0, 0x1, 0x9}, {0x4, 0x3, 0x3}, {0x2, 0x5, 0xe, 0xa}, {0x2, 0x5, 0xf, 0x8}, {0x5, 0x3, 0x1, 0xb}, {0x0, 0x2, 0x0, 0xc}, {0x0, 0x1, 0x7, 0x9}], 0x10, 0x6}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r11) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376360854eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 354.499097][T14535] FAULT_INJECTION: forcing a failure. [ 354.499097][T14535] name failslab, interval 1, probability 0, space 0, times 0 [ 354.512140][T14535] CPU: 1 PID: 14535 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 354.522306][T14535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 354.532204][T14535] Call Trace: [ 354.535328][T14535] [ 354.538101][T14535] dump_stack_lvl+0x151/0x1b7 [ 354.542619][T14535] ? io_uring_drop_tctx_refs+0x190/0x190 [ 354.548108][T14535] dump_stack+0x15/0x17 [ 354.552077][T14535] should_fail+0x3c6/0x510 [ 354.556329][T14535] __should_failslab+0xa4/0xe0 [ 354.560928][T14535] ? anon_vma_clone+0x9a/0x500 [ 354.565531][T14535] should_failslab+0x9/0x20 [ 354.569869][T14535] slab_pre_alloc_hook+0x37/0xd0 [ 354.574645][T14535] ? anon_vma_clone+0x9a/0x500 [ 354.579244][T14535] kmem_cache_alloc+0x44/0x200 [ 354.583842][T14535] anon_vma_clone+0x9a/0x500 [ 354.588275][T14535] anon_vma_fork+0x91/0x4e0 [ 354.592606][T14535] ? anon_vma_name+0x43/0x70 [ 354.597032][T14535] ? vm_area_dup+0x17a/0x230 [ 354.601458][T14535] copy_mm+0xa3a/0x13e0 [ 354.605450][T14535] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 354.611098][T14535] ? copy_signal+0x610/0x610 [ 354.615520][T14535] ? copy_process+0x110c/0x3290 [ 354.620238][T14535] copy_process+0x1149/0x3290 [ 354.624869][T14535] ? proc_fail_nth_write+0x20b/0x290 [ 354.629987][T14535] ? fsnotify_perm+0x6a/0x5d0 [ 354.634492][T14535] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 354.639447][T14535] ? vfs_write+0x9ec/0x1110 [ 354.643784][T14535] ? __hrtimer_run_queues+0x46b/0xad0 [ 354.648993][T14535] kernel_clone+0x21e/0x9e0 [ 354.653326][T14535] ? irqentry_exit+0x30/0x40 [ 354.657752][T14535] ? create_io_thread+0x1e0/0x1e0 [ 354.662617][T14535] __x64_sys_clone+0x23f/0x290 [ 354.667218][T14535] ? __do_sys_vfork+0x130/0x130 [ 354.671903][T14535] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 354.677717][T14535] do_syscall_64+0x3d/0xb0 [ 354.681965][T14535] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 354.687699][T14535] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 354.693426][T14535] RIP: 0033:0x7fd15e9c4da9 [ 354.697676][T14535] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 354.717637][T14535] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 354.725889][T14535] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 354.733699][T14535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 354.741501][T14535] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 08:37:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0075a9cb79e419739ec967b") 08:37:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x25) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") [ 354.749314][T14535] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 354.757127][T14535] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 354.764948][T14535] 08:37:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000fd004b64ffec850001006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 76) 08:37:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, 0x0, 0x280) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x7f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000fd004b64ffec850001006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 354.947880][T14545] FAULT_INJECTION: forcing a failure. [ 354.947880][T14545] name failslab, interval 1, probability 0, space 0, times 0 [ 354.977463][T14545] CPU: 1 PID: 14545 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 354.987638][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 354.997532][T14545] Call Trace: [ 355.000654][T14545] [ 355.003431][T14545] dump_stack_lvl+0x151/0x1b7 [ 355.007943][T14545] ? io_uring_drop_tctx_refs+0x190/0x190 [ 355.013415][T14545] dump_stack+0x15/0x17 [ 355.019748][T14545] should_fail+0x3c6/0x510 [ 355.024003][T14545] __should_failslab+0xa4/0xe0 [ 355.028601][T14545] ? anon_vma_clone+0x9a/0x500 [ 355.033204][T14545] should_failslab+0x9/0x20 [ 355.037539][T14545] slab_pre_alloc_hook+0x37/0xd0 [ 355.042314][T14545] ? anon_vma_clone+0x9a/0x500 08:37:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000fd004b64ffec850001006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000fd004b64ffec850001006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) [ 355.046911][T14545] kmem_cache_alloc+0x44/0x200 [ 355.051518][T14545] anon_vma_clone+0x9a/0x500 [ 355.055960][T14545] anon_vma_fork+0x91/0x4e0 [ 355.060280][T14545] ? anon_vma_name+0x43/0x70 [ 355.064703][T14545] ? vm_area_dup+0x17a/0x230 [ 355.069142][T14545] copy_mm+0xa3a/0x13e0 [ 355.073135][T14545] ? copy_signal+0x610/0x610 [ 355.077561][T14545] ? __init_rwsem+0xd6/0x1c0 [ 355.081975][T14545] ? copy_signal+0x4e3/0x610 [ 355.086407][T14545] copy_process+0x1149/0x3290 [ 355.090920][T14545] ? timerqueue_add+0x250/0x270 [ 355.095604][T14545] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 355.100549][T14545] ? enqueue_hrtimer+0xca/0x240 [ 355.105235][T14545] ? __hrtimer_run_queues+0x46b/0xad0 [ 355.110443][T14545] kernel_clone+0x21e/0x9e0 [ 355.114783][T14545] ? create_io_thread+0x1e0/0x1e0 [ 355.119649][T14545] ? clockevents_program_event+0x22f/0x300 [ 355.125282][T14545] __x64_sys_clone+0x23f/0x290 [ 355.129881][T14545] ? __do_sys_vfork+0x130/0x130 [ 355.134569][T14545] ? debug_smp_processor_id+0x17/0x20 [ 355.139788][T14545] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 355.145679][T14545] ? exit_to_user_mode_prepare+0x39/0xa0 [ 355.151145][T14545] do_syscall_64+0x3d/0xb0 [ 355.155400][T14545] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 355.161127][T14545] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 355.166854][T14545] RIP: 0033:0x7fd15e9c4da9 [ 355.171115][T14545] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 355.190675][T14545] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 355.198881][T14545] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 355.206691][T14545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 355.214850][T14545] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 355.222660][T14545] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 355.230471][T14545] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 355.238293][T14545] 08:37:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000000000008580000000000000000000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1000001) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f00000019c0)='cpuset.effective_mems\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r6, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="7722c02ac8ef8e235f4d27c0ffbb198b0f45b4cf1ebf9bb67752b4b8aa123ba82435f2786b2e7b400b7f38401b01d610236ab4e9d1b5c0641568e93f758c83aa11a69d0973f7f871baaa388b8dbce364066c6c3e999ccf1b8a48603b2ede1c60dade1703b3c396edf332b6f7206683530708855730140eaebf74e6eaab63cc", 0x7f}, {&(0x7f0000000380)="e88d193adb113fbdeff75a4f52d5c4af14db2d61b4d7b78e15b95840440a7adc63131f73d7cb4137b7fb6a67a3dba5f4f41e5c8c29a311af87ca68d7e5f3e6ec86146aedb7bd408c43704604b55f1e635991f8dfabfb6b7f40b70381e90907763fc912670d953f7af5223b4ad8cd96fd6f21e8b5f83409c65f033567d16ae2da089dfe478d051a04f29ed94348535b580f2d4e254eade698f817f853ade6e322318ab68e2478", 0xa6}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000440)="933a076dc5a6c6a015fbe27393c454b7dd2b", 0x12}], 0x4, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @multicast1}}}], 0x38}, 0x4004004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r0, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xf, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x2, 0x15, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x2, 0x3, 0x6, 0x1, 0x30, 0x4}, @map_val={0x18, 0xbee29768199e4f5c, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}], &(0x7f0000000240)='GPL\x00', 0x9, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x23, '\x00', r8, 0x1a, r5, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xc, 0x9, 0x6}, 0x10, r9, r4, 0x2, 0x0, &(0x7f00000018c0)=[{0x3, 0x5, 0x5, 0xc}, {0x3, 0x2, 0x8, 0x5}], 0x10, 0x3ff}, 0x90) socketpair(0xb, 0x4, 0x203, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) write$cgroup_subtree(r0, 0x0, 0x280) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x7f) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x25) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") (fail_nth: 77) 08:37:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, &(0x7f0000000640)="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", &(0x7f0000000380)=""/13, 0x4}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x2b}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r4, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001600), 0x0, 0x10, &(0x7f0000001680), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x43, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000742e0000000000000400000018110000", @ANYRES16=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000a9e2000000b70500000800000085000000a5000000851000000200ff000aa50100fcffffffb708004d000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000ebff000007040000f0ffffffb7020000080000001823dd678f0bca1ea34eed330000229bd8f8ec166916457406ee9035d033d57ed432d49a3f3733a7a95fc47c07a588ea74bc89bd83be492128c87620b8101c5c5291c46e9e571aeadd715c197e9402f1c851d08046c876419b25e5beb7b8acc3673515539e97a2aa2fe70fd40b5c9dcf0f2e8005c28eb1479c71576e16574fff1e769ed2062f57e9bd602f3be749af564495aa12531dcca998b1d0d3d4db7531fd1be4f8c67de24f45b2c39008d4398cd71e4a29f718f7fa9ea1844ae7f0269ad20f6212cbd1b79dd2ab33587cc8ce7a7cb100000000c1d92c70a16510046ced5ea3b5ed5409fc552e4fac53c98beaf004888094b0b0a25c3ce4987f72cea55724605613c3fa5a01b20ad204ba5fd356c1ad3411b9a93c7d88feccb5f5484eb336f0cd7119b61181969a593baf47adaec0c941af28e6fd630135eb6c83af2d231ff792b2e29df2603590ff32290c1caa78240ab12ac41b618dabb86ad30699d35e9e9808acecfff7461325c43ca3397757ecc7c0ca9ec6889a54648aaee3b5a8dc184d32f5b0fcab79441f72866e8b9f7591e192c22a8edf25f24465e6528dfe353855e91338b92564d48a128658049a5d41573a93ff0602f5706247807e2a53283a2c15afdecc753da8f5e595ed99cef28d93f42908a936cdbb531056be4e26bd8a8ae0c97d21ef04cc799c94e2beb54406b27d957e58ffb914015bf25005eb991cd237fd", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000b6000000b7080000000000007b8af8ff00000000b70800000500", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018330000050000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x84, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0x7, 0x8}, 0x10, r5, r3, 0x7, 0x0, &(0x7f0000000f40)=[{0x3, 0x1, 0x10, 0x9}, {0x2, 0x4, 0x8}, {0x3, 0x3, 0x9, 0xa}, {0x0, 0x1, 0xd}, {0x0, 0x5, 0xf, 0xc}, {0x3, 0x2, 0xffffffff, 0x7}, {0x5, 0x3, 0xe, 0x6}], 0x10, 0x10001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1, 0x2f, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1486}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0xbf, &(0x7f0000001900)=""/191, 0x41100, 0x60, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000001c80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x1, 0x9, 0xffffffff, 0x1f}, 0x10, r5, 0xffffffffffffffff, 0x3, &(0x7f0000001d00)=[r2, r2, r2], &(0x7f0000001d40)=[{0x2, 0x3, 0xe, 0x7}, {0x5, 0x2, 0xe, 0xc}, {0x5, 0x3, 0x5, 0xa}], 0x10, 0x8}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfff, 0x953, 0x6, 0x411, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x9}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0xc0185879, &(0x7f0000000040)) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r12, &(0x7f00000002c0)=ANY=[], 0x1a000) write$cgroup_freezer_state(r12, &(0x7f0000000140)='FREEZING\x00', 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000640)='%pi6 \x00'}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r15}, 0x10) unlink(0x0) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xffffff80, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1a, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x3, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r2, 0x1, r10, r11, r9, r12, r13, 0xffffffffffffffff, r16], &(0x7f0000001640)=[{0x5, 0x1, 0x9, 0xa}, {0x2, 0x2, 0x3, 0x3}], 0x10, 0x4}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) write$cgroup_subtree(r0, 0x0, 0x280) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x7f) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 355.405267][T14573] FAULT_INJECTION: forcing a failure. [ 355.405267][T14573] name failslab, interval 1, probability 0, space 0, times 0 [ 355.426232][T14573] CPU: 1 PID: 14573 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 355.436520][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 355.446421][T14573] Call Trace: [ 355.449523][T14573] [ 355.452311][T14573] dump_stack_lvl+0x151/0x1b7 [ 355.456830][T14573] ? io_uring_drop_tctx_refs+0x190/0x190 [ 355.462288][T14573] dump_stack+0x15/0x17 [ 355.466277][T14573] should_fail+0x3c6/0x510 [ 355.470526][T14573] __should_failslab+0xa4/0xe0 [ 355.475131][T14573] ? anon_vma_fork+0x1df/0x4e0 [ 355.479722][T14573] should_failslab+0x9/0x20 [ 355.484070][T14573] slab_pre_alloc_hook+0x37/0xd0 [ 355.488839][T14573] ? anon_vma_fork+0x1df/0x4e0 [ 355.493435][T14573] kmem_cache_alloc+0x44/0x200 [ 355.498040][T14573] anon_vma_fork+0x1df/0x4e0 [ 355.502467][T14573] copy_mm+0xa3a/0x13e0 [ 355.506459][T14573] ? copy_signal+0x610/0x610 [ 355.510886][T14573] ? __init_rwsem+0xd6/0x1c0 [ 355.515332][T14573] ? copy_signal+0x4e3/0x610 [ 355.519736][T14573] copy_process+0x1149/0x3290 [ 355.524252][T14573] ? timerqueue_add+0x250/0x270 [ 355.528939][T14573] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 355.533882][T14573] ? enqueue_hrtimer+0xca/0x240 [ 355.538572][T14573] ? __hrtimer_run_queues+0x46b/0xad0 [ 355.543781][T14573] kernel_clone+0x21e/0x9e0 [ 355.548127][T14573] ? create_io_thread+0x1e0/0x1e0 [ 355.552978][T14573] ? clockevents_program_event+0x22f/0x300 [ 355.558634][T14573] __x64_sys_clone+0x23f/0x290 [ 355.563217][T14573] ? __do_sys_vfork+0x130/0x130 [ 355.567904][T14573] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 355.573717][T14573] do_syscall_64+0x3d/0xb0 [ 355.577977][T14573] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 355.583612][T14573] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 355.589338][T14573] RIP: 0033:0x7fd15e9c4da9 [ 355.593594][T14573] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 355.613034][T14573] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 355.621570][T14573] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 355.629366][T14573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 355.637176][T14573] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 355.644985][T14573] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 355.652909][T14573] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 [ 355.660732][T14573] [ 355.680395][T14573] ------------[ cut here ]------------ [ 355.686255][T14573] refcount_t: underflow; use-after-free. 08:37:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x25) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x25) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000000000008580000000000000000000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x26e1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1000001) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f00000019c0)='cpuset.effective_mems\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r6, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="7722c02ac8ef8e235f4d27c0ffbb198b0f45b4cf1ebf9bb67752b4b8aa123ba82435f2786b2e7b400b7f38401b01d610236ab4e9d1b5c0641568e93f758c83aa11a69d0973f7f871baaa388b8dbce364066c6c3e999ccf1b8a48603b2ede1c60dade1703b3c396edf332b6f7206683530708855730140eaebf74e6eaab63cc", 0x7f}, {&(0x7f0000000380)="e88d193adb113fbdeff75a4f52d5c4af14db2d61b4d7b78e15b95840440a7adc63131f73d7cb4137b7fb6a67a3dba5f4f41e5c8c29a311af87ca68d7e5f3e6ec86146aedb7bd408c43704604b55f1e635991f8dfabfb6b7f40b70381e90907763fc912670d953f7af5223b4ad8cd96fd6f21e8b5f83409c65f033567d16ae2da089dfe478d051a04f29ed94348535b580f2d4e254eade698f817f853ade6e322318ab68e2478", 0xa6}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000440)="933a076dc5a6c6a015fbe27393c454b7dd2b", 0x12}], 0x4, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @multicast1}}}], 0x38}, 0x4004004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r0, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xf, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x2, 0x15, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x2, 0x3, 0x6, 0x1, 0x30, 0x4}, @map_val={0x18, 0xbee29768199e4f5c, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}], &(0x7f0000000240)='GPL\x00', 0x9, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x23, '\x00', r8, 0x1a, r5, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xc, 0x9, 0x6}, 0x10, r9, r4, 0x2, 0x0, &(0x7f00000018c0)=[{0x3, 0x5, 0x5, 0xc}, {0x3, 0x2, 0x8, 0x5}], 0x10, 0x3ff}, 0x90) socketpair(0xb, 0x4, 0x203, &(0x7f0000000100)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) [ 355.721630][T14573] WARNING: CPU: 1 PID: 14573 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 355.731287][T14573] Modules linked in: [ 355.738128][T14573] CPU: 1 PID: 14573 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-00718-g993bed180178 #0 [ 355.749317][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 355.761060][T14573] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 355.767773][T14573] Code: 04 01 48 c7 c7 40 c8 82 85 e8 e4 9e dc fe 0f 0b eb 8b e8 6b 49 0b ff c6 05 73 8e 9e 04 01 48 c7 c7 a0 c8 82 85 e8 c8 9e dc fe <0f> 0b e9 6c ff ff ff e8 4c 49 0b ff c6 05 55 8e 9e 04 01 48 c7 c7 [ 355.787820][T14573] RSP: 0018:ffffc90000db7968 EFLAGS: 00010246 [ 355.794184][T14573] RAX: d7b85649686b0d00 RBX: 0000000000000003 RCX: 0000000000040000 [ 355.802143][T14573] RDX: ffffc90005641000 RSI: 0000000000017c21 RDI: 0000000000017c22 08:37:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r6, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4008, r5}, 0x18) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0xda00) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1d, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfb0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', r9, 0x33, r10, 0x8, &(0x7f0000000640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0xff}, 0x10, r11, r6, 0x5, &(0x7f0000000bc0)=[r7, r4, r4, r6, r4, r6, r12, r13, r4, r14], &(0x7f0000000c00)=[{0x5, 0x1, 0x9, 0x7}, {0x0, 0x2, 0x1}, {0x0, 0x4, 0xd, 0xc}, {0x3, 0x3, 0xb, 0x7}, {0x5, 0x1, 0x2, 0x4}], 0x10, 0x1ff}, 0x90) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x5, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5}, 0x48) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @ldst={0x2, 0x3, 0x1, 0xa, 0x4, 0xfffffffffffffff8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x387, 0x5b, &(0x7f00000004c0)=""/91, 0x41100, 0x0, '\x00', 0x0, 0x30, r3, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x5, 0x9}, 0x10, r11, r0, 0x3, &(0x7f0000000840)=[r15, r16, 0x1, r17, 0xffffffffffffffff, r18], &(0x7f0000000880)=[{0x4, 0x5, 0x3, 0x4}, {0x4, 0x3, 0xf}, {0x2, 0x1, 0x10, 0x6}], 0x10, 0x1}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x4907, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, &(0x7f0000000640)="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", &(0x7f0000000380)=""/13, 0x4}, 0x20) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x2b}, 0x90) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r4, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001600), 0x0, 0x10, &(0x7f0000001680), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x43, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000742e0000000000000400000018110000", @ANYRES16=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000a9e2000000b70500000800000085000000a5000000851000000200ff000aa50100fcffffffb708004d000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000ebff000007040000f0ffffffb7020000080000001823dd678f0bca1ea34eed330000229bd8f8ec166916457406ee9035d033d57ed432d49a3f3733a7a95fc47c07a588ea74bc89bd83be492128c87620b8101c5c5291c46e9e571aeadd715c197e9402f1c851d08046c876419b25e5beb7b8acc3673515539e97a2aa2fe70fd40b5c9dcf0f2e8005c28eb1479c71576e16574fff1e769ed2062f57e9bd602f3be749af564495aa12531dcca998b1d0d3d4db7531fd1be4f8c67de24f45b2c39008d4398cd71e4a29f718f7fa9ea1844ae7f0269ad20f6212cbd1b79dd2ab33587cc8ce7a7cb100000000c1d92c70a16510046ced5ea3b5ed5409fc552e4fac53c98beaf004888094b0b0a25c3ce4987f72cea55724605613c3fa5a01b20ad204ba5fd356c1ad3411b9a93c7d88feccb5f5484eb336f0cd7119b61181969a593baf47adaec0c941af28e6fd630135eb6c83af2d231ff792b2e29df2603590ff32290c1caa78240ab12ac41b618dabb86ad30699d35e9e9808acecfff7461325c43ca3397757ecc7c0ca9ec6889a54648aaee3b5a8dc184d32f5b0fcab79441f72866e8b9f7591e192c22a8edf25f24465e6528dfe353855e91338b92564d48a128658049a5d41573a93ff0602f5706247807e2a53283a2c15afdecc753da8f5e595ed99cef28d93f42908a936cdbb531056be4e26bd8a8ae0c97d21ef04cc799c94e2beb54406b27d957e58ffb914015bf25005eb991cd237fd", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000b6000000b7080000000000007b8af8ff00000000b70800000500", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018330000050000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x84, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0x7, 0x8}, 0x10, r5, r3, 0x7, 0x0, &(0x7f0000000f40)=[{0x3, 0x1, 0x10, 0x9}, {0x2, 0x4, 0x8}, {0x3, 0x3, 0x9, 0xa}, {0x0, 0x1, 0xd}, {0x0, 0x5, 0xf, 0xc}, {0x3, 0x2, 0xffffffff, 0x7}, {0x5, 0x3, 0xe, 0x6}], 0x10, 0x10001}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1, 0x2f, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1486}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0xbf, &(0x7f0000001900)=""/191, 0x41100, 0x60, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000001c80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x1, 0x9, 0xffffffff, 0x1f}, 0x10, r5, 0xffffffffffffffff, 0x3, &(0x7f0000001d00)=[r2, r2, r2], &(0x7f0000001d40)=[{0x2, 0x3, 0xe, 0x7}, {0x5, 0x2, 0xe, 0xc}, {0x5, 0x3, 0x5, 0xa}], 0x10, 0x8}, 0x90) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfff, 0x953, 0x6, 0x411, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x9}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0xc0185879, &(0x7f0000000040)) (async, rerun: 32) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) (async, rerun: 32) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) (async, rerun: 32) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (rerun: 32) write$cgroup_subtree(r12, &(0x7f00000002c0)=ANY=[], 0x1a000) (async) write$cgroup_freezer_state(r12, &(0x7f0000000140)='FREEZING\x00', 0x9) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000640)='%pi6 \x00'}, 0x20) (async, rerun: 64) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r15}, 0x10) unlink(0x0) (async) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xffffff80, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1a, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x3, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r2, 0x1, r10, r11, r9, r12, r13, 0xffffffffffffffff, r16], &(0x7f0000001640)=[{0x5, 0x1, 0x9, 0xa}, {0x2, 0x2, 0x3, 0x3}], 0x10, 0x4}, 0x90) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 355.818913][T14573] RBP: ffffc90000db7978 R08: ffffffff81575f25 R09: ffffed103ee265e8 [ 355.830232][T14573] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110287973d0 08:37:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000000000008580000000000000000000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1000001) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f00000019c0)='cpuset.effective_mems\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r6, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="7722c02ac8ef8e235f4d27c0ffbb198b0f45b4cf1ebf9bb67752b4b8aa123ba82435f2786b2e7b400b7f38401b01d610236ab4e9d1b5c0641568e93f758c83aa11a69d0973f7f871baaa388b8dbce364066c6c3e999ccf1b8a48603b2ede1c60dade1703b3c396edf332b6f7206683530708855730140eaebf74e6eaab63cc", 0x7f}, {&(0x7f0000000380)="e88d193adb113fbdeff75a4f52d5c4af14db2d61b4d7b78e15b95840440a7adc63131f73d7cb4137b7fb6a67a3dba5f4f41e5c8c29a311af87ca68d7e5f3e6ec86146aedb7bd408c43704604b55f1e635991f8dfabfb6b7f40b70381e90907763fc912670d953f7af5223b4ad8cd96fd6f21e8b5f83409c65f033567d16ae2da089dfe478d051a04f29ed94348535b580f2d4e254eade698f817f853ade6e322318ab68e2478", 0xa6}, {&(0x7f0000000900)="f1c0a9aad72dfa73ba1c522382cf7593f3b53061da441fc77ad13ab7c12a353fa979f4694b81eb61e60d8653c7e4eec468ec3753e0f385b8fe36c505f24b3f3c67c0a63c6dc755ba2bb62e27a907079c163a8b1d0d9c896ff6feb0e744ecc1b93c17fec9614cd3e9f519566208643ade3cd3128639d5fa41945e7a4c9daa0391213ab2b2a5e5cead884451f44ff463b45bf6c0033cd3e23bce53ee7ae12ff775ec3df3bf7d0bb641815c45cfdb53528bb755c4f75587e644084ea33c64362105355cecadb891682099f3d4c2e81be516e8722cc63905a2f0a430c8a3ff28ff70340bfbc3b8c1638cbd86cd255a5ee0172fad9ead522705a3c5419cd960b1d37671f5cdb00a8e996dcd610048526b8eec264ff839792d61892d6f43270b9533bcad961e2478e847d6fb11e2e3f2a5513c823d2973e16d41162ad69caab3150bafc42405c26226a855d6bed27c7d4400f7e67afb4f61a2bacd255a326f33294047b818119c4077507340acbf14fdacd6002ec89ba9db08e9dd5cec12c81cb29cc56cf8b7778ca64238da302d96d7e60b3fc0ff57128d83fcd1614cdb3ee882ab5ad5c279130a45583a6be3629c3a5616e220500aa29224f3435bbb38560e984249e506a79abb059bc2726a037af3f34cda5e75a0f62895f57c400dcb9f031fd2e1805015076b2df9c04d315a6cb5afafc9d90bf0efaaa44778f7ab3e8a65e6a2505d3362fdcbb680979ca5ec9844dff28a7af2dfd6b780cd6280356e9587cd60b1277027c6d0779c8372e2677730d1f537f11467880752f0e5d4439fe8fef697f015c6867ccf397d6f64502449904b0e23a717d2eca68457320c65e24aad1436f1b89024d37c5c1674ea787db53fa8bd34fde879ece05f3fca447b63803f32ec7f7a2332e72bc66ad0ebe340daac0b7705b1a34c986b125e406fa03620e1162272ff673cc4d9e23e278790748546ef1ec19460df86af94b44f391ccba788fb1052fa1e1a6bef660de85db21d40ba49777f1df78de170b5463020ecb6a025f7856e15102846dbf7427dc191011a9466d42ed7405351da4e69c8143bac3b9cac249c07cccb6efa60e6c8d53c7a19deb87259a5222ab784b2fb89e640e151cf66e527e666a0986820a1675554f856b16ce34924543760cb726840b33a85679f2f422a42edd720496bdfae6ba268f946de0dc69db374d8a4d4dd42b0012984fb63c17f1975c7dc7a3ff225940dad35b53c005d40b0c99e00dee643e32d9f894a72646aca1b0df1d427363bdc265e5526916e6fbda49713556cdc94a6878df3f0b8ba3b29b766aebe136835fe411db364e10e09ecfbb69d6794b06482b9ffa7af8737d7d9a5fc1ffeff07f5fbf831c9545efc3f1a96c8f573d9436ad5707a3af3570ee378d46f1a87b2ee21604e828e863037456d6c23b5c9d8c8a4ca9cd0e99c40c1a9f051545d973388d4ab77d7e691b28f44ec116f5d92eda442840d9389b12102575f4dbde5bd20746df3e9bad5441c41439d875cc92d5d9ce17421f4fb76834e6499395ba28ec533b5720da73b164ff91b3532dc82c490e3d65aa92ccedfe82f6bfaffb0408f246c7ae89d9a6e64edee3b72f84c7f5d48a1725a02a2340215ee28ce68769a159c6158254ba5d05b40a9557e31a41444c40d0a7e7b0e5d4cbd8284354420674dd2dc41e4cbd11d3efedc6252fba30c331645749ae18bcbc79bd3c69911ce33fa7d089bdcff6e3f4f6cbb34c05292dc7f3eca4b715f7970fb40de77624c7df3bcddaa2e4d154a27456b5cc087c46cda2de6f35dc2966e64a4a9a336aca931fd98080050343e2217d8bb015509d0d803f24b82c1f0771e60e2a1048963067d5ec39fd601f4a14d4dd229a11f4fed2f2d9b0450945aaa8ae0cdc98a5654c5ce38c070db5d73753c88624ab126a4ec8b35f1f78d47f01e4943e73aeb01e701a1d7e3ab59b812d5c20b865241d58e25b735f28aae52bacaee69d44915d4a21290b49fffaff7c6525954a1e55e127c05c8420c7ddd1593abb344ff9e6aeb435652ed80237378ace674553b59841f37a91dc43c2b148c420e50cc81007ef5d71ad81d4c253bd98248164107c7f9147763b0ce11e0c1ecc97c89b9b2b3d68550cd446604b579a672cfb59f026aaf9c1cfa60d260987251b6da083bdf00a68577ed732aed951bf29fe049d345b3b2903163479991486c820a34e5d19e0f93dbfb06f0d602f9417eba214072bfdfe01f1f2bfcf038070aab716fdc41a4e10d19f3be07b7e08925b0e2dd391011040ff7c3777b98118914a5fa445ed9c923f3a277f84a226979cc39bfc805daf5767fd712575e33c487edddc6a55e742c88a9a1224b0a745566f7a23c759f3285158db25cffdbbe113ce02319bb4ed0d7ef49f74bd7a7570740324f233ae6c993f9b9a01e1fd8167e64f9cd22d9b5543d6ac57f1fe8e9ace9a8a5fc29dc7cb4b96f3cf1ed23993565ee9796dc247c1856f5f0c77ceefdc56b7338e6386e4ce5fa5b0954b7f4e2882b12c0f822802d015d84efe5e03c61ada43cd9571c87f8473abc62f9811af9a640330ab6d42aab116e197a4ba20097411699e448827973343d5a44532e8de36f15cd45b2dd33923cb39e57436c9c1fb8cee23557c0bc9622ac00a194de6099349ed4e7e8475041ddb9b43abca1f47414a011d949e31c5b3794ca79fd734ffc3c6eec3bbdb0de28e87bfa00e2de8fb622d39b89e27f13f3309dcda7f98e5279a678a6fb524cc6556cfc0f6be1782a379c2eec9a54995544b11a8915eee4d70d984f9487236e6c7ece047ffaa1a1bff6bbc2d81d0ba2e5e43ba67f3f53a4d71edb3697fb5fc6174650fece44de037ed7383415e65ee936781efeb5086dcc45300a434988cc92ebb34c8364474caa09e262ab9e8b6ddf96d5685ae1a4278efd019dd8b9c91c656d537948b8b13913593846cc7c0d8cfeeb6bb2d9682df1af52cfa822d885adc50b3325e814df942072f4e8248e73b78293d395a6633a733dcc6e7f514034eb32c9f7762253861981528a87c9b9c786c8912387916c456c1fe98d055d0c93e47ec9eefa4727a675046326ff36b06af6dff150e8c75c1a1f0edb80ee29dd46fa515b559812abe79bb8950a5a309e56dd2f86d766710b072f58f4c2482543919498f82e0dd50e2c8de72efa77121bcd47eb7346744584560df8fff3bb43afb5e3b1015a11c35021629faf4b73422e3a37d5664acb668c80a0dddf3ce9751538ff1a3806500d47ad5445749c374a7699ab0779b546453d04666c832061c6a56bad4694eb13d31f61c40f78aaeb457eb5f3f9e2210de885a99e5dad8e9d346313eab17b04c2a8c92fa9dfad183a1c5abebd1b11f02d81f268978903fb1ffae5879638af94301a95481bb09e7a13bc2b9850732a113132854c07347bf9cbbad4709cb173a292a00bb7e76db72ba49f4155155df1fe2b548c7bd403e7d23bcc7b62482a712d04861f9f86bc2e944ed15f3407b7e87e0199b43fc6fb51caa82f18879e2e7063911bacc7a923cd086359ff8d75b1f430c3d84f0c9fdde36b69634ed87e25145cc26f4566359cae22c657cc9135f6a432f8de6b4aafb51955c4193d8087fe2bd346dbd16df9cb157b6bd50f69d2545eea21da2335912b520debccd29907178547b9c540dea525633fe339e3b10e932bcf91931373059b2e54e18341de7c0b3f3320db2c63ad1d35e6c3b21ac2fd212a990277b036fcef10b85b83a42751a9ce5d7492c93f13a06b65a7bd8552662c0e18ef12bebcd719b23c53cc8548febdc6a359eae4bf60606cc1c548c8606e871d267bfacdfd67393c5f4d7c24ee1a219017e63f34219b47f7d0f7ca4033e5dbfd07d467c192dd532bade58f054b66d1af5ea0541fcdc01886d99362f79e4f2f52f8f4fd6018e792b1d3656fede30b3e9fee77eb7ec4110204e3a219cd44b77076fc231f896575101d9d4ba39dc7e3914c3d44a3c6060245bf748663701baf0dd6914452e201c6ed8e5ea1af67a302ca836bc03006b01dc026ca20079a19847b5efa8d3e1c4dd7a5181f8292efc66210ed3c93e2b47612b4e7a1970fbd79b3e3550a99ac5ccd418d5a1e5bd8eb19dc35287aa64a25047b718c4702d11c502eca5e15a3b1962fac97c1cd2c4c293398fb1821eb0e7383cc50c39d82d1827841e0dfd48bde94821c0eef0af5295cb311e98cdfcf442a77dd1451767ca83be20a2c12bd99d9a8cbaa9f4216cadc52d66b956f2d216aafdc437bcd3e6a112756be90e2e19125a127023b11529467d29350c3d1e59800b547869ebd5572a7c40340fd3ccb43036653c8f9d440af1e7c166e299e7a8342be1021a4a46b6fabd8a57fcb0f4dd6f8e28d01540f68a39eea0f4a207167adf11a8c2493f5f1b8a03cdc55f7fa47440f3ca58e002c8f2d6ee0193f99d72169d3a552ea86c8df764f2425bd0742e51bff2c642b2b0aabbbd4904477deb69ce66b1a56985709c5f46a42bd6e3a204954ca80b630ce7e7814d56a2468b41218dbe38f3c5510d6a40610fe38c6c4cbaab5ff82781efaa4a421c3b0fe83801300afb74242a051f4b3bc0feb59d43b838f57807b2667edccadfa20cf8c8bd989864f6218bc6c1605ead4502eb80379ad5e3fe02787f5f5b8200aef59251485333ccc75e501886efdd79a5cc8411b6de94cdf66fd1c81c2fe0ad29795de24d114230b7724029abfc9cc0af05161f16b3072e144d59b634c518afb74f63f772e2ab0a2f5c6a3a6872da3ca9a3c3a3e9c1866650d09021ed5665b60a583471af5e67232c2d44da892e3cea8fbb39889b595fb40f2381a6207231483141608b60a448689e1052faaeb9f900f2cf040514d70fbeec96ce04327b5aa745b0e4588f1a6e0795b7a9d7756989f7faeefef9fc7ae9f56f83067e26e2f5937f6d76148b4005e8c6a75942d059c3bb4de3c64e2d98bacac0c8484cffa704f8ca829c88ffcb629d97c84f797f335cf7e1671fe57e9ef2d37e691c4532de33136fe83c7b31b9b996db363f4d7b9933af28c689a06f359bf1b60f8010f7878f200f70fd92ba74db8910adeda31d3397ab20d79a00a368faefcb443cfa1ddd693a85cc6bcf7619952dd91201817308abc9b22cbb5d05a0fbbd6441dc8dfb7dac20b9d2e8dfd1081b1661a5590a0db2bd90225a8c34457c1297699169c467dd293ec251122c1272f183eff035abe077393bf5bba95d3c6571b7f6b6e0784ba53432efa3b3a61c2b51dec0855907439196d4ab137633c8338eaf0b601089ea3e5c50d5fc72e8877e81772fb4a1bedaa4da6a85c1b95688b991b5eb9cea0c037b158104423b44398767118c6621ddbd8c064bace659703af450af35933b5c5166b49a5e93bd9b26901cb10c723e7d429d2ea4235364a8b7ec55198ef2c81ee7c5eb4fea28bec1b19f309765ea39853042b3502ec50e315ae37a4380c3045c7fe80339b829a057994bdde101470afe5a6c7abe4d715c936a4c0d9320418160ecf5195abf548df3a0396dc30bb46a537dc8f751ed4de4afae65d61176337d6529fe6fd709804cd95597acca19a9bb15c1049dd833e86038ef29a105c139b66a610916e07b69a31c4fd76fa11460e148fb25e1ede6b347ad779291a2bf60b7366db957a13cdf8525922f56badc404a99a82728ec1c1f750e31e72290aab16ad2211bed0bbbe64d29fad1222fd64e9798b60c7c18401847502b394643a84a7a644918234bfc814ee89aa8fbf666ef7aa0c5eb5ebf794d9daa0610958c3412f0655048209e119967ffe8cdd51bb0d845987", 0x1000}, {&(0x7f0000000440)="933a076dc5a6c6a015fbe27393c454b7dd2b", 0x12}], 0x4, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @multicast1}}}], 0x38}, 0x4004004) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r0, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000400)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xf, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x2, 0x15, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x2, 0x3, 0x6, 0x1, 0x30, 0x4}, @map_val={0x18, 0xbee29768199e4f5c, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}], &(0x7f0000000240)='GPL\x00', 0x9, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x23, '\x00', r8, 0x1a, r5, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xc, 0x9, 0x6}, 0x10, r9, r4, 0x2, 0x0, &(0x7f00000018c0)=[{0x3, 0x5, 0x5, 0xc}, {0x3, 0x2, 0x8, 0x5}], 0x10, 0x3ff}, 0x90) (async) socketpair(0xb, 0x4, 0x203, &(0x7f0000000100)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) recvmsg$unix(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000001bc0)=""/237, 0xed}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f0000001cc0)=""/117, 0x75}, {&(0x7f0000001d40)=""/71, 0x47}, {&(0x7f0000001dc0)=""/109, 0x6d}, {&(0x7f00000005c0)=""/43, 0x2b}], 0x7}, 0x2) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r4 = perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x10000000001, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x100101, 0xa, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8d, 0x0, 0x7}, r2, 0x6, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r4, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x2f, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x24, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x1f, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800ffff18110000373c87f689d2b86c2cc304762c20a2434304dadead4a3b33028670cbc538b322665c10ea34fdf24592ea1cbf76bba1aec4eb4a971934dd6adc15262aee68907ab068683903351b3105eb5047145e857b0eee431686ec3c061c3628d84b0e6835f14120e9757393ece407405e192d0630e8e0b05421f9c9f3ba79b698b03e16f780dbb764d573b054225605229aeae1dfbdad53732db17ebd7b56aa73711b14a64b1ce68c9d0917f82ffa5e7c5f0afb48cd2d17f67ea1ef59e285608a0030", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000004000000186b0000080000000000000001000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x77, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x10, '\x00', r5, 0x0, r2, 0x8, &(0x7f00000018c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x4, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x42, r7, 0x80000000, '\x00', 0x0, r8, 0x5, 0x3, 0x0, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) [ 355.869509][T14573] R13: ffff888143cb9e80 R14: 0000000000000003 R15: ffff888116c7b3d0 [ 355.901482][T14573] FS: 00007fd15d7466c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 355.928444][T14573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.941825][T14573] CR2: 0000555556b35788 CR3: 0000000126933000 CR4: 00000000003506a0 [ 355.958505][T14573] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 08:37:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) recvmsg$unix(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000001bc0)=""/237, 0xed}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f0000001cc0)=""/117, 0x75}, {&(0x7f0000001d40)=""/71, 0x47}, {&(0x7f0000001dc0)=""/109, 0x6d}, {&(0x7f00000005c0)=""/43, 0x2b}], 0x7}, 0x2) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r4 = perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x10000000001, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x100101, 0xa, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8d, 0x0, 0x7}, r2, 0x6, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r4, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x2f, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x24, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r4, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x2f, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x24, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x1f, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800ffff18110000373c87f689d2b86c2cc304762c20a2434304dadead4a3b33028670cbc538b322665c10ea34fdf24592ea1cbf76bba1aec4eb4a971934dd6adc15262aee68907ab068683903351b3105eb5047145e857b0eee431686ec3c061c3628d84b0e6835f14120e9757393ece407405e192d0630e8e0b05421f9c9f3ba79b698b03e16f780dbb764d573b054225605229aeae1dfbdad53732db17ebd7b56aa73711b14a64b1ce68c9d0917f82ffa5e7c5f0afb48cd2d17f67ea1ef59e285608a0030", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000004000000186b0000080000000000000001000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x77, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x10, '\x00', r5, 0x0, r2, 0x8, &(0x7f00000018c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x4, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x42, r7, 0x80000000, '\x00', 0x0, r8, 0x5, 0x3, 0x0, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) [ 355.989707][T14573] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.999960][T14573] Call Trace: [ 356.005531][T14573] [ 356.009476][T14573] ? show_regs+0x58/0x60 08:37:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000270000110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183800000400000000000000000000001866000010000000000000000200000018240000", @ANYRES32, @ANYBLOB="000000000700000085100000020000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0xd3, &(0x7f00000003c0)=""/211, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x1, 0xffff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x3, 0xf}, {0x2, 0x4, 0x8, 0x3}, {0x5, 0x1, 0x10, 0xc}, {0x2, 0x4, 0x7, 0x6}, {0x72, 0x2, 0xa, 0x7}, {0x1, 0x3, 0x5, 0x2}, {0x1, 0x4, 0x4, 0x8}, {0x8001, 0x2, 0xa}], 0x10, 0x7ff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=0xffffffffffffffff, 0x10, 0x0, 0x9, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x81, '\x00', r3, r0, 0x4, 0x2, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@ifindex=r3, 0xffffffffffffffff, 0x23, 0x2000, 0x0, @prog_fd=r4, r6}, 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r7, r4, 0xa99638501506d767, 0x8, 0x0, @link_fd=r8, r6}, 0x20) r9 = openat$cgroup(r7, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000940)='devices.allow\x00', 0x2, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000980)='cpu.pressure\x00', 0x2, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r8}, 0x8) r11 = openat$cgroup_procs(r10, &(0x7f0000000a00)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup=r5, 0x35, 0x1, 0x1, &(0x7f0000000a40)=[0x0], 0x1, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@map=r10, r4, 0x22, 0x24, 0x0, @prog_id=r2, r12}, 0x20) r13 = openat$cgroup_procs(r7, &(0x7f0000000c80)='tasks\x00', 0x2, 0x0) r14 = openat$cgroup_subtree(r5, &(0x7f0000000cc0), 0x2, 0x0) r15 = syz_clone(0x40000400, &(0x7f0000000fc0)="34c157bd19d63c12d8dc01a0f36e7561a49126505d694d3449b8e81bbc34885083c740231089a0b23fdfee13c42a9e1191bd709924576299f807036cd8b27c7c753c1b1612dae6f19801570e4721972dfbc5e89f12897ca1dfae4f31db98c0b97ce594eaddaa0783560038b4060c1de811e7c686d53829de91bd36171949db0494ab71447ab33a08f9b121f2eef02c53a49015fd60d62e58ae9f026697d43f4ddec7050d8bb2437f56b494487a95a5571721d807b88d181b841c1fece835f41ca0cc32", 0xc3, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="5e2a8ab94cce810527827f77049c4f15c6dcfe7364b6ce38e460de22b01790a9e0ebaeed") sendmsg$unix(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d40)="f9e0d1d0528ce39e9a75d1dd22bc1e66de4d754e39b4846acacde1e8a98560c7d8d47a2edd2d797b32ab98", 0x2b}, {&(0x7f0000000d80)="1ed2b949bea3ac25fbe9e25f8a1bf596dd539eff91d3d282e13589e136be39464f71973aa1e72d7aa4067bf48cf12f77274a1c1109c8a2d6db2e308b", 0x3c}, {&(0x7f0000000dc0)="7600e327e3d7bb5b13fc52cf58605cc444beacf53b294f", 0x17}, {&(0x7f0000000e00)="b1531615c378e9aa644841833f026abdebae9e3685404744e8cbc4f119eddf4fe327956555450fd9d706620ab099d2c58248f853d5afb726708217713b56458adfd3595ca77d4b2f2545491826401809281c33addc4122e545019745ebf2b2575ffe2911bfe5a210eb17216ca47be8fe7067af795f15ad0d92fcf28ff791bb77d99db4", 0x83}, {&(0x7f0000000ec0)="5c99e84c3663b91f7dde4d4c6ef35016ae59717a814ef20e2fca96554689c1cb74c6d4cfdbdc553722596924f4ddcd2755605ce2a9ee53c2022ff0284d84a467464b9ae26ab66cce8357781e4f31e772ae1e1360df1ffa1b989bc9f257a459663d34b63815a2293b1815cffd2b", 0x6d}], 0x5, &(0x7f0000001180)=[@rights={{0x1c, 0x1, 0x1, [r11, r8, r11]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r13, r9, r10, r7]}}], 0x80, 0x4}, 0x40000) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000bc0)=r1) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4fa8, '\x00', 0x0, r8, 0x3, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x18, 0xa, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @map_val={0x18, 0x8, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001340)='GPL\x00', 0x9, 0x1e, &(0x7f0000001380)=""/30, 0x40f00, 0x0, '\x00', r3, 0x0, r10, 0x8, &(0x7f00000013c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0xb, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r10, r16], 0x0, 0x10, 0x8001}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") [ 356.039393][T14573] ? __warn+0x160/0x2f0 [ 356.054569][T14573] ? refcount_warn_saturate+0x158/0x1a0 [ 356.076817][T14573] ? report_bug+0x3d9/0x5b0 08:37:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) recvmsg$unix(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000001bc0)=""/237, 0xed}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f0000001cc0)=""/117, 0x75}, {&(0x7f0000001d40)=""/71, 0x47}, {&(0x7f0000001dc0)=""/109, 0x6d}, {&(0x7f00000005c0)=""/43, 0x2b}], 0x7}, 0x2) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x10000000001, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x100101, 0xa, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8d, 0x0, 0x7}, r2, 0x6, 0xffffffffffffffff, 0x2) (async) r4 = perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x10000000001, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x100101, 0xa, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8d, 0x0, 0x7}, r2, 0x6, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r4, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x2f, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x24, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x1f, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800ffff18110000373c87f689d2b86c2cc304762c20a2434304dadead4a3b33028670cbc538b322665c10ea34fdf24592ea1cbf76bba1aec4eb4a971934dd6adc15262aee68907ab068683903351b3105eb5047145e857b0eee431686ec3c061c3628d84b0e6835f14120e9757393ece407405e192d0630e8e0b05421f9c9f3ba79b698b03e16f780dbb764d573b054225605229aeae1dfbdad53732db17ebd7b56aa73711b14a64b1ce68c9d0917f82ffa5e7c5f0afb48cd2d17f67ea1ef59e285608a0030", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000004000000186b0000080000000000000001000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x77, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x10, '\x00', r5, 0x0, r2, 0x8, &(0x7f00000018c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x4, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x3, 0x9, 0x1, 0x42, r7, 0x80000000, '\x00', 0x0, r8, 0x5, 0x3, 0x0, 0x6}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) [ 356.103720][T14573] ? refcount_warn_saturate+0x158/0x1a0 [ 356.132680][T14573] ? handle_bug+0x41/0x70 [ 356.156836][T14573] ? exc_invalid_op+0x1b/0x50 [ 356.187199][T14573] ? asm_exc_invalid_op+0x1b/0x20 [ 356.220486][T14573] ? __wake_up_klogd+0xd5/0x110 08:37:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 356.249614][T14573] ? refcount_warn_saturate+0x158/0x1a0 [ 356.285156][T14573] ? refcount_warn_saturate+0x158/0x1a0 [ 356.321477][T14573] vm_area_free_no_check+0x123/0x130 [ 356.355183][T14573] copy_mm+0xefb/0x13e0 [ 356.382544][T14573] ? copy_signal+0x610/0x610 [ 356.413862][T14573] ? __init_rwsem+0xd6/0x1c0 08:37:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r7}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r6, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4008, r5}, 0x18) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0xda00) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1d, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfb0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', r9, 0x33, r10, 0x8, &(0x7f0000000640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0xff}, 0x10, r11, r6, 0x5, &(0x7f0000000bc0)=[r7, r4, r4, r6, r4, r6, r12, r13, r4, r14], &(0x7f0000000c00)=[{0x5, 0x1, 0x9, 0x7}, {0x0, 0x2, 0x1}, {0x0, 0x4, 0xd, 0xc}, {0x3, 0x3, 0xb, 0x7}, {0x5, 0x1, 0x2, 0x4}], 0x10, 0x1ff}, 0x90) (async) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x5, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5}, 0x48) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @ldst={0x2, 0x3, 0x1, 0xa, 0x4, 0xfffffffffffffff8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x387, 0x5b, &(0x7f00000004c0)=""/91, 0x41100, 0x0, '\x00', 0x0, 0x30, r3, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x5, 0x9}, 0x10, r11, r0, 0x3, &(0x7f0000000840)=[r15, r16, 0x1, r17, 0xffffffffffffffff, r18], &(0x7f0000000880)=[{0x4, 0x5, 0x3, 0x4}, {0x4, 0x3, 0xf}, {0x2, 0x1, 0x10, 0x6}], 0x10, 0x1}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x4907, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 356.448275][T14573] ? copy_signal+0x4e3/0x610 [ 356.477182][T14573] copy_process+0x1149/0x3290 [ 356.508163][T14573] ? timerqueue_add+0x250/0x270 [ 356.513247][T14573] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 356.519445][T14573] ? enqueue_hrtimer+0xca/0x240 [ 356.526836][T14573] ? __hrtimer_run_queues+0x46b/0xad0 [ 356.533103][T14573] kernel_clone+0x21e/0x9e0 [ 356.538665][T14573] ? create_io_thread+0x1e0/0x1e0 [ 356.544165][T14573] ? clockevents_program_event+0x22f/0x300 [ 356.550606][T14573] __x64_sys_clone+0x23f/0x290 08:37:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 356.555697][T14573] ? __do_sys_vfork+0x130/0x130 [ 356.561336][T14573] ? syscall_enter_from_user_mode+0x19/0x1b0 [ 356.576349][T14573] do_syscall_64+0x3d/0xb0 [ 356.593453][T14573] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 356.601215][T14573] entry_SYSCALL_64_after_hwframe+0x61/0xcb 08:37:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r6, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4008, r5}, 0x18) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0xda00) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1d, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfb0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', r9, 0x33, r10, 0x8, &(0x7f0000000640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x2, 0xff}, 0x10, r11, r6, 0x5, &(0x7f0000000bc0)=[r7, r4, r4, r6, r4, r6, r12, r13, r4, r14], &(0x7f0000000c00)=[{0x5, 0x1, 0x9, 0x7}, {0x0, 0x2, 0x1}, {0x0, 0x4, 0xd, 0xc}, {0x3, 0x3, 0xb, 0x7}, {0x5, 0x1, 0x2, 0x4}], 0x10, 0x1ff}, 0x90) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x5, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5}, 0x48) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @ldst={0x2, 0x3, 0x1, 0xa, 0x4, 0xfffffffffffffff8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x387, 0x5b, &(0x7f00000004c0)=""/91, 0x41100, 0x0, '\x00', 0x0, 0x30, r3, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x5, 0x9}, 0x10, r11, r0, 0x3, &(0x7f0000000840)=[r15, r16, 0x1, r17, 0xffffffffffffffff, r18], &(0x7f0000000880)=[{0x4, 0x5, 0x3, 0x4}, {0x4, 0x3, 0xf}, {0x2, 0x1, 0x10, 0x6}], 0x10, 0x1}, 0x90) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x4907, 0x0, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x48) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, &(0x7f0000000640)="13ecbea905ce80b198d1d3d74de7c4842032db0428f257e2261f2e2500192d3a104614e1d434b8980ba11aff4dd614bf7ebd7c81158dd2c18f12afe2cbcfad44f4aa67ec0acf854af2632fe8241025b283842b581476f35050ab7773ded0e726c2625e0bb73ee91f436d3236bf294112c6fb54b2b66e5fd37ff1afcf9c56aae00f5e510d2bdc963eb5669d0ed28bf8ab0d34c57b60765fb291dc97de15c44c9ce9691d15bccc0b6754a19c264b3f76401f90ac2ae5a9190a2ae3a0c91b04d5baa791433005d157ce875e12ab099d4b86b756f16bdb67f5fe8e2a8b299c4d885c9ddab3977fac571822d8d42058a718e04099ea94aae46c72a14b500176fb8f209d0024829a64bd91d89e8b17044a49ffc07010d83123233ad9ec27018e8679a48cda48a4e8b63adf8d0d291785c0e8da32701c564bb10bb17a9d756baa01a5e22e36db5cc31052f67fafe81918e6b1fa05d7956b115f03c94a92ae510f84abdb97af879e7aeb82088cfb3c0043fbb7fbc8196d128e3634c8b9c12360d0543298c61e934d1c6604d46e51a4db7405bad1be98563190b99e6ffd8e472a5cce95ab690b2a9c73be0e8faafa31cba025a3e932b25ae018e12ffbc0a02c7e12b0d4c5694c46e14efed11a1628bcb1b612fea19fd7803572eb71e9b6eb5bfa7104fdb8d17edf1178b6f9ee8cd053229da35885446a5f8c879c1c3f0855c9ee1902954e3f830b544052dda7e53f88037de2aaebbf6dd910786a39147d9e036075679c898ffd9de4023dae64db9024c3c0f86740fb7f344c41d9a0b221f1b7d462fa28e277127c58f0bbb767fe06a3fa3078f90fc78b452383afc83e4468f4c57f23f9c4e6c4809b3a92119c9a1d6afb38d309cc0d73b4b091d2cea927bb203c1a7136c742dcfa424747cf406ad3c07137e513b05642a0a8daee2893e71e3370ab214aaf7c25856101160390d22d766c3b8180182f94633e12670f5e3a226d109b874c654c90bd121f02017368f3d7eba854c29ac0befefc50add2500bc6f7590761f20e00f1e5ab11082a265053f92e8569af0aed97f94087d8698bca24af69e7ea4041ef627f1c58930371e1a47b152d9043b5dfecaef1fe5a5c078a8609a307529d527c039edfe2d038c07390490dfec1ed54df8168784cf73c3c8f66bac0114955051baf17b3f898f1c38af612107b7adb697b61a6273d5c2d59b24e081af6c098960fec0ddf884041a0dcd07ff810c822b935f79db1be5dccea88c21ff882b27795a656179d67cbb15bb751d3a6fd024b68375f3246f352f849dddf3f6a73ddc742e6329f64b92de5a743cf374b565c1c5086119196c004e04e23807e85f0e65c18c8b733de29946f9c597623b10b5283147eb9a34c4854cbba348c53a740dbed89b9530b1a62548240a2afa16c5ec233b0a757227665af7728b4977e56fc1a15181618336dff96671485fbef4f8f8bd372f4494398fe888ec3120d238ec50255ac0125cefcf0cf74732f4737c0b606f43c29fd3810cb53baefaccf8aba11fb7abed2bf92e12f45e5c80de389576469cf996f7b3b9e4f15d8fa1954e42b1211c91bed87b6e77a1a0413983b5185fda1ab5704e9fc8649c155bf3ee030f560ad52b2b6d3dc9fef6dc2a77bad86dff1e9f37315dba25976087dd24d6e2636a025e4c37ab4b82301abbaf65081d96fe36cec8fcd2c552314816b2a103895b76e4f21031407accb28d2a17b6b8d7cb758f9b36a8c7d68c4b0f83e97577ab33d22421ac5f179fbea941894358ef5fe8b8d548b44cc59fce6098ae7695fd51f4d8ea971afd62cb8248c684049552a03b9d77d3245ac7a5746d40ef4a236f20b8bd7dbf11f03b25c629a00fbf7b6e9f9cce3889c166a00221ea9c2207f3927a03e22a914f42d0ea84a19f57a0a42a5fd0f24c1066755ccff1ab999d1afedbc4c7142a4abbefcef9894315387b99f946a12bb56c6a9089b78b441d7228e99a2df59d89af3285aa2c9df578282c84f88ee2eb64d0132331e4b28962ba9520e356d972846ef0e222c8f9bf168cc08c95f7ea1b07c8f5f2521dcf57f2f046d45599ccf2f7b03fc7bdb0bde63562148fa9031a57f910856fbb1b86b29f5bd2a3d8a85fe6ad08f5ac0a41acf8f6253f5e92a20b03f6eab512524c0ef3d8c627214cd607168559672766cbdb514ef322b39972176aaaaf9f7c067c379296db663cad4b0f4a03495fbfcdf5881db43aa4e1859a417de5bf070d9a6ffa5b765bb30830a9139a7d012556a761a84722b03c22fdb93ff01555abb4b50850df9901e2ea2c1fbf9293ad91c7f8939ffb020ad56abdd0cdbfc1517a0083f87961cc01799c7c2232f141102c7ced6976883b54b51d6d062955fccd61c2693b2943311712e97d942002a300cd4f1c6007b6e7cf4b735978cd201f7df5f8a5ecadfb0ca62e55dad8a91b27a977ce6db09561084429da896df9970dbd307e6786255a0b91560292b859152d143bf29d750a8d8eb9c38d7c36a76e75d44a43563fd91d70d34a0630f60c1d623322506dd47c29af883b2f3ed3d43de55e4649ecb8fd1367f194263cf4e90c6cbae0dfe6d32ec4bcae822f1468c09ee539e227864a4097919db02c9cc97c759f821e2ead49193bd4b9a492582951e8e3314deaf665d240f5a9562984f2921a8720530e8037411763ada7459a57bd3775c7f8696d6d00d0da5c2e449b768e4b7ed351a5264a2219718b7cd82c18f06b8b1276dc7f0f4412ba3358578760f843f74c0042bceddcb8aad1cb4d394e967c1309862a0f1e0ba143f2ce2738108cf77adb6db4e22f2fc3237840179c7bf46e778239f185f8f4b2e3213dc3f87f0b73363042eaaaf58b9d7228165e8185a3bde540477de7500e7d3823eaa6d455b92bdd76c66d0c5feeff9a416fe00e1b0113d66835847e3d2c7f19f65c80b8fbd6dbee151603fa9aaf32858c814d29474cd21cf22aabfb7d85be108f425ad7744f6d97dad5fc69334346bcc0ec42dea7dd635044a4606aac4cf1f1fbeae1785f3fe7325a58a4b6c1b71144185cff9bac5d3cca169c598ab7c9e7f2d9ea448099a1c070c577b66ee57ab51b8f4db3eedce463fa75e0ec05209598752483bd814fb37d7cb0692e4e275676d2e6664600b7610da99300b54b0dcd75ca9dcbe76cf8e12a19b4c17ebdaf191dbc295d7bf805c05e58e4dbe1bd6b90fbc49d14bc49df7d457ea40f276b0c813017983e9aca21d508409802ac15c448bca4950193f2b18846ceb28f53ddef16e64c8397342fa175d8a9c36f6c59ba5afb95c8973ab8b73638cd5e26a33513ae34b343c0d5fea282e4991e938d8a1ff4aac3eb8f13f5725c79f658e4b810f5fb1477d40cce917ee2c541d22e3c3c3240c42a06d71d38eab54fa682a51234d6c5fc7a3d2b19c55c8d15358894456da3e52f02e84e89e474a8c9e7baf6833ca97c86967508febd512886fa62fd0e00af8d0c52cbabda8d5b4283f608948e351e5c7a5219b6ebd6e32896aecaab5f8410785c20291feb38a2d1e82dfc9180fc9c25311371d3564f1a3056f2022e2eebce7fe369ea7de8e276413f31aa8a023bdf850277317540c54a3af857f5708e36bf1f3b636fefc60bc275cc4450dacf99e28cf39e7fd24ae2892dab4044dc8e71e9806ae90aaadf54ac98e0b40788418b797d7e73e5e033a6bd15adbb074fbcac39c68155e107c954fa25c924dbf93e8315bd76d2ea3a1099993041ba3dc6cc182f733338528ae1144a9ab03c084f3a9c1b21db0589e6d5383a0e8ba7ec07234f6145dff2c6bde4159c287b3a5b8c9ee01ce66aab842567d13156c5bc1256e200c2678d05d8dfd062fccec061d06f563153f639dd3f0e7a725acea2d89a68ff2a82105e763cfb3f3b16ca6ae1077f52214b21bc647d28ab8795dfac0eca561c38c674181afdc663efe0daa12c69c88d1466739b62b79e5cc5d6ea4bb512968f22d167fa270aff068078b7b7a8c113cea59d25f221c9b5f08d6cc01f5f451625cd675847815a573f43d3b3375011c39a2d8af73c84468692e5250af1c59ff935bd2c65321b98922a0313f29451ca2ebab92d69de29947bd1fb3a02765127881ef2dbd2620bd48e3cc221e00ef4399194ab2f05bfc6df96aa828a2344839b7498e4e716c7a39cb4af8c7e62cbe9ce8f4c36ed95f923b3acbc96a870c189cdd916bed4c7aa463aa82aea3dab4d1e90da67d7fbd6ef611297614f45c20092801c9b9872181040a45c4765379a75258dacadd5e07e8a8ba156c08bc83bffe3855ced06167a3494a3070d20205fc756f55d82c5b54d0a9d13fc73b51877d5141977d93c9172d6671e922ba8086ad0445990dbad8f5bca03ede6d5e9b91f66724420a7df1de9561b31b4ee936f54fe1bf0c612b1f2987bc954b09659742aa5497e40bf58ad7e6116f23f791936643c9c4f923505322eec7390d967743e1c5a89d2486569d868dd4e095a87a4610646c73be721f18fcf70d1ee1f60c5efcd2053d0c8137e3b89feca61befb572b7ad74c0becf01262659aad83c06b5ca21c2dc3297b3b760d7efbda3b8d01b6cc61a5ad82fc5c2c6c4b9a94804b41b41a7f658ad56ce2875b3f1f41ebf3bbbbea05fe18e1caa8a6ca5d2d9a3779947163c342512cb0ec1f1bc0614149956c5cb433664b70243cf9ec8115c8ca1ae83e76f61bd9add75e453d4252e36ce45f7073d8d9b5737fa92d22db40056599148676bb337abd58bb5dbdddc1f70f2d21ecb424007de1a641f2f0da5dd333ed3c84730b53c8621d0ed9361aa3698fb8a0872425571f020b5515dc48e118b54ef5400372295f32dec5067d2c55f7729769e02be5c51bad90edf29fca9aa6f409e7e47480659bed61b48959d740db291d533479272d42176af5ae75781e3541049420521d406745419a2c87a471234fbdc38f5f367df7f1d43458efeb9880561d783bb932c2cd2591ff280ede576f12cd0d639429739f2c7a18119d0b05eee8868645df2e89998d8aaf8fcd81f0ba5ed70602e42fad00e078e7d9b504e424fdf62c04dd75cd342486d311b196d74060e4f515e9c404aca415bf5a2c1ca3758ace33a532847b69c20f081b45332be461bcfe4c20ebd0b1176b2eabdc3859734dcfa8ea28b40785caceac686d256f00ea410d6ce43a524915f4e2b42630a7c765f37db8ff09397086eb37f688a2afffaae0f70daae3b672e00e8c4452373033ee4881130f8268193c55600bdbe5d5cc6be2ad4739629c5661f013b721c590a58bcf76d76f1e60ab82c6b3932cd69f1074ba2dca849eb990097a56dc4b741811fcb72201aba9c04030574e0cc1cd29a1eaddb1e931f009feb457937ef77fa0358e8382fd30c47d44673ff843ab8bc577add3dda1b0b67a95868d9d01e5683f848aca23a82f11f2d68c1beef548b0ef2fb1fface8667313502080b34f6d4c2b678bb2a91f954f5eea19969d0a893b6e9f79368a1dab309d5d247ab5c27862dd536e062e520f633d0d62038a3a6c4d899308ba2c6d2d8eff87a9f7c898e972fe391bc28f8452f013f010644a2ff6892404abc563f181d8bebce020186ad1c8a81588cf677db8ee5e73dbab6c3a22243e3f5110254537000049cf8e4860e639b919b9986710428d3b0e7360c949c1d53f105e2c469afcb63d72b6e7ec8fec0dff446f6a0a313cadedec6ede70c3f8916b8ab956a75df770b57dd12e59ddc75c641dabd2c22669a79be75078d0ed46384ac952e1c80c146e1694af5cde6dcbb9c1167c31f43fcef12dbfd710aa24b6668b8f325e5972ee9d09e4bab07", &(0x7f0000000380)=""/13, 0x4}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, 0x2b}, 0x90) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r4, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001600), 0x0, 0x10, &(0x7f0000001680), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x43, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000742e0000000000000400000018110000", @ANYRES16=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000b6000000b7080000000000007b8af8ff00000000b70800000500", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018330000050000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b00)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x84, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x4, 0x8, 0x7, 0x8}, 0x10, r5, r3, 0x7, 0x0, &(0x7f0000000f40)=[{0x3, 0x1, 0x10, 0x9}, {0x2, 0x4, 0x8}, {0x3, 0x3, 0x9, 0xa}, {0x0, 0x1, 0xd}, {0x0, 0x5, 0xf, 0xc}, {0x3, 0x2, 0xffffffff, 0x7}, {0x5, 0x3, 0xe, 0x6}], 0x10, 0x10001}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1, 0x2f, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1486}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0xbf, &(0x7f0000001900)=""/191, 0x41100, 0x60, '\x00', 0x0, 0x21, r2, 0x8, &(0x7f0000001c80)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x1, 0x9, 0xffffffff, 0x1f}, 0x10, r5, 0xffffffffffffffff, 0x3, &(0x7f0000001d00)=[r2, r2, r2], &(0x7f0000001d40)=[{0x2, 0x3, 0xe, 0x7}, {0x5, 0x2, 0xe, 0xc}, {0x5, 0x3, 0x5, 0xa}], 0x10, 0x8}, 0x90) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xfff, 0x953, 0x6, 0x411, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x9}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0xc0185879, &(0x7f0000000040)) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r12, &(0x7f00000002c0)=ANY=[], 0x1a000) (async) write$cgroup_freezer_state(r12, &(0x7f0000000140)='FREEZING\x00', 0x9) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000640)='%pi6 \x00'}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r15}, 0x10) unlink(0x0) (async) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xffffff80, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1a, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x3, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r2, 0x1, r10, r11, r9, r12, r13, 0xffffffffffffffff, r16], &(0x7f0000001640)=[{0x5, 0x1, 0x9, 0xa}, {0x2, 0x2, 0x3, 0x3}], 0x10, 0x4}, 0x90) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 356.628156][T14573] RIP: 0033:0x7fd15e9c4da9 [ 356.659237][T14573] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 08:37:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18927b5673e6531f4100000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180095000000000000000000000000000003006f82c84c27e9f41da5b33d020b0836eb2a1ec9bc7186143e6c09a3f40bae5951f6881799c918eb4db84b03b1eb22261541c882b9ea9e83d0de4c315b163b7f7d1248d173c98ebb4e332b2c070bbd9b030050c60829400213992dead446544c350c61dd6c0f4b2d815e0e510aff346f9fe27a591fa2c69cb6fd8651acd47b85796d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = syz_clone(0x1101200, &(0x7f0000000380)="7ac8263b5656fff387d13121f4fbabe003f9164ccecec7a6967f029325e4c4ff6f2a818c0110d17417b35482242f5468e6e5c13d866f2769e9d78d2001d121d2c5b199d93089241dc73b7af96fcdbac963567d28040ad444f1e29ee884ffe7a5a5b783bc112ea33895c8adfd8ee8fd6d5e39d1bb13f6de046d3a5cdd9e7a59200cbff1e5fae6a5edab10c61c8ab280e0f327e10564c1afcd49328cd60f0706feef784e57ca50a6c2b0bb9ade4ea071430736583f67", 0xb5, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000440)="597f5064787dc7ae0b11de82505b4f1f29480e4563e5ee1490de091cb86aedc44a5bcabcd794ec10df820b4f000eed4936aed654d3a2d547485bd6c9e1c1e0d8c1a58304c43685bf159394bd77f0682429d8c31e4c214dd15462167bf40349ec0ac65cdbe51ef3861608a3c65dd1c9ba0b6e7d26ee227d2100454a8609940b7ebdaa458ee83cf7a2c91d057068f262e8c694b8907aa45abf57bd7359621fb756c2c437f8894cf174dbc99706743ab1bf483cb7af763bfa0e0ef759dec52e1866a09e4fe83083860c98ee97a261275fafa1aa920804389baf") perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x5, 0x9, 0x7, 0x0, 0xffffffffffffff01, 0x90800, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x17d, 0x0, 0x4, 0xfffffffffffffff9, 0xad0, 0x100, 0x0, 0x1, 0x0, 0x7b9}, r2, 0xf, r1, 0x2) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000270000110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183800000400000000000000000000001866000010000000000000000200000018240000", @ANYRES32, @ANYBLOB="000000000700000085100000020000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0xd3, &(0x7f00000003c0)=""/211, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x1, 0xffff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x3, 0xf}, {0x2, 0x4, 0x8, 0x3}, {0x5, 0x1, 0x10, 0xc}, {0x2, 0x4, 0x7, 0x6}, {0x72, 0x2, 0xa, 0x7}, {0x1, 0x3, 0x5, 0x2}, {0x1, 0x4, 0x4, 0x8}, {0x8001, 0x2, 0xa}], 0x10, 0x7ff}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=0xffffffffffffffff, 0x10, 0x0, 0x9, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x81, '\x00', r3, r0, 0x4, 0x2, 0x4}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x81, '\x00', r3, r0, 0x4, 0x2, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@ifindex=r3, 0xffffffffffffffff, 0x23, 0x2000, 0x0, @prog_fd=r4, r6}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@ifindex=r3, 0xffffffffffffffff, 0x23, 0x2000, 0x0, @prog_fd=r4, r6}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r7, r4, 0xa99638501506d767, 0x8, 0x0, @link_fd=r8, r6}, 0x20) openat$cgroup(r7, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) (async) r9 = openat$cgroup(r7, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000940)='devices.allow\x00', 0x2, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000980)='cpu.pressure\x00', 0x2, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r8}, 0x8) r11 = openat$cgroup_procs(r10, &(0x7f0000000a00)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup=r5, 0x35, 0x1, 0x1, &(0x7f0000000a40)=[0x0], 0x1, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup=r5, 0x35, 0x1, 0x1, &(0x7f0000000a40)=[0x0], 0x1, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@map=r10, r4, 0x22, 0x24, 0x0, @prog_id=r2, r12}, 0x20) r13 = openat$cgroup_procs(r7, &(0x7f0000000c80)='tasks\x00', 0x2, 0x0) r14 = openat$cgroup_subtree(r5, &(0x7f0000000cc0), 0x2, 0x0) r15 = syz_clone(0x40000400, &(0x7f0000000fc0)="34c157bd19d63c12d8dc01a0f36e7561a49126505d694d3449b8e81bbc34885083c740231089a0b23fdfee13c42a9e1191bd709924576299f807036cd8b27c7c753c1b1612dae6f19801570e4721972dfbc5e89f12897ca1dfae4f31db98c0b97ce594eaddaa0783560038b4060c1de811e7c686d53829de91bd36171949db0494ab71447ab33a08f9b121f2eef02c53a49015fd60d62e58ae9f026697d43f4ddec7050d8bb2437f56b494487a95a5571721d807b88d181b841c1fece835f41ca0cc32", 0xc3, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="5e2a8ab94cce810527827f77049c4f15c6dcfe7364b6ce38e460de22b01790a9e0ebaeed") sendmsg$unix(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d40)="f9e0d1d0528ce39e9a75d1dd22bc1e66de4d754e39b4846acacde1e8a98560c7d8d47a2edd2d797b32ab98", 0x2b}, {&(0x7f0000000d80)="1ed2b949bea3ac25fbe9e25f8a1bf596dd539eff91d3d282e13589e136be39464f71973aa1e72d7aa4067bf48cf12f77274a1c1109c8a2d6db2e308b", 0x3c}, {&(0x7f0000000dc0)="7600e327e3d7bb5b13fc52cf58605cc444beacf53b294f", 0x17}, {&(0x7f0000000e00)="b1531615c378e9aa644841833f026abdebae9e3685404744e8cbc4f119eddf4fe327956555450fd9d706620ab099d2c58248f853d5afb726708217713b56458adfd3595ca77d4b2f2545491826401809281c33addc4122e545019745ebf2b2575ffe2911bfe5a210eb17216ca47be8fe7067af795f15ad0d92fcf28ff791bb77d99db4", 0x83}, {&(0x7f0000000ec0)="5c99e84c3663b91f7dde4d4c6ef35016ae59717a814ef20e2fca96554689c1cb74c6d4cfdbdc553722596924f4ddcd2755605ce2a9ee53c2022ff0284d84a467464b9ae26ab66cce8357781e4f31e772ae1e1360df1ffa1b989bc9f257a459663d34b63815a2293b1815cffd2b", 0x6d}], 0x5, &(0x7f0000001180)=[@rights={{0x1c, 0x1, 0x1, [r11, r8, r11]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r13, r9, r10, r7]}}], 0x80, 0x4}, 0x40000) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000bc0)=r1) (async) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000bc0)=r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4fa8, '\x00', 0x0, r8, 0x3, 0x4, 0x3}, 0x48) (async) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4fa8, '\x00', 0x0, r8, 0x3, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x18, 0xa, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @map_val={0x18, 0x8, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001340)='GPL\x00', 0x9, 0x1e, &(0x7f0000001380)=""/30, 0x40f00, 0x0, '\x00', r3, 0x0, r10, 0x8, &(0x7f00000013c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0xb, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r10, r16], 0x0, 0x10, 0x8001}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0xffffff80, 0x3f, 0x5, 0x300, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}]}, &(0x7f0000000340)='syzkaller\x00', 0xa6ba, 0xd, &(0x7f0000000380)=""/13, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x10, 0x7ff}, 0x10, 0x8949, r1, 0x0, &(0x7f00000006c0)=[r3, r4, r5, r6, r7, r8], 0x0, 0x10, 0x7fffffff}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") [ 356.764798][T14573] RSP: 002b:00007fd15d746078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 356.781412][T14573] RAX: ffffffffffffffda RBX: 00007fd15eaf2f80 RCX: 00007fd15e9c4da9 [ 356.791914][T14573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 356.815524][T14573] RBP: 00007fd15d746120 R08: 00000000200009c0 R09: 00000000200009c0 [ 356.832542][T14573] R10: 0000000020000600 R11: 0000000000000206 R12: 0000000000000002 [ 356.851540][T14573] R13: 000000000000000b R14: 00007fd15eaf2f80 R15: 00007ffd881445f8 08:37:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180095000000000000000000000000000003006f82c84c27e9f41da5b33d020b0836eb2a1ec9bc7186143e6c09a3f40bae5951f6881799c918eb4db84b03b1eb22261541c882b9ea9e83d0de4c315b163b7f7d1248d173c98ebb4e332b2c070bbd9b030050c60829400213992dead446544c350c61dd6c0f4b2d815e0e510aff346f9fe27a591fa2c69cb6fd8651acd47b85796d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = syz_clone(0x1101200, &(0x7f0000000380)="7ac8263b5656fff387d13121f4fbabe003f9164ccecec7a6967f029325e4c4ff6f2a818c0110d17417b35482242f5468e6e5c13d866f2769e9d78d2001d121d2c5b199d93089241dc73b7af96fcdbac963567d28040ad444f1e29ee884ffe7a5a5b783bc112ea33895c8adfd8ee8fd6d5e39d1bb13f6de046d3a5cdd9e7a59200cbff1e5fae6a5edab10c61c8ab280e0f327e10564c1afcd49328cd60f0706feef784e57ca50a6c2b0bb9ade4ea071430736583f67", 0xb5, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000440)="597f5064787dc7ae0b11de82505b4f1f29480e4563e5ee1490de091cb86aedc44a5bcabcd794ec10df820b4f000eed4936aed654d3a2d547485bd6c9e1c1e0d8c1a58304c43685bf159394bd77f0682429d8c31e4c214dd15462167bf40349ec0ac65cdbe51ef3861608a3c65dd1c9ba0b6e7d26ee227d2100454a8609940b7ebdaa458ee83cf7a2c91d057068f262e8c694b8907aa45abf57bd7359621fb756c2c437f8894cf174dbc99706743ab1bf483cb7af763bfa0e0ef759dec52e1866a09e4fe83083860c98ee97a261275fafa1aa920804389baf") perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x5, 0x9, 0x7, 0x0, 0xffffffffffffff01, 0x90800, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x17d, 0x0, 0x4, 0xfffffffffffffff9, 0xad0, 0x100, 0x0, 0x1, 0x0, 0x7b9}, r2, 0xf, r1, 0x2) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180095000000000000000000000000000003006f82c84c27e9f41da5b33d020b0836eb2a1ec9bc7186143e6c09a3f40bae5951f6881799c918eb4db84b03b1eb22261541c882b9ea9e83d0de4c315b163b7f7d1248d173c98ebb4e332b2c070bbd9b030050c60829400213992dead446544c350c61dd6c0f4b2d815e0e510aff346f9fe27a591fa2c69cb6fd8651acd47b85796d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x1101200, &(0x7f0000000380)="7ac8263b5656fff387d13121f4fbabe003f9164ccecec7a6967f029325e4c4ff6f2a818c0110d17417b35482242f5468e6e5c13d866f2769e9d78d2001d121d2c5b199d93089241dc73b7af96fcdbac963567d28040ad444f1e29ee884ffe7a5a5b783bc112ea33895c8adfd8ee8fd6d5e39d1bb13f6de046d3a5cdd9e7a59200cbff1e5fae6a5edab10c61c8ab280e0f327e10564c1afcd49328cd60f0706feef784e57ca50a6c2b0bb9ade4ea071430736583f67", 0xb5, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000440)="597f5064787dc7ae0b11de82505b4f1f29480e4563e5ee1490de091cb86aedc44a5bcabcd794ec10df820b4f000eed4936aed654d3a2d547485bd6c9e1c1e0d8c1a58304c43685bf159394bd77f0682429d8c31e4c214dd15462167bf40349ec0ac65cdbe51ef3861608a3c65dd1c9ba0b6e7d26ee227d2100454a8609940b7ebdaa458ee83cf7a2c91d057068f262e8c694b8907aa45abf57bd7359621fb756c2c437f8894cf174dbc99706743ab1bf483cb7af763bfa0e0ef759dec52e1866a09e4fe83083860c98ee97a261275fafa1aa920804389baf") (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x5, 0x9, 0x7, 0x0, 0xffffffffffffff01, 0x90800, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x17d, 0x0, 0x4, 0xfffffffffffffff9, 0xad0, 0x100, 0x0, 0x1, 0x0, 0x7b9}, r2, 0xf, r1, 0x2) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18927b5673e6531f4100000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async, rerun: 32) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async, rerun: 32) r5 = openat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (rerun: 32) openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) [ 356.869542][T14573] [ 356.875903][T14573] ---[ end trace b74619b37823c4cb ]--- 08:37:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180095000000000000000000000000000003006f82c84c27e9f41da5b33d020b0836eb2a1ec9bc7186143e6c09a3f40bae5951f6881799c918eb4db84b03b1eb22261541c882b9ea9e83d0de4c315b163b7f7d1248d173c98ebb4e332b2c070bbd9b030050c60829400213992dead446544c350c61dd6c0f4b2d815e0e510aff346f9fe27a591fa2c69cb6fd8651acd47b85796d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = syz_clone(0x1101200, &(0x7f0000000380)="7ac8263b5656fff387d13121f4fbabe003f9164ccecec7a6967f029325e4c4ff6f2a818c0110d17417b35482242f5468e6e5c13d866f2769e9d78d2001d121d2c5b199d93089241dc73b7af96fcdbac963567d28040ad444f1e29ee884ffe7a5a5b783bc112ea33895c8adfd8ee8fd6d5e39d1bb13f6de046d3a5cdd9e7a59200cbff1e5fae6a5edab10c61c8ab280e0f327e10564c1afcd49328cd60f0706feef784e57ca50a6c2b0bb9ade4ea071430736583f67", 0xb5, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000440)="597f5064787dc7ae0b11de82505b4f1f29480e4563e5ee1490de091cb86aedc44a5bcabcd794ec10df820b4f000eed4936aed654d3a2d547485bd6c9e1c1e0d8c1a58304c43685bf159394bd77f0682429d8c31e4c214dd15462167bf40349ec0ac65cdbe51ef3861608a3c65dd1c9ba0b6e7d26ee227d2100454a8609940b7ebdaa458ee83cf7a2c91d057068f262e8c694b8907aa45abf57bd7359621fb756c2c437f8894cf174dbc99706743ab1bf483cb7af763bfa0e0ef759dec52e1866a09e4fe83083860c98ee97a261275fafa1aa920804389baf") perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x5, 0x9, 0x7, 0x0, 0xffffffffffffff01, 0x90800, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x17d, 0x0, 0x4, 0xfffffffffffffff9, 0xad0, 0x100, 0x0, 0x1, 0x0, 0x7b9}, r2, 0xf, r1, 0x2) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180095000000000000000000000000000003006f82c84c27e9f41da5b33d020b0836eb2a1ec9bc7186143e6c09a3f40bae5951f6881799c918eb4db84b03b1eb22261541c882b9ea9e83d0de4c315b163b7f7d1248d173c98ebb4e332b2c070bbd9b030050c60829400213992dead446544c350c61dd6c0f4b2d815e0e510aff346f9fe27a591fa2c69cb6fd8651acd47b85796d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x1101200, &(0x7f0000000380)="7ac8263b5656fff387d13121f4fbabe003f9164ccecec7a6967f029325e4c4ff6f2a818c0110d17417b35482242f5468e6e5c13d866f2769e9d78d2001d121d2c5b199d93089241dc73b7af96fcdbac963567d28040ad444f1e29ee884ffe7a5a5b783bc112ea33895c8adfd8ee8fd6d5e39d1bb13f6de046d3a5cdd9e7a59200cbff1e5fae6a5edab10c61c8ab280e0f327e10564c1afcd49328cd60f0706feef784e57ca50a6c2b0bb9ade4ea071430736583f67", 0xb5, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000440)="597f5064787dc7ae0b11de82505b4f1f29480e4563e5ee1490de091cb86aedc44a5bcabcd794ec10df820b4f000eed4936aed654d3a2d547485bd6c9e1c1e0d8c1a58304c43685bf159394bd77f0682429d8c31e4c214dd15462167bf40349ec0ac65cdbe51ef3861608a3c65dd1c9ba0b6e7d26ee227d2100454a8609940b7ebdaa458ee83cf7a2c91d057068f262e8c694b8907aa45abf57bd7359621fb756c2c437f8894cf174dbc99706743ab1bf483cb7af763bfa0e0ef759dec52e1866a09e4fe83083860c98ee97a261275fafa1aa920804389baf") (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x5, 0x9, 0x7, 0x0, 0xffffffffffffff01, 0x90800, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x17d, 0x0, 0x4, 0xfffffffffffffff9, 0xad0, 0x100, 0x0, 0x1, 0x0, 0x7b9}, r2, 0xf, r1, 0x2) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") [ 357.021593][ T6437] ================================================================== [ 357.029496][ T6437] BUG: KASAN: use-after-free in __rb_insert_augmented+0xa0/0x610 [ 357.037045][ T6437] Read of size 8 at addr ffff8881c0000008 by task syz-executor.1/6437 [ 357.045031][ T6437] [ 357.047261][ T6437] CPU: 0 PID: 6437 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 357.058666][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 357.068550][ T6437] Call Trace: [ 357.071676][ T6437] [ 357.074452][ T6437] dump_stack_lvl+0x151/0x1b7 [ 357.078965][ T6437] ? io_uring_drop_tctx_refs+0x190/0x190 [ 357.084867][ T6437] ? panic+0x751/0x751 [ 357.088770][ T6437] print_address_description+0x87/0x3b0 [ 357.094159][ T6437] kasan_report+0x179/0x1c0 [ 357.098489][ T6437] ? __rb_insert_augmented+0xa0/0x610 [ 357.103700][ T6437] ? __rb_insert_augmented+0xa0/0x610 [ 357.109338][ T6437] __asan_report_load8_noabort+0x14/0x20 [ 357.114807][ T6437] __rb_insert_augmented+0xa0/0x610 [ 357.119839][ T6437] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 357.126092][ T6437] vma_interval_tree_insert_after+0x2be/0x2d0 [ 357.132011][ T6437] copy_mm+0xba2/0x13e0 [ 357.136016][ T6437] ? copy_signal+0x610/0x610 [ 357.140410][ T6437] ? __init_rwsem+0xd6/0x1c0 [ 357.144852][ T6437] ? copy_signal+0x4e3/0x610 [ 357.149266][ T6437] copy_process+0x1149/0x3290 [ 357.153783][ T6437] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 357.158728][ T6437] kernel_clone+0x21e/0x9e0 [ 357.163061][ T6437] ? kernel_read+0x1f0/0x1f0 [ 357.167489][ T6437] ? kmem_cache_free+0x116/0x2e0 [ 357.172264][ T6437] ? create_io_thread+0x1e0/0x1e0 [ 357.177124][ T6437] ? debug_smp_processor_id+0x17/0x20 [ 357.182330][ T6437] __x64_sys_clone+0x23f/0x290 [ 357.186931][ T6437] ? __do_sys_vfork+0x130/0x130 [ 357.191631][ T6437] do_syscall_64+0x3d/0xb0 [ 357.195872][ T6437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 357.201596][ T6437] RIP: 0033:0x7fd15e9c1dd3 [ 357.205852][ T6437] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 357.225297][ T6437] RSP: 002b:00007ffd88144808 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 357.233912][ T6437] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd15e9c1dd3 [ 357.241723][ T6437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 357.249533][ T6437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 357.257343][ T6437] R10: 0000555556b99750 R11: 0000000000000246 R12: 0000000000000001 [ 357.265250][ T6437] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000001 [ 357.273070][ T6437] [ 357.275929][ T6437] [ 357.278104][ T6437] The buggy address belongs to the page: [ 357.283565][ T6437] page:ffffea0007000000 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x1c0000 [ 357.293894][ T6437] flags: 0x4000000000000000(zone=1) [ 357.299023][ T6437] raw: 4000000000000000 ffffea0006ff0008 ffffea0007010008 0000000000000000 [ 357.307444][ T6437] raw: 0000000000000000 000000000000000a 00000000ffffff7f 0000000000000000 [ 357.315940][ T6437] page dumped because: kasan: bad access detected [ 357.322188][ T6437] page_owner tracks the page as freed [ 357.327394][ T6437] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x506dc0(GFP_USER|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_ZERO|__GFP_ACCOUNT), pid 6877, ts 231191320393, free_ts 233414701693 [ 357.346061][ T6437] post_alloc_hook+0x1a3/0x1b0 [ 357.350653][ T6437] prep_new_page+0x1b/0x110 [ 357.354991][ T6437] get_page_from_freelist+0x3550/0x35d0 [ 357.360458][ T6437] __alloc_pages+0x27e/0x8f0 [ 357.364886][ T6437] bpf_ringbuf_alloc+0xd0/0x3d0 [ 357.369570][ T6437] ringbuf_map_alloc+0x202/0x320 [ 357.374357][ T6437] map_create+0x411/0x2050 [ 357.378598][ T6437] __sys_bpf+0x296/0x760 [ 357.382676][ T6437] __x64_sys_bpf+0x7c/0x90 [ 357.386930][ T6437] do_syscall_64+0x3d/0xb0 [ 357.391184][ T6437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 357.396910][ T6437] page last free stack trace: [ 357.401428][ T6437] free_unref_page_prepare+0x7c8/0x7d0 [ 357.406720][ T6437] free_unref_page+0xe8/0x750 [ 357.411230][ T6437] __free_pages+0x61/0xf0 [ 357.415395][ T6437] ringbuf_map_free+0xbe/0x120 [ 357.419997][ T6437] map_create+0x1a3a/0x2050 [ 357.424336][ T6437] __sys_bpf+0x296/0x760 [ 357.428415][ T6437] __x64_sys_bpf+0x7c/0x90 [ 357.432667][ T6437] do_syscall_64+0x3d/0xb0 [ 357.436928][ T6437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 357.442654][ T6437] [ 357.444816][ T6437] Memory state around the buggy address: [ 357.450296][ T6437] ffff8881bfffff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 357.458194][ T6437] ffff8881bfffff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 357.466121][ T6437] >ffff8881c0000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 357.473983][ T6437] ^ [ 357.478156][ T6437] ffff8881c0000080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 357.486057][ T6437] ffff8881c0000100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 357.493944][ T6437] ================================================================== [ 357.501842][ T6437] Disabling lock debugging due to kernel taint 08:37:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18927b5673e6531f4100000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async, rerun: 64) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async, rerun: 64) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async, rerun: 64) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) r5 = openat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x8, 0x8, 0x8, 0x0, 0xffffffff, 0x42400, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x2880, 0x1a2, 0x5, 0xd, 0xbb8d, 0xa3, 0x2, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:27 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000000000270000110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183800000400000000000000000000001866000010000000000000000200000018240000", @ANYRES32, @ANYBLOB="000000000700000085100000020000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0xd3, &(0x7f00000003c0)=""/211, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xb, 0x1, 0xffff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x3, 0xf}, {0x2, 0x4, 0x8, 0x3}, {0x5, 0x1, 0x10, 0xc}, {0x2, 0x4, 0x7, 0x6}, {0x72, 0x2, 0xa, 0x7}, {0x1, 0x3, 0x5, 0x2}, {0x1, 0x4, 0x4, 0x8}, {0x8001, 0x2, 0xa}], 0x10, 0x7ff}, 0x90) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=0xffffffffffffffff, 0x10, 0x0, 0x9, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x81, '\x00', r3, r0, 0x4, 0x2, 0x4}, 0x48) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@ifindex=r3, 0xffffffffffffffff, 0x23, 0x2000, 0x0, @prog_fd=r4, r6}, 0x20) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r7, r4, 0xa99638501506d767, 0x8, 0x0, @link_fd=r8, r6}, 0x20) r9 = openat$cgroup(r7, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000940)='devices.allow\x00', 0x2, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000980)='cpu.pressure\x00', 0x2, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r8}, 0x8) r11 = openat$cgroup_procs(r10, &(0x7f0000000a00)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup=r5, 0x35, 0x1, 0x1, &(0x7f0000000a40)=[0x0], 0x1, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@map=r10, r4, 0x22, 0x24, 0x0, @prog_id=r2, r12}, 0x20) (async) r13 = openat$cgroup_procs(r7, &(0x7f0000000c80)='tasks\x00', 0x2, 0x0) (async) r14 = openat$cgroup_subtree(r5, &(0x7f0000000cc0), 0x2, 0x0) (async) r15 = syz_clone(0x40000400, &(0x7f0000000fc0)="34c157bd19d63c12d8dc01a0f36e7561a49126505d694d3449b8e81bbc34885083c740231089a0b23fdfee13c42a9e1191bd709924576299f807036cd8b27c7c753c1b1612dae6f19801570e4721972dfbc5e89f12897ca1dfae4f31db98c0b97ce594eaddaa0783560038b4060c1de811e7c686d53829de91bd36171949db0494ab71447ab33a08f9b121f2eef02c53a49015fd60d62e58ae9f026697d43f4ddec7050d8bb2437f56b494487a95a5571721d807b88d181b841c1fece835f41ca0cc32", 0xc3, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="5e2a8ab94cce810527827f77049c4f15c6dcfe7364b6ce38e460de22b01790a9e0ebaeed") sendmsg$unix(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d40)="f9e0d1d0528ce39e9a75d1dd22bc1e66de4d754e39b4846acacde1e8a98560c7d8d47a2edd2d797b32ab98", 0x2b}, {&(0x7f0000000d80)="1ed2b949bea3ac25fbe9e25f8a1bf596dd539eff91d3d282e13589e136be39464f71973aa1e72d7aa4067bf48cf12f77274a1c1109c8a2d6db2e308b", 0x3c}, {&(0x7f0000000dc0)="7600e327e3d7bb5b13fc52cf58605cc444beacf53b294f", 0x17}, {&(0x7f0000000e00)="b1531615c378e9aa644841833f026abdebae9e3685404744e8cbc4f119eddf4fe327956555450fd9d706620ab099d2c58248f853d5afb726708217713b56458adfd3595ca77d4b2f2545491826401809281c33addc4122e545019745ebf2b2575ffe2911bfe5a210eb17216ca47be8fe7067af795f15ad0d92fcf28ff791bb77d99db4", 0x83}, {&(0x7f0000000ec0)="5c99e84c3663b91f7dde4d4c6ef35016ae59717a814ef20e2fca96554689c1cb74c6d4cfdbdc553722596924f4ddcd2755605ce2a9ee53c2022ff0284d84a467464b9ae26ab66cce8357781e4f31e772ae1e1360df1ffa1b989bc9f257a459663d34b63815a2293b1815cffd2b", 0x6d}], 0x5, &(0x7f0000001180)=[@rights={{0x1c, 0x1, 0x1, [r11, r8, r11]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r13, r9, r10, r7]}}], 0x80, 0x4}, 0x40000) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000bc0)=r1) (async) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4fa8, '\x00', 0x0, r8, 0x3, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x18, 0xa, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @map_val={0x18, 0x8, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001340)='GPL\x00', 0x9, 0x1e, &(0x7f0000001380)=""/30, 0x40f00, 0x0, '\x00', r3, 0x0, r10, 0x8, &(0x7f00000013c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0xb, 0x8000, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r10, r16], 0x0, 0x10, 0x8001}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x8, 0x8, 0x8, 0x0, 0xffffffff, 0x42400, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x2880, 0x1a2, 0x5, 0xd, 0xbb8d, 0xa3, 0x2, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x3) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0xffffff80, 0x3f, 0x5, 0x300, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}]}, &(0x7f0000000340)='syzkaller\x00', 0xa6ba, 0xd, &(0x7f0000000380)=""/13, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x10, 0x7ff}, 0x10, 0x8949, r1, 0x0, &(0x7f00000006c0)=[r3, r4, r5, r6, r7, r8], 0x0, 0x10, 0x7fffffff}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0xffffff80, 0x3f, 0x5, 0x300, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}]}, &(0x7f0000000340)='syzkaller\x00', 0xa6ba, 0xd, &(0x7f0000000380)=""/13, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x10, 0x7ff}, 0x10, 0x8949, r1, 0x0, &(0x7f00000006c0)=[r3, r4, r5, r6, r7, r8], 0x0, 0x10, 0x7fffffff}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") (async) 08:37:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x2}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8b5e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x48) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7fffffff, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18290000", @ANYRES32=r0, @ANYBLOB="0000000007000000186500000700000000000000050000001800000060b50000000000000000000085100000feffffff1e6f3a17745cdaf6fc901650af93568628ad1ce6a5b06bdef35df7fa9bb842053e06b72a5247362da2ec0e0356d38fa6da3e7edef173abac578e7cbee8973ca8c7a3b8d4"], &(0x7f00000000c0)='syzkaller\x00', 0x8001, 0x0, &(0x7f0000000100), 0x41100, 0x4, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x7, &(0x7f00000002c0)=[r1, r1, r2, r3], &(0x7f0000000400)=[{0x3, 0x4}, {0x4, 0x3, 0x5, 0x5}, {0x5, 0x4, 0x7, 0xa}, {0x0, 0x1, 0xa, 0x4}, {0x4, 0x5, 0x1, 0xb}, {0x4, 0x2, 0xd, 0xc}, {0x3, 0x5, 0x6, 0x4}], 0x10, 0x1ff}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x24) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000700)="40e23ded519975fd561e46e33092b51fecf11cb349741676e0a45b6da9d771028ce25c9bec2adbd852f0eede143b5dbd9c33b2a72a441884a961359b0bc137c3f532a71e499042474af6a7377269b5e18e6966e8074d96a9361fba9460df867ff2b75f729111df689f490a18f34178ac3110be5a89c1798b91a7007a4c16d30316ba9fc6ce049bb297f2108e0bd730497536121c4ffa5f27325ed895f3f0e73b33d982031da9778d5ade5b1d0892be965842f8e6fcb6b94e4607b4c5472779e8fe87cfc2c98ac95bdd"}, 0x20) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x40, 0x8, 0x8, 0x8, 0x0, 0xffffffff, 0x42400, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x2880, 0x1a2, 0x5, 0xd, 0xbb8d, 0xa3, 0x2, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x3) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) (rerun: 32) 08:37:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10001, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xe6, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x3f, 0x6, 0xe, 0x7ff, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0xf, 0x6, 0x0, 0x9, 0xf293}]}, &(0x7f0000000000)='GPL\x00', 0xd1a1, 0xd0, &(0x7f00000005c0)=""/208, 0x41000, 0x40, '\x00', r3, 0x3, r4, 0x8, &(0x7f0000000900)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0xa, 0x0, 0x7}, 0x10, 0x0, r2, 0x6, 0x0, &(0x7f0000000980)=[{0x1, 0x5, 0xf, 0xd}, {0x5, 0x4, 0x3, 0x3}, {0x1, 0x1, 0xf, 0xa}, {0x4, 0x7, 0xa, 0xb}, {0x5, 0x1, 0xf, 0x6}, {0x4, 0x3, 0xf, 0xa}], 0x10, 0x80000001}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='objagg_obj_get\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x2}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8b5e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x48) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7fffffff, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18290000", @ANYRES32=r0, @ANYBLOB="0000000007000000186500000700000000000000050000001800000060b50000000000000000000085100000feffffff1e6f3a17745cdaf6fc901650af93568628ad1ce6a5b06bdef35df7fa9bb842053e06b72a5247362da2ec0e0356d38fa6da3e7edef173abac578e7cbee8973ca8c7a3b8d4"], &(0x7f00000000c0)='syzkaller\x00', 0x8001, 0x0, &(0x7f0000000100), 0x41100, 0x4, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x7, &(0x7f00000002c0)=[r1, r1, r2, r3], &(0x7f0000000400)=[{0x3, 0x4}, {0x4, 0x3, 0x5, 0x5}, {0x5, 0x4, 0x7, 0xa}, {0x0, 0x1, 0xa, 0x4}, {0x4, 0x5, 0x1, 0xb}, {0x4, 0x2, 0xd, 0xc}, {0x3, 0x5, 0x6, 0x4}], 0x10, 0x1ff}, 0x90) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x24) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000700)="40e23ded519975fd561e46e33092b51fecf11cb349741676e0a45b6da9d771028ce25c9bec2adbd852f0eede143b5dbd9c33b2a72a441884a961359b0bc137c3f532a71e499042474af6a7377269b5e18e6966e8074d96a9361fba9460df867ff2b75f729111df689f490a18f34178ac3110be5a89c1798b91a7007a4c16d30316ba9fc6ce049bb297f2108e0bd730497536121c4ffa5f27325ed895f3f0e73b33d982031da9778d5ade5b1d0892be965842f8e6fcb6b94e4607b4c5472779e8fe87cfc2c98ac95bdd"}, 0x20) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000d94e58ef8500d0000e000000950000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0xd0, 0xb7, 0x3, 0x0, 0x4, 0x10000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffeffff, 0xc}, 0x20, 0x4, 0x0, 0x1, 0x29, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x8}, r3, 0x2, r0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x100000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xfd, 0x6, 0xdb, 0x7f, 0x0, 0x800, 0x80000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0xc77c, 0x1}, 0x18, 0x0, 0x400, 0x6, 0xffff, 0xaf, 0x1, 0x0, 0x80000001, 0x0, 0x3ff}, r5, 0xffffffffffffffff, r2, 0x0) 08:37:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8b5e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8b5e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7fffffff, 0x8}, 0xc) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7fffffff, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="18290000", @ANYRES32=r0, @ANYBLOB="0000000007000000186500000700000000000000050000001800000060b50000000000000000000085100000feffffff1e6f3a17745cdaf6fc901650af93568628ad1ce6a5b06bdef35df7fa9bb842053e06b72a5247362da2ec0e0356d38fa6da3e7edef173abac578e7cbee8973ca8c7a3b8d4"], &(0x7f00000000c0)='syzkaller\x00', 0x8001, 0x0, &(0x7f0000000100), 0x41100, 0x4, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x7, &(0x7f00000002c0)=[r1, r1, r2, r3], &(0x7f0000000400)=[{0x3, 0x4}, {0x4, 0x3, 0x5, 0x5}, {0x5, 0x4, 0x7, 0xa}, {0x0, 0x1, 0xa, 0x4}, {0x4, 0x5, 0x1, 0xb}, {0x4, 0x2, 0xd, 0xc}, {0x3, 0x5, 0x6, 0x4}], 0x10, 0x1ff}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x24) (async) bpf$MAP_CREATE(0x0, 0x0, 0x24) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000700)="40e23ded519975fd561e46e33092b51fecf11cb349741676e0a45b6da9d771028ce25c9bec2adbd852f0eede143b5dbd9c33b2a72a441884a961359b0bc137c3f532a71e499042474af6a7377269b5e18e6966e8074d96a9361fba9460df867ff2b75f729111df689f490a18f34178ac3110be5a89c1798b91a7007a4c16d30316ba9fc6ce049bb297f2108e0bd730497536121c4ffa5f27325ed895f3f0e73b33d982031da9778d5ade5b1d0892be965842f8e6fcb6b94e4607b4c5472779e8fe87cfc2c98ac95bdd"}, 0x20) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10001, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xe6, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x3f, 0x6, 0xe, 0x7ff, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0xf, 0x6, 0x0, 0x9, 0xf293}]}, &(0x7f0000000000)='GPL\x00', 0xd1a1, 0xd0, &(0x7f00000005c0)=""/208, 0x41000, 0x40, '\x00', r3, 0x3, r4, 0x8, &(0x7f0000000900)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0xa, 0x0, 0x7}, 0x10, 0x0, r2, 0x6, 0x0, &(0x7f0000000980)=[{0x1, 0x5, 0xf, 0xd}, {0x5, 0x4, 0x3, 0x3}, {0x1, 0x1, 0xf, 0xa}, {0x4, 0x7, 0xa, 0xb}, {0x5, 0x1, 0xf, 0x6}, {0x4, 0x3, 0xf, 0xa}], 0x10, 0x80000001}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='objagg_obj_get\x00', r0}, 0x10) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000d94e58ef8500d0000e000000950000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0xd0, 0xb7, 0x3, 0x0, 0x4, 0x10000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffeffff, 0xc}, 0x20, 0x4, 0x0, 0x1, 0x29, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x8}, r3, 0x2, r0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x100000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xfd, 0x6, 0xdb, 0x7f, 0x0, 0x800, 0x80000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0xc77c, 0x1}, 0x18, 0x0, 0x400, 0x6, 0xffff, 0xaf, 0x1, 0x0, 0x80000001, 0x0, 0x3ff}, r5, 0xffffffffffffffff, r2, 0x0) 08:37:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000002, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000680)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x8, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r4], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x42, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, 0xffffffffffffffff, r4], 0x0, 0x10, 0x4}, 0x90) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x40, 0x7, 0x91, 0x3, 0x0, 0xffffffffffffffff, 0x20, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xffff, 0xca4, 0x7, 0x8000, 0x40, 0x2, 0x0, 0x0, 0x0, 0x100000000}, r3, 0x4, r4, 0xb) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000013000000ffffffde00000000000000000000000000000000000000000000000000282453f150048a3b0f373b59f1a39655a564b92fe65e2e066344a17dbc5fa077f50fd3842ee11088cc18f2"]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x9, '\x00', r2, r4, 0x2, 0x1, 0x5}, 0x48) 08:37:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0xffffff80, 0x3f, 0x5, 0x300, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x48) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}]}, &(0x7f0000000340)='syzkaller\x00', 0xa6ba, 0xd, &(0x7f0000000380)=""/13, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x10, 0x7ff}, 0x10, 0x8949, r1, 0x0, &(0x7f00000006c0)=[r3, r4, r5, r6, r7, r8], 0x0, 0x10, 0x7fffffff}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000d94e58ef8500d0000e000000950000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000d94e58ef8500d0000e000000950000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0xd0, 0xb7, 0x3, 0x0, 0x4, 0x10000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffeffff, 0xc}, 0x20, 0x4, 0x0, 0x1, 0x29, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x8}, r3, 0x2, r0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x100000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0xfd, 0x6, 0xdb, 0x7f, 0x0, 0x800, 0x80000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0xc77c, 0x1}, 0x18, 0x0, 0x400, 0x6, 0xffff, 0xaf, 0x1, 0x0, 0x80000001, 0x0, 0x3ff}, r5, 0xffffffffffffffff, r2, 0x0) 08:37:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10001, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xe6, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x3f, 0x6, 0xe, 0x7ff, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0xf, 0x6, 0x0, 0x9, 0xf293}]}, &(0x7f0000000000)='GPL\x00', 0xd1a1, 0xd0, &(0x7f00000005c0)=""/208, 0x41000, 0x40, '\x00', r3, 0x3, r4, 0x8, &(0x7f0000000900)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0xa, 0x0, 0x7}, 0x10, 0x0, r2, 0x6, 0x0, &(0x7f0000000980)=[{0x1, 0x5, 0xf, 0xd}, {0x5, 0x4, 0x3, 0x3}, {0x1, 0x1, 0xf, 0xa}, {0x4, 0x7, 0xa, 0xb}, {0x5, 0x1, 0xf, 0x6}, {0x4, 0x3, 0xf, 0xa}], 0x10, 0x80000001}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r5, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='objagg_obj_get\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x1ee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x6, 0xfb, 0x0, 0xaf, 0x20840, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x303, 0x4, @perf_config_ext={0x5, 0x9c}, 0x100, 0x3, 0x2, 0x2, 0x6, 0x1, 0x7, 0x0, 0x6, 0x0, 0xd}, 0xffffffffffffffff, 0x2, r1, 0xa) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000007, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000680)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x8, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r4], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x42, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, 0xffffffffffffffff, r4], 0x0, 0x10, 0x4}, 0x90) (async) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x40, 0x7, 0x91, 0x3, 0x0, 0xffffffffffffffff, 0x20, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xffff, 0xca4, 0x7, 0x8000, 0x40, 0x2, 0x0, 0x0, 0x0, 0x100000000}, r3, 0x4, r4, 0xb) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000013000000ffffffde00000000000000000000000000000000000000000000000000282453f150048a3b0f373b59f1a39655a564b92fe65e2e066344a17dbc5fa077f50fd3842ee11088cc18f2"]) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x9, '\x00', r2, r4, 0x2, 0x1, 0x5}, 0x48) 08:37:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000006d000000000000000e00000095826fb355a28373ab8edae5e3440239a577333f8a7f3abf5991f59494a0e212251b525025c9ab40dce7c76be0044d8daec20804bf9fb3007fd69c4ce3db22c78f8c762f204010b7b2d520d9468da303dd61f74b2213ea60f77492af1302218f49c255a623ac255701a9a72a14b7f427831b47ef0df194be5b7130a405f057a770d7bbc754b9d28d41ef7a971ab338d381291e1079dcb9fd731222d502494181d396cfa363631256819f1b68e8fda99b352969602360f6d44b9027df6e7e6a39136110b222bf4e1f95a8a76b8be5a9c65361929c95491293c68c487ce2cabdc0e32981f14208a886ba455772a6880abc8a3c4fa9c6ee9aaa71fc331099ced2e8c108abf817003269470265b0703e316dbf5641d67f163e21bc803bf598fd3bf5146ee82a37e90ddd78d4bf603e4dcfd9f9761dc1bc447984d6f7831b030e2e3e7db57b23457a97"], &(0x7f0000000000)='syzkaller\x00', 0x1ee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x6, 0xfb, 0x0, 0xaf, 0x20840, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x303, 0x4, @perf_config_ext={0x5, 0x9c}, 0x100, 0x3, 0x2, 0x2, 0x6, 0x1, 0x7, 0x0, 0x6, 0x0, 0xd}, 0xffffffffffffffff, 0x2, r1, 0xa) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000680)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x8, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r4], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x42, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, 0xffffffffffffffff, r4], 0x0, 0x10, 0x4}, 0x90) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x40, 0x7, 0x91, 0x3, 0x0, 0xffffffffffffffff, 0x20, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xffff, 0xca4, 0x7, 0x8000, 0x40, 0x2, 0x0, 0x0, 0x0, 0x100000000}, r3, 0x4, r4, 0xb) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000013000000ffffffde00000000000000000000000000000000000000000000000000282453f150048a3b0f373b59f1a39655a564b92fe65e2e066344a17dbc5fa077f50fd3842ee11088cc18f2"]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x9, '\x00', r2, r4, 0x2, 0x1, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000680)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) gettid() (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x8, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x4, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r4], &(0x7f00000002c0)='GPL\x00', 0x0, 0xe5, &(0x7f0000000a00)=""/229, 0x41000, 0x42, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, 0xffffffffffffffff, r4], 0x0, 0x10, 0x4}, 0x90) (async) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x40, 0x7, 0x91, 0x3, 0x0, 0xffffffffffffffff, 0x20, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000100), 0xb}, 0x80, 0xffff, 0xca4, 0x7, 0x8000, 0x40, 0x2, 0x0, 0x0, 0x0, 0x100000000}, r3, 0x4, r4, 0xb) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000013000000ffffffde00000000000000000000000000000000000000000000000000282453f150048a3b0f373b59f1a39655a564b92fe65e2e066344a17dbc5fa077f50fd3842ee11088cc18f2"]) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x9, '\x00', r2, r4, 0x2, 0x1, 0x5}, 0x48) (async) 08:37:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095f67a6258f6da1f30effc34cd9fcfe9ff266c5f0ab3341ff16f5ba1d5f918ed8f9a6f2b2f732558c1cd2a765c7097c64f61c189503cd2d211"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x1ee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x6, 0xfb, 0x0, 0xaf, 0x20840, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x303, 0x4, @perf_config_ext={0x5, 0x9c}, 0x100, 0x3, 0x2, 0x2, 0x6, 0x1, 0x7, 0x0, 0x6, 0x0, 0xd}, 0xffffffffffffffff, 0x2, r1, 0xa) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x1ee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x6, 0xfb, 0x0, 0xaf, 0x20840, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x303, 0x4, @perf_config_ext={0x5, 0x9c}, 0x100, 0x3, 0x2, 0x2, 0x6, 0x1, 0x7, 0x0, 0x6, 0x0, 0xd}, 0xffffffffffffffff, 0x2, r1, 0xa) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000008, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:28 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x3}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xcb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x41, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0), &(0x7f0000000800)=[{0x2, 0x4, 0xf, 0xb}, {0x4, 0x5, 0x8, 0x9}, {0x0, 0x2, 0x2, 0x4}, {0x4, 0x1, 0x4, 0x6}, {0x0, 0x3, 0x8, 0x1}, {0x5, 0x3, 0xf, 0xb}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x5c8}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095f67a6258f6da1f30effc34cd9fcfe9ff266c5f0ab3341ff16f5ba1d5f918ed8f9a6f2b2f732558c1cd2a765c7097c64f61c189503cd2d211"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) (async, rerun: 32) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (rerun: 64) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000009, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x7f, 0x5, 0x9, 0xfc, 0x0, 0x180, 0xc8185, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x6000, 0x9, 0x9, 0x7, 0x800, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x9}, r1, 0x5, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r0, 0x0, 0x1, &(0x7f0000000200)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r3}, 0x4) 08:37:28 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x3}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xcb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x41, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0), &(0x7f0000000800)=[{0x2, 0x4, 0xf, 0xb}, {0x4, 0x5, 0x8, 0x9}, {0x0, 0x2, 0x2, 0x4}, {0x4, 0x1, 0x4, 0x6}, {0x0, 0x3, 0x8, 0x1}, {0x5, 0x3, 0xf, 0xb}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x5c8}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x3}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xcb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x41, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0), &(0x7f0000000800)=[{0x2, 0x4, 0xf, 0xb}, {0x4, 0x5, 0x8, 0x9}, {0x0, 0x2, 0x2, 0x4}, {0x4, 0x1, 0x4, 0x6}, {0x0, 0x3, 0x8, 0x1}, {0x5, 0x3, 0xf, 0xb}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x5c8}, 0x90) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) 08:37:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095f67a6258f6da1f30effc34cd9fcfe9ff266c5f0ab3341ff16f5ba1d5f918ed8f9a6f2b2f732558c1cd2a765c7097c64f61c189503cd2d211"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x3}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xcb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x41, '\x00', r5, 0x0, r0, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xf, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0), &(0x7f0000000800)=[{0x2, 0x4, 0xf, 0xb}, {0x4, 0x5, 0x8, 0x9}, {0x0, 0x2, 0x2, 0x4}, {0x4, 0x1, 0x4, 0x6}, {0x0, 0x3, 0x8, 0x1}, {0x5, 0x3, 0xf, 0xb}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x5c8}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x7f, 0x5, 0x9, 0xfc, 0x0, 0x180, 0xc8185, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x6000, 0x9, 0x9, 0x7, 0x800, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x9}, r1, 0x5, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r0, 0x0, 0x1, &(0x7f0000000200)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r3}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r3}, 0x4) 08:37:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000011, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x200, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x4001e) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@generic={0xfa, 0x6, 0x0, 0x12d3, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}]}, 0xfffffffffffffffc, 0x6, 0xaa, &(0x7f0000000a40)=""/170, 0x40f00, 0x31, '\x00', r3, 0x9, r5, 0x8, &(0x7f0000000940)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xa, 0x4af2, 0x200}, 0x10, r4, r6, 0x4, 0x0, &(0x7f0000000b00)=[{0x3, 0x1, 0x6, 0x4}, {0x5, 0x5, 0x6, 0x5}, {0x4, 0x1, 0x9, 0xa}, {0x3, 0x5, 0xe, 0x1}], 0x10, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000240)='GPL\x00', 0xff, 0x40, &(0x7f00000002c0)=""/64, 0x40f00, 0x51, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x401, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, r2], &(0x7f0000000400)=[{0x3, 0x2, 0xd, 0x7}, {0x5, 0x5, 0x1, 0xa}, {0x3, 0x3, 0xc, 0xc}, {0x2, 0x2, 0xb, 0x7}], 0x10, 0xb4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x4000000000008, 0x0, 0x3, 0xd9ca, 0x7, 0x8, 0x0, 0x7, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@union={0x1, 0x9, 0x0, 0x5, 0x0, 0x83, [{0xd, 0x2, 0x7}, {0x2, 0x2, 0x8}, {0x10, 0x0, 0x20}, {0x7, 0x1, 0x9}, {0x3, 0x0, 0x8}, {0x10, 0x0, 0x20}, {0x4, 0x1, 0x6696}, {0xf, 0x5, 0x9}, {0x8, 0x0, 0x3a0}]}]}, {0x0, [0x61, 0x5f, 0x0, 0x2e, 0x2e, 0x0, 0x61, 0x2e]}}, &(0x7f0000000240)=""/14, 0x9a, 0xe, 0x1, 0x1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0x3f, 0x4, 0xa0, r1, 0x2, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x21, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x44}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0x77, 0x0, 0x2, 0x7, 0x9}], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x17, &(0x7f0000000100)=""/23, 0x41000, 0x1, '\x00', 0x0, 0x7, r4, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x6, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000400)=[r5], &(0x7f0000000800)=[{0x1, 0x5, 0xe, 0x9}], 0x10, 0xfff}, 0x90) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x7f, 0x5, 0x9, 0xfc, 0x0, 0x180, 0xc8185, 0xc, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x6000, 0x9, 0x9, 0x7, 0x800, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x9}, r1, 0x5, r1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', r1}, 0x10) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) r2 = syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r0, 0x0, 0x1, &(0x7f0000000200)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r3}, 0x4) 08:37:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x200, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x4001e) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@generic={0xfa, 0x6, 0x0, 0x12d3, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}]}, 0xfffffffffffffffc, 0x6, 0xaa, &(0x7f0000000a40)=""/170, 0x40f00, 0x31, '\x00', r3, 0x9, r5, 0x8, &(0x7f0000000940)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xa, 0x4af2, 0x200}, 0x10, r4, r6, 0x4, 0x0, &(0x7f0000000b00)=[{0x3, 0x1, 0x6, 0x4}, {0x5, 0x5, 0x6, 0x5}, {0x4, 0x1, 0x9, 0xa}, {0x3, 0x5, 0xe, 0x1}], 0x10, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000240)='GPL\x00', 0xff, 0x40, &(0x7f00000002c0)=""/64, 0x40f00, 0x51, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x401, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, r2], &(0x7f0000000400)=[{0x3, 0x2, 0xd, 0x7}, {0x5, 0x5, 0x1, 0xa}, {0x3, 0x3, 0xc, 0xc}, {0x2, 0x2, 0xb, 0x7}], 0x10, 0xb4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000070, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) r5 = perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_config_ext, 0x0, 0x0, 0x340f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x10, &(0x7f0000000500), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1c, 0x4, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x10, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x11, 0x50}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, r10]}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = syz_clone(0xc2000400, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x8, 0x1, 0x8d, 0xfb, 0x0, 0x6, 0x82, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000240)}, 0x2021, 0x3, 0x8, 0x7, 0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2}, r12, 0x0, r13, 0xb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x24e, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x48) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r18}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1d, &(0x7f00000001c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x2, 0x6, 0x3, 0xfffffffffffffffe, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @jmp={0x5, 0x1, 0xa, 0x6, 0xd, 0x40}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7b}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x10000}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, 0x25, r13, 0x8, &(0x7f00000003c0)={0xe6f, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x7, 0xfffff000, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r14, r15, r16, r17, r18, 0xffffffffffffffff, 0xffffffffffffffff, r19], &(0x7f00000006c0)=[{0x0, 0x5, 0x2, 0x1}, {0x2, 0x4, 0x5, 0x9}, {0x5, 0x3, 0x10, 0x9}], 0x10, 0xf4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x25, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@llx}, @ldst={0x0, 0x0, 0x0, 0x4, 0x8, 0xfffffffffffffff0}, @printk={@lx}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xee, 0x8, &(0x7f0000000140)=""/8, 0x41100, 0x2, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000280), &(0x7f0000000700)=[{0x5, 0x2, 0x5, 0xa}, {0x3, 0x3, 0xc, 0xa}, {0x2, 0x3, 0x7, 0xa}, {0x3, 0x4, 0x8, 0x8}, {0x3, 0x4, 0x8, 0x8}, {0x2, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x10, 0x9}, {0x2, 0x2, 0x0, 0x6}, {0x3, 0x3, 0x3, 0x1}], 0x10, 0x1}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x200, 0x18}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x4001e) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@generic={0xfa, 0x6, 0x0, 0x12d3, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}]}, 0xfffffffffffffffc, 0x6, 0xaa, &(0x7f0000000a40)=""/170, 0x40f00, 0x31, '\x00', r3, 0x9, r5, 0x8, &(0x7f0000000940)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xa, 0x4af2, 0x200}, 0x10, r4, r6, 0x4, 0x0, &(0x7f0000000b00)=[{0x3, 0x1, 0x6, 0x4}, {0x5, 0x5, 0x6, 0x5}, {0x4, 0x1, 0x9, 0xa}, {0x3, 0x5, 0xe, 0x1}], 0x10, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000240)='GPL\x00', 0xff, 0x40, &(0x7f00000002c0)=""/64, 0x40f00, 0x51, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x401, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, r2], &(0x7f0000000400)=[{0x3, 0x2, 0xd, 0x7}, {0x5, 0x5, 0x1, 0xa}, {0x3, 0x3, 0xc, 0xc}, {0x2, 0x2, 0xb, 0x7}], 0x10, 0xb4}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x4000000000008, 0x0, 0x3, 0xd9ca, 0x7, 0x8, 0x0, 0x7, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@union={0x1, 0x9, 0x0, 0x5, 0x0, 0x83, [{0xd, 0x2, 0x7}, {0x2, 0x2, 0x8}, {0x10, 0x0, 0x20}, {0x7, 0x1, 0x9}, {0x3, 0x0, 0x8}, {0x10, 0x0, 0x20}, {0x4, 0x1, 0x6696}, {0xf, 0x5, 0x9}, {0x8, 0x0, 0x3a0}]}]}, {0x0, [0x61, 0x5f, 0x0, 0x2e, 0x2e, 0x0, 0x61, 0x2e]}}, &(0x7f0000000240)=""/14, 0x9a, 0xe, 0x1, 0x1}, 0x20) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0x3f, 0x4, 0xa0, r1, 0x2, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x21, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x44}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0x77, 0x0, 0x2, 0x7, 0x9}], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x17, &(0x7f0000000100)=""/23, 0x41000, 0x1, '\x00', 0x0, 0x7, r4, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x6, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000400)=[r5], &(0x7f0000000800)=[{0x1, 0x5, 0xe, 0x9}], 0x10, 0xfff}, 0x90) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x83, 0x2, 0x2, 0x9, 0x0, 0x100, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x800, 0x608b7b46, 0x81, 0x8, 0x5, 0x2, 0x6, 0x0, 0x2, 0x0, 0x4}, r2, 0xb, r0, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xffffff80, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xda61}}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x4b, 0x5}, @func={0xc, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x1e]}}, &(0x7f0000000a40)=""/4096, 0x50, 0x1000, 0x1, 0x10000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x38, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfd}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x1d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x1000, 0x3d, &(0x7f0000000240)=""/61, 0x41000, 0xb, '\x00', r4, 0x8, r5, 0x8, &(0x7f0000000780)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x7, 0xe1ec}, 0x10, 0x0, r1, 0x6, 0x0, &(0x7f0000000800)=[{0x5, 0x4, 0xc, 0x9}, {0x3, 0x4, 0xb, 0x5}, {0x5, 0x4, 0x7, 0x8}, {0x1, 0x2, 0xe, 0x8}, {0x1, 0x5, 0x0, 0x8}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x5}, 0x90) 08:37:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000700, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x83, 0x2, 0x2, 0x9, 0x0, 0x100, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x800, 0x608b7b46, 0x81, 0x8, 0x5, 0x2, 0x6, 0x0, 0x2, 0x0, 0x4}, r2, 0xb, r0, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xffffff80, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xda61}}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x4b, 0x5}, @func={0xc, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x1e]}}, &(0x7f0000000a40)=""/4096, 0x50, 0x1000, 0x1, 0x10000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x38, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfd}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x1d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x1000, 0x3d, &(0x7f0000000240)=""/61, 0x41000, 0xb, '\x00', r4, 0x8, r5, 0x8, &(0x7f0000000780)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x7, 0xe1ec}, 0x10, 0x0, r1, 0x6, 0x0, &(0x7f0000000800)=[{0x5, 0x4, 0xc, 0x9}, {0x3, 0x4, 0xb, 0x5}, {0x5, 0x4, 0x7, 0x8}, {0x1, 0x2, 0xe, 0x8}, {0x1, 0x5, 0x0, 0x8}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x5}, 0x90) 08:37:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x18, 0xa, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000003000000000000000600000018460000fdffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000271c8000fcffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9105, 0xa9, &(0x7f0000001b40)=""/169, 0x40f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x400, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0xf, 0xfffffff8, 0x3ff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001ac0)=[{0x1, 0x4, 0x0, 0x7}, {0x0, 0x2, 0x10, 0x9}, {0x5, 0x4, 0xd, 0x1}], 0x10, 0x7f}, 0x90) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000100)=@raw=[@generic={0xf5, 0x9, 0xd, 0xffff, 0x20}], &(0x7f0000000140)='GPL\x00', 0xfffff000, 0x1000, &(0x7f0000000a40)=""/4096, 0x40f00, 0x31, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r2, r3, r4], &(0x7f0000000500)=[{0x3, 0x5, 0xa, 0xc}, {0x4, 0x5, 0x5, 0x8}], 0x10, 0x2}, 0x90) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000640)='\x00') 08:37:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x83, 0x2, 0x2, 0x9, 0x0, 0x100, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x800, 0x608b7b46, 0x81, 0x8, 0x5, 0x2, 0x6, 0x0, 0x2, 0x0, 0x4}, r2, 0xb, r0, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xffffff80, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xda61}}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x4b, 0x5}, @func={0xc, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x1e]}}, &(0x7f0000000a40)=""/4096, 0x50, 0x1000, 0x1, 0x10000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x38, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfd}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x1d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x1000, 0x3d, &(0x7f0000000240)=""/61, 0x41000, 0xb, '\x00', r4, 0x8, r5, 0x8, &(0x7f0000000780)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x7, 0xe1ec}, 0x10, 0x0, r1, 0x6, 0x0, &(0x7f0000000800)=[{0x5, 0x4, 0xc, 0x9}, {0x3, 0x4, 0xb, 0x5}, {0x5, 0x4, 0x7, 0x8}, {0x1, 0x2, 0xe, 0x8}, {0x1, 0x5, 0x0, 0x8}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x83, 0x2, 0x2, 0x9, 0x0, 0x100, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x800, 0x608b7b46, 0x81, 0x8, 0x5, 0x2, 0x6, 0x0, 0x2, 0x0, 0x4}, r2, 0xb, r0, 0x2) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xffffff80, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xda61}}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x4b, 0x5}, @func={0xc, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x1e]}}, &(0x7f0000000a40)=""/4096, 0x50, 0x1000, 0x1, 0x10000}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x38, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfd}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x1d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x1000, 0x3d, &(0x7f0000000240)=""/61, 0x41000, 0xb, '\x00', r4, 0x8, r5, 0x8, &(0x7f0000000780)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x7, 0xe1ec}, 0x10, 0x0, r1, 0x6, 0x0, &(0x7f0000000800)=[{0x5, 0x4, 0xc, 0x9}, {0x3, 0x4, 0xb, 0x5}, {0x5, 0x4, 0x7, 0x8}, {0x1, 0x2, 0xe, 0x8}, {0x1, 0x5, 0x0, 0x8}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x5}, 0x90) (async) 08:37:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x4000000000008, 0x0, 0x3, 0xd9ca, 0x7, 0x8, 0x0, 0x7, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@union={0x1, 0x9, 0x0, 0x5, 0x0, 0x83, [{0xd, 0x2, 0x7}, {0x2, 0x2, 0x8}, {0x10, 0x0, 0x20}, {0x7, 0x1, 0x9}, {0x3, 0x0, 0x8}, {0x10, 0x0, 0x20}, {0x4, 0x1, 0x6696}, {0xf, 0x5, 0x9}, {0x8, 0x0, 0x3a0}]}]}, {0x0, [0x61, 0x5f, 0x0, 0x2e, 0x2e, 0x0, 0x61, 0x2e]}}, &(0x7f0000000240)=""/14, 0x9a, 0xe, 0x1, 0x1}, 0x20) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@union={0x1, 0x9, 0x0, 0x5, 0x0, 0x83, [{0xd, 0x2, 0x7}, {0x2, 0x2, 0x8}, {0x10, 0x0, 0x20}, {0x7, 0x1, 0x9}, {0x3, 0x0, 0x8}, {0x10, 0x0, 0x20}, {0x4, 0x1, 0x6696}, {0xf, 0x5, 0x9}, {0x8, 0x0, 0x3a0}]}]}, {0x0, [0x61, 0x5f, 0x0, 0x2e, 0x2e, 0x0, 0x61, 0x2e]}}, &(0x7f0000000240)=""/14, 0x9a, 0xe, 0x1, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0x3f, 0x4, 0xa0, r1, 0x2, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0x3}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0x3f, 0x4, 0xa0, r1, 0x2, '\x00', 0x0, r2, 0x1, 0x3, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x21, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x44}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0x77, 0x0, 0x2, 0x7, 0x9}], &(0x7f0000000000)='syzkaller\x00', 0x401, 0x17, &(0x7f0000000100)=""/23, 0x41000, 0x1, '\x00', 0x0, 0x7, r4, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x6, 0x9}, 0x10, 0xffffffffffffffff, r0, 0x1, &(0x7f0000000400)=[r5], &(0x7f0000000800)=[{0x1, 0x5, 0xe, 0x9}], 0x10, 0xfff}, 0x90) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000900, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8b, 0x8b, 0xa, [@volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xc4d6}}, @datasec={0x1, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x2, 0xdb3f}, {0x2, 0x10000, 0x1}, {0x5, 0x101, 0x7e}, {0x2, 0x80}], "8f92fe"}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x5f, 0x30, 0x30, 0x5f, 0x2e, 0x30, 0x30]}}, &(0x7f0000000480)=""/198, 0xae, 0xc6, 0x0, 0x6}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000780)=""/151, 0x97, 0x0, &(0x7f0000000840)=""/162, 0xa2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x7, &(0x7f0000000040)=@raw=[@generic={0x6, 0x1, 0x5, 0x5, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0xaf}, @jmp={0x5, 0x1, 0x4, 0x6, 0xa, 0x80, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x81, 0x66, &(0x7f00000002c0)=""/102, 0x40f00, 0x31, '\x00', r1, 0x35, r2, 0x8, &(0x7f00000005c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x7, 0x510}, 0x10, r3, r0, 0x1, 0x0, &(0x7f0000000940)=[{0x4, 0x1, 0x9}], 0x10, 0x8}, 0x90) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x381a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r5 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x81, 0x0, 0x3, 0x0, 0x1, 0x1140, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x110890, 0x1ff, 0x1dee, 0x4, 0xc4, 0x3, 0x1, 0x0, 0x9e7, 0x0, 0x18}, r5, 0xc, r4, 0x12) 08:37:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8001100, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="188817d94ea7935645141d99920000001800d65531c73aa3f1de252a18ff0f00002f1bfb00f605e8ed386bb9d548baa45e59"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000001, 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x9) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8b, 0x8b, 0xa, [@volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xc4d6}}, @datasec={0x1, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x2, 0xdb3f}, {0x2, 0x10000, 0x1}, {0x5, 0x101, 0x7e}, {0x2, 0x80}], "8f92fe"}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x5f, 0x30, 0x30, 0x5f, 0x2e, 0x30, 0x30]}}, &(0x7f0000000480)=""/198, 0xae, 0xc6, 0x0, 0x6}, 0x20) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000780)=""/151, 0x97, 0x0, &(0x7f0000000840)=""/162, 0xa2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x7, &(0x7f0000000040)=@raw=[@generic={0x6, 0x1, 0x5, 0x5, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0xaf}, @jmp={0x5, 0x1, 0x4, 0x6, 0xa, 0x80, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x81, 0x66, &(0x7f00000002c0)=""/102, 0x40f00, 0x31, '\x00', r1, 0x35, r2, 0x8, &(0x7f00000005c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x7, 0x510}, 0x10, r3, r0, 0x1, 0x0, &(0x7f0000000940)=[{0x4, 0x1, 0x9}], 0x10, 0x8}, 0x90) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x381a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) r5 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x81, 0x0, 0x3, 0x0, 0x1, 0x1140, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x110890, 0x1ff, 0x1dee, 0x4, 0xc4, 0x3, 0x1, 0x0, 0x9e7, 0x0, 0x18}, r5, 0xc, r4, 0x12) 08:37:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8001f00, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8b, 0x8b, 0xa, [@volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xc4d6}}, @datasec={0x1, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x2, 0xdb3f}, {0x2, 0x10000, 0x1}, {0x5, 0x101, 0x7e}, {0x2, 0x80}], "8f92fe"}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x5f, 0x30, 0x30, 0x5f, 0x2e, 0x30, 0x30]}}, &(0x7f0000000480)=""/198, 0xae, 0xc6, 0x0, 0x6}, 0x20) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000780)=""/151, 0x97, 0x0, &(0x7f0000000840)=""/162, 0xa2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x7, &(0x7f0000000040)=@raw=[@generic={0x6, 0x1, 0x5, 0x5, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0xaf}, @jmp={0x5, 0x1, 0x4, 0x6, 0xa, 0x80, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x81, 0x66, &(0x7f00000002c0)=""/102, 0x40f00, 0x31, '\x00', r1, 0x35, r2, 0x8, &(0x7f00000005c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xc, 0x7, 0x510}, 0x10, r3, r0, 0x1, 0x0, &(0x7f0000000940)=[{0x4, 0x1, 0x9}], 0x10, 0x8}, 0x90) (async, rerun: 64) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x381a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) r5 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x81, 0x0, 0x3, 0x0, 0x1, 0x1140, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x110890, 0x1ff, 0x1dee, 0x4, 0xc4, 0x3, 0x1, 0x0, 0x9e7, 0x0, 0x18}, r5, 0xc, r4, 0x12) 08:37:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x18, 0xa, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000003000000000000000600000018460000fdffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000271c8000fcffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9105, 0xa9, &(0x7f0000001b40)=""/169, 0x40f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x400, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0xf, 0xfffffff8, 0x3ff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001ac0)=[{0x1, 0x4, 0x0, 0x7}, {0x0, 0x2, 0x10, 0x9}, {0x5, 0x4, 0xd, 0x1}], 0x10, 0x7f}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x3, 0x8}, 0xc) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000100)=@raw=[@generic={0xf5, 0x9, 0xd, 0xffff, 0x20}], &(0x7f0000000140)='GPL\x00', 0xfffff000, 0x1000, &(0x7f0000000a40)=""/4096, 0x40f00, 0x31, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r2, r3, r4], &(0x7f0000000500)=[{0x3, 0x5, 0xa, 0xc}, {0x4, 0x5, 0x5, 0x8}], 0x10, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000640)='\x00') 08:37:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8002000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="188817d94ea7935645141d99920000001800d65531c73aa3f1de252a18ff0f00002f1bfb00f605e8ed386bb9d548baa45e59"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000001, 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x9) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000001, 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x9) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) close(r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) r5 = perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_config_ext, 0x0, 0x0, 0x340f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x10, &(0x7f0000000500), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1c, 0x4, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x10, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x11, 0x50}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, r10]}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r12 = syz_clone(0xc2000400, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x8, 0x1, 0x8d, 0xfb, 0x0, 0x6, 0x82, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000240)}, 0x2021, 0x3, 0x8, 0x7, 0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2}, r12, 0x0, r13, 0xb) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x24e, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x48) (async) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) (async) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r18}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1d, &(0x7f00000001c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x2, 0x6, 0x3, 0xfffffffffffffffe, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @jmp={0x5, 0x1, 0xa, 0x6, 0xd, 0x40}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7b}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x10000}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, 0x25, r13, 0x8, &(0x7f00000003c0)={0xe6f, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x7, 0xfffff000, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r14, r15, r16, r17, r18, 0xffffffffffffffff, 0xffffffffffffffff, r19], &(0x7f00000006c0)=[{0x0, 0x5, 0x2, 0x1}, {0x2, 0x4, 0x5, 0x9}, {0x5, 0x3, 0x10, 0x9}], 0x10, 0xf4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x25, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@llx}, @ldst={0x0, 0x0, 0x0, 0x4, 0x8, 0xfffffffffffffff0}, @printk={@lx}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xee, 0x8, &(0x7f0000000140)=""/8, 0x41100, 0x2, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000280), &(0x7f0000000700)=[{0x5, 0x2, 0x5, 0xa}, {0x3, 0x3, 0xc, 0xa}, {0x2, 0x3, 0x7, 0xa}, {0x3, 0x4, 0x8, 0x8}, {0x3, 0x4, 0x8, 0x8}, {0x2, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x10, 0x9}, {0x2, 0x2, 0x0, 0x6}, {0x3, 0x3, 0x3, 0x1}], 0x10, 0x1}, 0x90) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="d03d511e1defa7e7000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000940)={0x3, 0x80, 0x86, 0x3f, 0xf9, 0x20, 0x0, 0xffffffff80000001, 0x400c4, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000900), 0xa}, 0x0, 0x3, 0x6, 0x5, 0x1835, 0x9, 0x4, 0x0, 0x1, 0x0, 0x7}, r3, 0xc, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f00000006c0), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x0, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000f30800007b8af0ff00000000aaa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500005408000085000000a50000008520000005000000"], &(0x7f0000000280)='GPL\x00', 0x7, 0xcd, &(0x7f0000000440)=""/205, 0x41100, 0x21, '\x00', r5, 0x0, r2, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x3, 0x4e0, 0xd35}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r6, r3, r3, r2, r4, r4], &(0x7f0000000580)=[{0x4, 0x3}, {0x0, 0x3, 0x7, 0xc}, {0x3, 0x1, 0xc, 0x4}, {0x2, 0x1, 0x9}], 0x10, 0x1}, 0x90) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x7fffffff, 0x7, 0x545, 0x6604a01bdc193ec8, r1, 0x20, '\x00', r5, r7, 0x5, 0x1, 0x1}, 0x48) 08:37:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8007000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="188817d94ea7935645141d99920000001800d65531c73aa3f1de252a18ff0f00002f1bfb00f605e8ed386bb9d548baa45e59"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async, rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async, rerun: 32) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000001, 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x9) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) close(r3) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x18, 0xa, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000003000000000000000600000018460000fdffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000271c8000fcffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9105, 0xa9, &(0x7f0000001b40)=""/169, 0x40f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x400, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0xf, 0xfffffff8, 0x3ff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001ac0)=[{0x1, 0x4, 0x0, 0x7}, {0x0, 0x2, 0x10, 0x9}, {0x5, 0x4, 0xd, 0x1}], 0x10, 0x7f}, 0x90) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x18) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000100)=@raw=[@generic={0xf5, 0x9, 0xd, 0xffff, 0x20}], &(0x7f0000000140)='GPL\x00', 0xfffff000, 0x1000, &(0x7f0000000a40)=""/4096, 0x40f00, 0x31, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r2, r3, r4], &(0x7f0000000500)=[{0x3, 0x5, 0xa, 0xc}, {0x4, 0x5, 0x5, 0x8}], 0x10, 0x2}, 0x90) (async) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000640)='\x00') 08:37:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="d03d511e1defa7e7000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000940)={0x3, 0x80, 0x86, 0x3f, 0xf9, 0x20, 0x0, 0xffffffff80000001, 0x400c4, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000900), 0xa}, 0x0, 0x3, 0x6, 0x5, 0x1835, 0x9, 0x4, 0x0, 0x1, 0x0, 0x7}, r3, 0xc, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f00000006c0), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x0, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000f30800007b8af0ff00000000aaa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500005408000085000000a50000008520000005000000"], &(0x7f0000000280)='GPL\x00', 0x7, 0xcd, &(0x7f0000000440)=""/205, 0x41100, 0x21, '\x00', r5, 0x0, r2, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x3, 0x4e0, 0xd35}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r6, r3, r3, r2, r4, r4], &(0x7f0000000580)=[{0x4, 0x3}, {0x0, 0x3, 0x7, 0xc}, {0x3, 0x1, 0xc, 0x4}, {0x2, 0x1, 0x9}], 0x10, 0x1}, 0x90) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x7fffffff, 0x7, 0x545, 0x6604a01bdc193ec8, r1, 0x20, '\x00', r5, r7, 0x5, 0x1, 0x1}, 0x48) 08:37:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10, r2}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x30, 0x6, 0x9f9b, 0x2400, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffff00}, [@ldst={0x1, 0x2, 0x6, 0x6, 0x4, 0x20, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000000400)='GPL\x00', 0x4a47, 0xd, &(0x7f0000000580)=""/13, 0x100, 0x10, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xf, 0x1, 0xb5}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000840)=[r1, 0xffffffffffffffff, r1, r1, r1, r1, r1, r1, r3, r4], &(0x7f0000000880)=[{0x5, 0x3, 0xf, 0xb}, {0x5, 0x4, 0x9, 0x6}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0x6}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x80, 0xfc, 0x2, 0x1f, 0x84, 0x0, 0x8, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x7, 0xfff, 0x3, 0x4, 0x0, 0xa8a, 0x0, 0x8}, r5, 0x2, 0xffffffffffffffff, 0xc) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = gettid() perf_event_open(&(0x7f0000000300)={0x2b097a2751b3d28, 0x80, 0x8, 0x6, 0x22, 0x2, 0x0, 0x57c8, 0x40040, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa5f, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x284, 0x7fff, 0x7, 0x0, 0x0, 0x9, 0xbd, 0x0, 0x7fff, 0x0, 0x9}, r9, 0x1, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2, 0x81, 0x3, 0x1, 0x0, 0x9, 0x40188, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4000, 0x9e, 0x8, 0x7, 0x9, 0x8, 0x100, 0x0, 0x6, 0x0, 0x5}, r9, 0x7, r8, 0x2) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x2, 0x53, 0x3, 0x7f, 0x0, 0x8000, 0x9fa6ada6cba09b84, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x7fffffffffffffff, 0x57b, 0x1, 0x7f, 0x6dd, 0x2, 0x0, 0xffff, 0x0, 0x7fff}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) (async) r5 = perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_config_ext, 0x0, 0x0, 0x340f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x10, &(0x7f0000000500), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1c, 0x4, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x10, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x11, 0x50}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, r10]}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r12 = syz_clone(0xc2000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x8, 0x1, 0x8d, 0xfb, 0x0, 0x6, 0x82, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000240)}, 0x2021, 0x3, 0x8, 0x7, 0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2}, r12, 0x0, r13, 0xb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x24e, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x48) (async) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r18}, 0x38) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1d, &(0x7f00000001c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x2, 0x6, 0x3, 0xfffffffffffffffe, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @jmp={0x5, 0x1, 0xa, 0x6, 0xd, 0x40}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7b}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x10000}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, 0x25, r13, 0x8, &(0x7f00000003c0)={0xe6f, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x7, 0xfffff000, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r14, r15, r16, r17, r18, 0xffffffffffffffff, 0xffffffffffffffff, r19], &(0x7f00000006c0)=[{0x0, 0x5, 0x2, 0x1}, {0x2, 0x4, 0x5, 0x9}, {0x5, 0x3, 0x10, 0x9}], 0x10, 0xf4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x25, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@llx}, @ldst={0x0, 0x0, 0x0, 0x4, 0x8, 0xfffffffffffffff0}, @printk={@lx}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xee, 0x8, &(0x7f0000000140)=""/8, 0x41100, 0x2, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000280), &(0x7f0000000700)=[{0x5, 0x2, 0x5, 0xa}, {0x3, 0x3, 0xc, 0xa}, {0x2, 0x3, 0x7, 0xa}, {0x3, 0x4, 0x8, 0x8}, {0x3, 0x4, 0x8, 0x8}, {0x2, 0x5, 0x9, 0xa}, {0x5, 0x3, 0x10, 0x9}, {0x2, 0x2, 0x0, 0x6}, {0x3, 0x3, 0x3, 0x1}], 0x10, 0x1}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x9000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="d03d511e1defa7e7000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) perf_event_open$cgroup(&(0x7f0000000940)={0x3, 0x80, 0x86, 0x3f, 0xf9, 0x20, 0x0, 0xffffffff80000001, 0x400c4, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000900), 0xa}, 0x0, 0x3, 0x6, 0x5, 0x1835, 0x9, 0x4, 0x0, 0x1, 0x0, 0x7}, r3, 0xc, 0xffffffffffffffff, 0x2) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000180)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f00000006c0), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x0, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000f30800007b8af0ff00000000aaa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500005408000085000000a50000008520000005000000"], &(0x7f0000000280)='GPL\x00', 0x7, 0xcd, &(0x7f0000000440)=""/205, 0x41100, 0x21, '\x00', r5, 0x0, r2, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x3, 0x4e0, 0xd35}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r6, r3, r3, r2, r4, r4], &(0x7f0000000580)=[{0x4, 0x3}, {0x0, 0x3, 0x7, 0xc}, {0x3, 0x1, 0xc, 0x4}, {0x2, 0x1, 0x9}], 0x10, 0x1}, 0x90) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x7fffffff, 0x7, 0x545, 0x6604a01bdc193ec8, r1, 0x20, '\x00', r5, r7, 0x5, 0x1, 0x1}, 0x48) 08:37:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) perf_event_open(&(0x7f0000000100)={0x1, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) perf_event_open(&(0x7f0000000100)={0x1, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") (async) 08:37:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x1f000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xba, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000880)=""/179, 0xb3, 0x0, &(0x7f0000000a40)=""/237, 0xed}}, 0x10) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000e10000000000ce29000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000480), 0x1e00, 0x21, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x1, 0x1, 0x8000006}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r7, r7, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000880)=[{0x4, 0x2, 0x2, 0x8}, {0x0, 0x4, 0x1, 0xd}, {0x4, 0x2, 0x2}, {0x3, 0x4, 0x8}], 0x10, 0x7fffffff}, 0x90) r9 = perf_event_open$cgroup(&(0x7f0000000d00)={0x3, 0x80, 0x7f, 0x79, 0x5, 0xe0, 0x0, 0x7fffffffffffffff, 0xd0000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000cc0)}, 0x2600, 0x9, 0x6fa3, 0x6, 0x20000, 0x101, 0x1, 0x0, 0x60, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r2, 0x5) perf_event_open(&(0x7f0000000c40)={0x4, 0x80, 0x1, 0x47, 0x88, 0x7f, 0x0, 0x7fffffffffffffff, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000c00), 0x5}, 0x10, 0x0, 0x2f6c7332, 0x3, 0x1, 0x2, 0x6, 0x0, 0x7, 0x0, 0xfa0}, r3, 0x6, r9, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1c, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x40}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000240)='syzkaller\x00', 0xffff, 0xe9, &(0x7f00000002c0)=""/233, 0x0, 0x2, '\x00', r5, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000940)=[r7], &(0x7f0000000980)=[{0x0, 0x5, 0xd, 0xc}, {0x0, 0x1, 0x7, 0x9}, {0x1, 0x3, 0xb, 0x2}, {0x4, 0x2, 0xb, 0xb}], 0x10, 0x101}, 0x90) 08:37:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000540), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x100}, 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000100)}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) r3 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xba, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000880)=""/179, 0xb3, 0x0, &(0x7f0000000a40)=""/237, 0xed}}, 0x10) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000e10000000000ce29000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000480), 0x1e00, 0x21, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x1, 0x1, 0x8000006}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r7, r7, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000880)=[{0x4, 0x2, 0x2, 0x8}, {0x0, 0x4, 0x1, 0xd}, {0x4, 0x2, 0x2}, {0x3, 0x4, 0x8}], 0x10, 0x7fffffff}, 0x90) r9 = perf_event_open$cgroup(&(0x7f0000000d00)={0x3, 0x80, 0x7f, 0x79, 0x5, 0xe0, 0x0, 0x7fffffffffffffff, 0xd0000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000cc0)}, 0x2600, 0x9, 0x6fa3, 0x6, 0x20000, 0x101, 0x1, 0x0, 0x60, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r2, 0x5) perf_event_open(&(0x7f0000000c40)={0x4, 0x80, 0x1, 0x47, 0x88, 0x7f, 0x0, 0x7fffffffffffffff, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000c00), 0x5}, 0x10, 0x0, 0x2f6c7332, 0x3, 0x1, 0x2, 0x6, 0x0, 0x7, 0x0, 0xfa0}, r3, 0x6, r9, 0xb) (async) perf_event_open(&(0x7f0000000c40)={0x4, 0x80, 0x1, 0x47, 0x88, 0x7f, 0x0, 0x7fffffffffffffff, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000c00), 0x5}, 0x10, 0x0, 0x2f6c7332, 0x3, 0x1, 0x2, 0x6, 0x0, 0x7, 0x0, 0xfa0}, r3, 0x6, r9, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1c, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x40}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000240)='syzkaller\x00', 0xffff, 0xe9, &(0x7f00000002c0)=""/233, 0x0, 0x2, '\x00', r5, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000940)=[r7], &(0x7f0000000980)=[{0x0, 0x5, 0xd, 0xc}, {0x0, 0x1, 0x7, 0x9}, {0x1, 0x3, 0xb, 0x2}, {0x4, 0x2, 0xb, 0xb}], 0x10, 0x101}, 0x90) 08:37:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10, r2}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x30, 0x6, 0x9f9b, 0x2400, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffff00}, [@ldst={0x1, 0x2, 0x6, 0x6, 0x4, 0x20, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000000400)='GPL\x00', 0x4a47, 0xd, &(0x7f0000000580)=""/13, 0x100, 0x10, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xf, 0x1, 0xb5}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000840)=[r1, 0xffffffffffffffff, r1, r1, r1, r1, r1, r1, r3, r4], &(0x7f0000000880)=[{0x5, 0x3, 0xf, 0xb}, {0x5, 0x4, 0x9, 0x6}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0x6}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x80, 0xfc, 0x2, 0x1f, 0x84, 0x0, 0x8, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x7, 0xfff, 0x3, 0x4, 0x0, 0xa8a, 0x0, 0x8}, r5, 0x2, 0xffffffffffffffff, 0xc) (async) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r9 = gettid() perf_event_open(&(0x7f0000000300)={0x2b097a2751b3d28, 0x80, 0x8, 0x6, 0x22, 0x2, 0x0, 0x57c8, 0x40040, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa5f, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x284, 0x7fff, 0x7, 0x0, 0x0, 0x9, 0xbd, 0x0, 0x7fff, 0x0, 0x9}, r9, 0x1, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2, 0x81, 0x3, 0x1, 0x0, 0x9, 0x40188, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4000, 0x9e, 0x8, 0x7, 0x9, 0x8, 0x100, 0x0, 0x6, 0x0, 0x5}, r9, 0x7, r8, 0x2) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x2, 0x53, 0x3, 0x7f, 0x0, 0x8000, 0x9fa6ada6cba09b84, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x7fffffffffffffff, 0x57b, 0x1, 0x7f, 0x6dd, 0x2, 0x0, 0xffff, 0x0, 0x7fff}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xba, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000880)=""/179, 0xb3, 0x0, &(0x7f0000000a40)=""/237, 0xed}}, 0x10) r7 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000e10000000000ce29000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000480), 0x1e00, 0x21, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x1, 0x1, 0x8000006}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r7, r7, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000880)=[{0x4, 0x2, 0x2, 0x8}, {0x0, 0x4, 0x1, 0xd}, {0x4, 0x2, 0x2}, {0x3, 0x4, 0x8}], 0x10, 0x7fffffff}, 0x90) (async) r9 = perf_event_open$cgroup(&(0x7f0000000d00)={0x3, 0x80, 0x7f, 0x79, 0x5, 0xe0, 0x0, 0x7fffffffffffffff, 0xd0000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000cc0)}, 0x2600, 0x9, 0x6fa3, 0x6, 0x20000, 0x101, 0x1, 0x0, 0x60, 0x0, 0x7}, 0xffffffffffffffff, 0x3, r2, 0x5) perf_event_open(&(0x7f0000000c40)={0x4, 0x80, 0x1, 0x47, 0x88, 0x7f, 0x0, 0x7fffffffffffffff, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000c00), 0x5}, 0x10, 0x0, 0x2f6c7332, 0x3, 0x1, 0x2, 0x6, 0x0, 0x7, 0x0, 0xfa0}, r3, 0x6, r9, 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1c, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x40}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000240)='syzkaller\x00', 0xffff, 0xe9, &(0x7f00000002c0)=""/233, 0x0, 0x2, '\x00', r5, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000940)=[r7], &(0x7f0000000980)=[{0x0, 0x5, 0xd, 0xc}, {0x0, 0x1, 0x7, 0x9}, {0x1, 0x3, 0xb, 0x2}, {0x4, 0x2, 0xb, 0xb}], 0x10, 0x101}, 0x90) [ 359.891669][ T30] audit: type=1400 audit(1710146250.252:145): avc: denied { setopt } for pid=15033 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 08:37:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10, r2}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x30, 0x6, 0x9f9b, 0x2400, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffff00}, [@ldst={0x1, 0x2, 0x6, 0x6, 0x4, 0x20, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x0, 0x0, 0xd, 0x0, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000000400)='GPL\x00', 0x4a47, 0xd, &(0x7f0000000580)=""/13, 0x100, 0x10, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xf, 0x1, 0xb5}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000840)=[r1, 0xffffffffffffffff, r1, r1, r1, r1, r1, r1, r3, r4], &(0x7f0000000880)=[{0x5, 0x3, 0xf, 0xb}, {0x5, 0x4, 0x9, 0x6}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0x6}, 0x90) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x80, 0xfc, 0x2, 0x1f, 0x84, 0x0, 0x8, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x7, 0xfff, 0x3, 0x4, 0x0, 0xa8a, 0x0, 0x8}, r5, 0x2, 0xffffffffffffffff, 0xc) (async) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r9 = gettid() perf_event_open(&(0x7f0000000300)={0x2b097a2751b3d28, 0x80, 0x8, 0x6, 0x22, 0x2, 0x0, 0x57c8, 0x40040, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa5f, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x284, 0x7fff, 0x7, 0x0, 0x0, 0x9, 0xbd, 0x0, 0x7fff, 0x0, 0x9}, r9, 0x1, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2, 0x81, 0x3, 0x1, 0x0, 0x9, 0x40188, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4000, 0x9e, 0x8, 0x7, 0x9, 0x8, 0x100, 0x0, 0x6, 0x0, 0x5}, r9, 0x7, r8, 0x2) (async) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x2, 0x53, 0x3, 0x7f, 0x0, 0x8000, 0x9fa6ada6cba09b84, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x7fffffffffffffff, 0x57b, 0x1, 0x7f, 0x6dd, 0x2, 0x0, 0xffff, 0x0, 0x7fff}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x12044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xf2, 0xc0, 0x0, 0xcb, 0x0, 0x8, 0x2080, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x3}, 0x20, 0x8, 0x4, 0x9, 0x1, 0xfffffff7, 0x60d, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xf, r1, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000640)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800c835ac4ed279844b0000000000850000000e0000009577cc81beb197754fa289c752eb42cf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x2, 0x2c, 0x0, 0x0, 0x3, 0x405ac, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x20}, 0x4040, 0x6c40, 0x8000, 0x0, 0x0, 0x80000001, 0xfffd, 0x0, 0x7fffffff, 0x0, 0x81}, r5, 0xd, r4, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r6 = syz_clone(0x0, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r7 = perf_event_open$cgroup(&(0x7f0000000840)={0x2, 0x80, 0x1, 0x7f, 0x7, 0x7e, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000800), 0x8}, 0x4c0, 0x1, 0x0, 0x9, 0x9, 0x4, 0x8, 0x0, 0x1000, 0x0, 0x5}, 0xffffffffffffffff, 0xc, r2, 0x0) perf_event_open(&(0x7f0000000780)={0xa, 0x80, 0x3, 0x25, 0xbc, 0xff, 0x0, 0xd61, 0x5030, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000680), 0x8}, 0x108, 0xfffffffffffffffe, 0x401, 0x8, 0x8000000000000000, 0x800, 0x3, 0x0, 0x10001, 0x0, 0x80000000}, r6, 0x4, r7, 0x8) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_error\x00', r0}, 0x10) 08:37:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000003850000012300000095bc145f108968882e0e7a45cb0dc97b2c96efc931b9f66b4b25574e390ec5f68340d8321f1e46d61b47bcf8d797"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xc1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x79, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x7, 0x1, 0x1, 0x45, r1, 0x7d02, '\x00', r2, r3, 0x0, 0x4, 0x0, 0xe}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0xc4, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0xd}, 0x2000, 0x8, 0x0, 0x4, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r4, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x12044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xf2, 0xc0, 0x0, 0xcb, 0x0, 0x8, 0x2080, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x3}, 0x20, 0x8, 0x4, 0x9, 0x1, 0xfffffff7, 0x60d, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xf, r1, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000640)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800c835ac4ed279844b0000000000850000000e0000009577cc81beb197754fa289c752eb42cf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x2, 0x2c, 0x0, 0x0, 0x3, 0x405ac, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x20}, 0x4040, 0x6c40, 0x8000, 0x0, 0x0, 0x80000001, 0xfffd, 0x0, 0x7fffffff, 0x0, 0x81}, r5, 0xd, r4, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r6 = syz_clone(0x0, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r7 = perf_event_open$cgroup(&(0x7f0000000840)={0x2, 0x80, 0x1, 0x7f, 0x7, 0x7e, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000800), 0x8}, 0x4c0, 0x1, 0x0, 0x9, 0x9, 0x4, 0x8, 0x0, 0x1000, 0x0, 0x5}, 0xffffffffffffffff, 0xc, r2, 0x0) perf_event_open(&(0x7f0000000780)={0xa, 0x80, 0x3, 0x25, 0xbc, 0xff, 0x0, 0xd61, 0x5030, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000680), 0x8}, 0x108, 0xfffffffffffffffe, 0x401, 0x8, 0x8000000000000000, 0x800, 0x3, 0x0, 0x10001, 0x0, 0x80000000}, r6, 0x4, r7, 0x8) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_error\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x12044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xf2, 0xc0, 0x0, 0xcb, 0x0, 0x8, 0x2080, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x3}, 0x20, 0x8, 0x4, 0x9, 0x1, 0xfffffff7, 0x60d, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xf, r1, 0x8) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000640)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800c835ac4ed279844b0000000000850000000e0000009577cc81beb197754fa289c752eb42cf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) getpid() (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x2, 0x2c, 0x0, 0x0, 0x3, 0x405ac, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x20}, 0x4040, 0x6c40, 0x8000, 0x0, 0x0, 0x80000001, 0xfffd, 0x0, 0x7fffffff, 0x0, 0x81}, r5, 0xd, r4, 0x3) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) syz_clone(0x0, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) perf_event_open$cgroup(&(0x7f0000000840)={0x2, 0x80, 0x1, 0x7f, 0x7, 0x7e, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000800), 0x8}, 0x4c0, 0x1, 0x0, 0x9, 0x9, 0x4, 0x8, 0x0, 0x1000, 0x0, 0x5}, 0xffffffffffffffff, 0xc, r2, 0x0) (async) perf_event_open(&(0x7f0000000780)={0xa, 0x80, 0x3, 0x25, 0xbc, 0xff, 0x0, 0xd61, 0x5030, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000680), 0x8}, 0x108, 0xfffffffffffffffe, 0x401, 0x8, 0x8000000000000000, 0x800, 0x3, 0x0, 0x10001, 0x0, 0x80000000}, r6, 0x4, r7, 0x8) (async) close(r1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_error\x00', r0}, 0x10) (async) 08:37:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x12044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xf2, 0xc0, 0x0, 0xcb, 0x0, 0x8, 0x2080, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x3}, 0x20, 0x8, 0x4, 0x9, 0x1, 0xfffffff7, 0x60d, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xf, r1, 0x8) (async) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xf2, 0xc0, 0x0, 0xcb, 0x0, 0x8, 0x2080, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x3}, 0x20, 0x8, 0x4, 0x9, 0x1, 0xfffffff7, 0x60d, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xf, r1, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000640)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800c835ac4ed279844b0000000000850000000e0000009577cc81beb197754fa289c752eb42cf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpid() (async) r5 = getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x2, 0x2c, 0x0, 0x0, 0x3, 0x405ac, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x20}, 0x4040, 0x6c40, 0x8000, 0x0, 0x0, 0x80000001, 0xfffd, 0x0, 0x7fffffff, 0x0, 0x81}, r5, 0xd, r4, 0x3) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x2, 0x2c, 0x0, 0x0, 0x3, 0x405ac, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x20}, 0x4040, 0x6c40, 0x8000, 0x0, 0x0, 0x80000001, 0xfffd, 0x0, 0x7fffffff, 0x0, 0x81}, r5, 0xd, r4, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r6 = syz_clone(0x0, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") perf_event_open$cgroup(&(0x7f0000000840)={0x2, 0x80, 0x1, 0x7f, 0x7, 0x7e, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000800), 0x8}, 0x4c0, 0x1, 0x0, 0x9, 0x9, 0x4, 0x8, 0x0, 0x1000, 0x0, 0x5}, 0xffffffffffffffff, 0xc, r2, 0x0) (async) r7 = perf_event_open$cgroup(&(0x7f0000000840)={0x2, 0x80, 0x1, 0x7f, 0x7, 0x7e, 0x0, 0x6, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000800), 0x8}, 0x4c0, 0x1, 0x0, 0x9, 0x9, 0x4, 0x8, 0x0, 0x1000, 0x0, 0x5}, 0xffffffffffffffff, 0xc, r2, 0x0) perf_event_open(&(0x7f0000000780)={0xa, 0x80, 0x3, 0x25, 0xbc, 0xff, 0x0, 0xd61, 0x5030, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000680), 0x8}, 0x108, 0xfffffffffffffffe, 0x401, 0x8, 0x8000000000000000, 0x800, 0x3, 0x0, 0x10001, 0x0, 0x80000000}, r6, 0x4, r7, 0x8) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_error\x00', r0}, 0x10) 08:37:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000003850000012300000095bc145f108968882e0e7a45cb0dc97b2c96efc931b9f66b4b25574e390ec5f68340d8321f1e46d61b47bcf8d797"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xc1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x79, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x7, 0x1, 0x1, 0x45, r1, 0x7d02, '\x00', r2, r3, 0x0, 0x4, 0x0, 0xe}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0xc4, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0xd}, 0x2000, 0x8, 0x0, 0x4, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r4, 0x2, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xc, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xea, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r5 = openat$cgroup_ro(r0, &(0x7f0000001400)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x8, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x79, 0x4}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @struct={0xa, 0x5, 0x0, 0x4, 0x1, 0xc30, [{0xc, 0x5, 0x8}, {0x8, 0x3, 0x401}, {0xf, 0x2, 0x2}, {0x9, 0x4, 0x5}, {0x4, 0x3, 0x10000}]}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @func={0xc, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000001000)=""/71, 0xac, 0x47, 0x1, 0x831}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x6, 0x1, 0x9, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xe670}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b}], &(0x7f0000000140)='syzkaller\x00', 0xfffff384, 0x5c, &(0x7f00000002c0)=""/92, 0x41000, 0x19, '\x00', r3, 0x0, r5, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xd, 0x4, 0x4000000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[r6, r7, r6], &(0x7f0000000b40)=[{0x0, 0x1, 0xe}, {0x2, 0x4, 0x5}, {0x5, 0x4}], 0x10, 0x6}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000ad24581d4b64ffec850095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1a, 0x10, 0x5, 0xffffffc0, 0x39e8, r7, 0x7, '\x00', r3, r0, 0x3, 0x3, 0x5}, 0x48) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x0, r2}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x19, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000101000000fcffffa519a8e918190000", @ANYRES32=r9, @ANYBLOB="00000000000000000050030009000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000009500000000000000"], &(0x7f0000000d80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x35, r0, 0x8, &(0x7f0000000dc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0xa, 0xb8d, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x1, &(0x7f0000000ec0)=[r0, r6, r0, r2, r10], &(0x7f0000000f00)=[{0x1, 0x401, 0xe, 0x1}], 0x10, 0xfff}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r10, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x1f, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000c408000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300bd160000008500000083000000bf000000000000000000950000000000000018150017000000000000", @ANYRES32=r9, @ANYBLOB="000000000000000018130000", @ANYRES32=r12, @ANYBLOB="0000000000000000186b00001000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000186800000f0000000000000000080000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000011c0)='syzkaller\x00', 0x4, 0x12, &(0x7f0000001200)=""/18, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0xb, 0x20, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000012c0)=[{0x5, 0x1, 0x2, 0xb}, {0x1, 0x5, 0xe, 0x4}, {0x2, 0x3, 0xa, 0x7}, {0x4, 0x3, 0x5, 0xc}, {0x5, 0x1, 0xd, 0x2}, {0x2, 0x4, 0x8, 0x6}], 0x10, 0x3}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000003850000012300000095bc145f108968882e0e7a45cb0dc97b2c96efc931b9f66b4b25574e390ec5f68340d8321f1e46d61b47bcf8d797"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 64) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xc1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x79, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x7, 0x1, 0x1, 0x45, r1, 0x7d02, '\x00', r2, r3, 0x0, 0x4, 0x0, 0xe}, 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async, rerun: 64) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) (async, rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async, rerun: 32) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0xc4, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0xd}, 0x2000, 0x8, 0x0, 0x4, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r4, 0x2, 0xffffffffffffffff, 0x8) (async, rerun: 32) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) (async) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xc, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xea, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) r5 = openat$cgroup_ro(r0, &(0x7f0000001400)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x8, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x79, 0x4}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @struct={0xa, 0x5, 0x0, 0x4, 0x1, 0xc30, [{0xc, 0x5, 0x8}, {0x8, 0x3, 0x401}, {0xf, 0x2, 0x2}, {0x9, 0x4, 0x5}, {0x4, 0x3, 0x10000}]}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @func={0xc, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000001000)=""/71, 0xac, 0x47, 0x1, 0x831}, 0x20) (rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x6, 0x1, 0x9, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xe670}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b}], &(0x7f0000000140)='syzkaller\x00', 0xfffff384, 0x5c, &(0x7f00000002c0)=""/92, 0x41000, 0x19, '\x00', r3, 0x0, r5, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xd, 0x4, 0x4000000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[r6, r7, r6], &(0x7f0000000b40)=[{0x0, 0x1, 0xe}, {0x2, 0x4, 0x5}, {0x5, 0x4}], 0x10, 0x6}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000ad24581d4b64ffec850095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1a, 0x10, 0x5, 0xffffffc0, 0x39e8, r7, 0x7, '\x00', r3, r0, 0x3, 0x3, 0x5}, 0x48) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x0, r2}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x19, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000101000000fcffffa519a8e918190000", @ANYRES32=r9, @ANYBLOB="00000000000000000050030009000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000009500000000000000"], &(0x7f0000000d80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x35, r0, 0x8, &(0x7f0000000dc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0xa, 0xb8d, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x1, &(0x7f0000000ec0)=[r0, r6, r0, r2, r10], &(0x7f0000000f00)=[{0x1, 0x401, 0xe, 0x1}], 0x10, 0xfff}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r10, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x1f, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000c408000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300bd160000008500000083000000bf000000000000000000950000000000000018150017000000000000", @ANYRES32=r9, @ANYBLOB="000000000000000018130000", @ANYRES32=r12, @ANYBLOB="0000000000000000186b00001000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000186800000f0000000000000000080000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000011c0)='syzkaller\x00', 0x4, 0x12, &(0x7f0000001200)=""/18, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0xb, 0x20, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000012c0)=[{0x5, 0x1, 0x2, 0xb}, {0x1, 0x5, 0xe, 0x4}, {0x2, 0x3, 0xa, 0x7}, {0x4, 0x3, 0x5, 0xc}, {0x5, 0x1, 0xd, 0x2}, {0x2, 0x4, 0x8, 0x6}], 0x10, 0x3}, 0x90) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x26e1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(r4, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0xd1c41a00, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:30 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c40)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xc, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xea, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r5 = openat$cgroup_ro(r0, &(0x7f0000001400)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x8, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x79, 0x4}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @struct={0xa, 0x5, 0x0, 0x4, 0x1, 0xc30, [{0xc, 0x5, 0x8}, {0x8, 0x3, 0x401}, {0xf, 0x2, 0x2}, {0x9, 0x4, 0x5}, {0x4, 0x3, 0x10000}]}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @func={0xc, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000001000)=""/71, 0xac, 0x47, 0x1, 0x831}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x8, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x79, 0x4}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @struct={0xa, 0x5, 0x0, 0x4, 0x1, 0xc30, [{0xc, 0x5, 0x8}, {0x8, 0x3, 0x401}, {0xf, 0x2, 0x2}, {0x9, 0x4, 0x5}, {0x4, 0x3, 0x10000}]}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @func={0xc, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x2e, 0x30]}}, &(0x7f0000001000)=""/71, 0xac, 0x47, 0x1, 0x831}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x6, 0x1, 0x9, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xe670}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b}], &(0x7f0000000140)='syzkaller\x00', 0xfffff384, 0x5c, &(0x7f00000002c0)=""/92, 0x41000, 0x19, '\x00', r3, 0x0, r5, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xd, 0x4, 0x4000000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[r6, r7, r6], &(0x7f0000000b40)=[{0x0, 0x1, 0xe}, {0x2, 0x4, 0x5}, {0x5, 0x4}], 0x10, 0x6}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000ad24581d4b64ffec850095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1a, 0x10, 0x5, 0xffffffc0, 0x39e8, r7, 0x7, '\x00', r3, r0, 0x3, 0x3, 0x5}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x0, r2}, 0x18) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x0, r2}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x19, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000101000000fcffffa519a8e918190000", @ANYRES32=r9, @ANYBLOB="00000000000000000050030009000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000009500000000000000"], &(0x7f0000000d80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x35, r0, 0x8, &(0x7f0000000dc0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0xa, 0xb8d, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x1, &(0x7f0000000ec0)=[r0, r6, r0, r2, r10], &(0x7f0000000f00)=[{0x1, 0x401, 0xe, 0x1}], 0x10, 0xfff}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r10, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x1f, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000c408000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300bd160000008500000083000000bf000000000000000000950000000000000018150017000000000000", @ANYRES32=r9, @ANYBLOB="000000000000000018130000", @ANYRES32=r12, @ANYBLOB="0000000000000000186b00001000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000186800000f0000000000000000080000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000011c0)='syzkaller\x00', 0x4, 0x12, &(0x7f0000001200)=""/18, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0xb, 0x20, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000012c0)=[{0x5, 0x1, 0x2, 0xb}, {0x1, 0x5, 0xe, 0x4}, {0x2, 0x3, 0xa, 0x7}, {0x4, 0x3, 0x5, 0xc}, {0x5, 0x1, 0xd, 0x2}, {0x2, 0x4, 0x8, 0x6}], 0x10, 0x3}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x864d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x7, 0x200, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000ff0f000085000000b600000018350000040000000000000000000000186700000e00000000000000080000001800000001000100000000000000010018180000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000100000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x4, 0x8001, 0x59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r2, r3, 0xffffffffffffffff, r4, r5], &(0x7f0000000680), 0x10, 0xb0}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) r9 = openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0x5, 0x603d, 0x81, 0x0, r2, 0x8, '\x00', r6, r7, 0x2, 0x3, 0x3}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000000e00000095000000000000000085bee93b5b1d1986ca167dd50910fe26cdca56312bb709ac043fde8d6a5aedfb227321451a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r8}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xe, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x9, 0x2, 0x0, r9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000680)='syzkaller\x00', 0x7, 0x39, &(0x7f00000009c0)=""/57, 0x40f00, 0x2, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xf, 0x100, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[r4, r4, r7, r11, r2], &(0x7f0000000b00)=[{0x3, 0x3, 0x3, 0x6}, {0x5, 0x1, 0xd, 0xee0b4c9d41f01266}, {0x4, 0x3, 0x2, 0xa}, {0x3, 0x2, 0xb, 0x7}], 0x10, 0x800}, 0x90) syz_clone(0x240c4000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000008c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x864d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x7, 0x200, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000ff0f000085000000b600000018350000040000000000000000000000186700000e00000000000000080000001800000001000100000000000000010018180000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000100000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x4, 0x8001, 0x59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r2, r3, 0xffffffffffffffff, r4, r5], &(0x7f0000000680), 0x10, 0xb0}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) (async) r9 = openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0x5, 0x603d, 0x81, 0x0, r2, 0x8, '\x00', r6, r7, 0x2, 0x3, 0x3}, 0x48) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000000e00000095000000000000000085bee93b5b1d1986ca167dd50910fe26cdca56312bb709ac043fde8d6a5aedfb227321451a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r8}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xe, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x9, 0x2, 0x0, r9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000680)='syzkaller\x00', 0x7, 0x39, &(0x7f00000009c0)=""/57, 0x40f00, 0x2, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xf, 0x100, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[r4, r4, r7, r11, r2], &(0x7f0000000b00)=[{0x3, 0x3, 0x3, 0x6}, {0x5, 0x1, 0xd, 0xee0b4c9d41f01266}, {0x4, 0x3, 0x2, 0xa}, {0x3, 0x2, 0xb, 0x7}], 0x10, 0x800}, 0x90) (async) syz_clone(0x240c4000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000008c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(r4, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:30 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000000700)="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") 08:37:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.events\x00', 0x26e1, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x8) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(r4, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x864d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x4, 0x7, 0x200, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3}, 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000ff0f000085000000b600000018350000040000000000000000000000186700000e00000000000000080000001800000001000100000000000000010018180000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000100000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x4, 0x8001, 0x59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r2, r3, 0xffffffffffffffff, r4, r5], &(0x7f0000000680), 0x10, 0xb0}, 0x90) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) (async) r9 = openat$cgroup_ro(r7, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x15, 0x5, 0x603d, 0x81, 0x0, r2, 0x8, '\x00', r6, r7, 0x2, 0x3, 0x3}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000000e00000095000000000000000085bee93b5b1d1986ca167dd50910fe26cdca56312bb709ac043fde8d6a5aedfb227321451a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async, rerun: 32) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r8}, 0x8) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xe, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x9, 0x2, 0x0, r9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000680)='syzkaller\x00', 0x7, 0x39, &(0x7f00000009c0)=""/57, 0x40f00, 0x2, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xf, 0x100, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[r4, r4, r7, r11, r2], &(0x7f0000000b00)=[{0x3, 0x3, 0x3, 0x6}, {0x5, 0x1, 0xd, 0xee0b4c9d41f01266}, {0x4, 0x3, 0x2, 0xa}, {0x3, 0x2, 0xb, 0x7}], 0x10, 0x800}, 0x90) syz_clone(0x240c4000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000008c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7f, 0x1, 0x9c, 0x9, 0x0, 0x9, 0x42804, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb7}, 0x100, 0x3, 0x0, 0x3, 0x0, 0xffffffff, 0x5, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xe, r0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x7, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:30 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000000700)="5976ab6359bab305fdcba15a0f4271a0bf9f6d3982ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e24254d43e80834b11b19134f6576a0a6c1e4f8168f0a7de77389cc1d9f4c1cb834af1e81a0cf27b032c98f87e3f9ef64e1f8c5146d8e0d1516688d7dd7e184e41ff6202ffdb36e266cbb2795c554041ea6196f66720836b629c2d834f5bd794342ef94d414e30f53827d55fe57c810709d6012e3535c562df0d198f00c7bb1b0e76cfeeeda8a5254f7a3f76b224d8f1485db2b6c0409d7ede59bac3745cfb00ef8cf70768506c86d6d4859fb776dc470fca2eaf08d66ce3db686928317093e835c111c33e14c83fdda267cca6f0d7a0e304936fe76bd271c03d7db809b893b597053a1ca8113c27ee16911a09f68a51d2ef67e5ad762cdb4c6fa1d1f62bdad005189d82f1cab6a55") 08:37:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xb7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7482, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x3, 0x5, 0x8, 0x2, 0x10}, @alu={0x4, 0x0, 0xc, 0x1, 0x3, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3b, &(0x7f0000000100)=""/59, 0x40f00, 0x14, '\x00', r3, 0x0, r2, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x3, 0x401, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840), &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x8}], 0x10, 0x5}, 0x90) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000440)='rpc_request\x00', r0}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7f, 0x1, 0x9c, 0x9, 0x0, 0x9, 0x42804, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb7}, 0x100, 0x3, 0x0, 0x3, 0x0, 0xffffffff, 0x5, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xe, r0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x8, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000000700)="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") 08:37:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7f, 0x1, 0x9c, 0x9, 0x0, 0x9, 0x42804, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb7}, 0x100, 0x3, 0x0, 0x3, 0x0, 0xffffffff, 0x5, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) (rerun: 32) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xe, r0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") 08:37:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async, rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000540), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x100}, 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000100)}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xb7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7482, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x3, 0x5, 0x8, 0x2, 0x10}, @alu={0x4, 0x0, 0xc, 0x1, 0x3, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3b, &(0x7f0000000100)=""/59, 0x40f00, 0x14, '\x00', r3, 0x0, r2, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x3, 0x401, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840), &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x8}], 0x10, 0x5}, 0x90) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000440)='rpc_request\x00', r0}, 0x10) (async) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2200080, &(0x7f00000004c0)="2dc36825", 0x4, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000780)="5ba7f5a285fabde563e14457e1d2be70540e1f1c74eb6d398b8507eed8822c3882634181aee5d74afa492ffd6f5de3673f59d537937984a527abcb952c3fdfa1418bde7a511e96acbdd28a1132d7681a8a7b11ea1885a7795c23a3f556c997cfdd84dcaa9f411ee6319507c2e871f30a42c6111f35a618fa0c8f9268fc4f7298fa8fcd2f5ee70494231cecba58e9d50f27b66c8017eb1d6a6db7759984a8fc93cd889d4b1f470c81f64ad87497d65bf8b2b928e090a9c1a125a43a2b37ea8f484d734bc184011304f872d4f528cedd5ff39017") perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x20, 0x71, 0x0, 0x0, 0xd9, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff0000, 0x4, @perf_config_ext={0xc4, 0x9}, 0x8, 0x8, 0x5, 0x7, 0x7, 0xdb, 0x4, 0x0, 0x1, 0x0, 0x800}, r0, 0x2, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="20bcbdf87a575ae16f8b20fa48bad74218e1979b7138c239ecf0db650fae3d9c5a969f1c7b670e5365f900d4838f39acc3d235060117ab28460f1e33f71a686f36df38745f78cf3df34a5c3fe67c0300198ace9c691130c2d45098f0c9a54f8cce71fc5b88d8fafe33ca310e3fe695a0c695e53bdb", 0x75}, {&(0x7f0000000240)="2a41175bcb42f0c4342289a40ed5c00fce81922aa2459a60187cadfb97a1a0d732d68287bfdfdab159927b8008f85543", 0x30}, {&(0x7f00000002c0)="48b4828556b67e58dccc82f56de57454304c44abb0288dfe849475f49d502209e5526601cc2e3e8929ce3dc6e7d9380326bdd8f37ca6c4897000413723be6cdd7c6a80300f4b9c6a00e1133dc4b406a12c71d15c719fb2e1d86308592a62c7bbb31f30d39d461294d1ff4a19471aa27df6d1c46457dc209e8a972b5bb6c3eb3ead56f7fd1cacdc50cad4711463954c81611ac23f2bebabb7786a9ca696ae3304d28e3eda3f027037decf9ce887b66351c7d575ea9dca87bb555c124f86e3c4103fc32136cf0ca8972c8aa91b0e3b5dd978a7e987c02a04f917192038a6371e5bb5192f7e8d", 0xe5}], 0x3}, 0x24044804) 08:37:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x2d}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x900000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x4, 0x7f, 0x100, 0x455, r4, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000580), 0x8, 0xb2, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000800)=""/139, 0x8b, 0x0, &(0x7f00000008c0)=""/106, 0x6a}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0x24, &(0x7f0000000400)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x380}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0xc9, &(0x7f0000000200)=""/201, 0x40f00, 0x25, '\x00', r7, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r0, 0x3, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x5, 0x2, 0x3, 0xc}, {0x2, 0x3, 0x8, 0xc}, {0x2, 0x1, 0xd, 0x3}], 0x10, 0x7ff}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r11, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000b80)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1d, 0x28, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d40)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x28, r11, 0x8, &(0x7f0000000d80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x7, 0x7f, 0x7}, 0x10, r8, r10, 0x4, &(0x7f0000000e00), &(0x7f0000000e40)=[{0x2, 0x4, 0x6, 0x1}, {0x4, 0x4, 0x7, 0x3}, {0x3, 0x2, 0x6, 0xd}, {0x3, 0x1, 0xf, 0xb}], 0x10, 0x1000}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r14 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b40)={&(0x7f0000000780)="1dc492ee8ab4d16aeb262e6e532938b5430832f6b4ee22c0396c", 0x0, &(0x7f0000000bc0), 0x0, 0x0, r14}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x1d, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbab3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x6, 0x8, 0x9, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x3, 0xaa, &(0x7f0000001040)=""/170, 0x41000, 0x0, '\x00', r7, 0x0, r11, 0x8, &(0x7f0000001100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x3, 0xfffffab1, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001180)=[r2, r14, r13, r12, r12, r2, r4], &(0x7f00000011c0)=[{0x3, 0x1, 0x6, 0x5}, {0x4, 0x2, 0x3}, {0x4, 0x1, 0xa, 0x6}, {0x5, 0x3, 0x3, 0xa}, {0x2, 0x2, 0x1, 0x4}, {0x1, 0x4, 0xf, 0x9}, {0x1, 0x4, 0x5, 0x4}], 0x10, 0x6}, 0x90) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000540), 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x100}, 0x10}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000100)}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2200080, &(0x7f00000004c0)="2dc36825", 0x4, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000780)="5ba7f5a285fabde563e14457e1d2be70540e1f1c74eb6d398b8507eed8822c3882634181aee5d74afa492ffd6f5de3673f59d537937984a527abcb952c3fdfa1418bde7a511e96acbdd28a1132d7681a8a7b11ea1885a7795c23a3f556c997cfdd84dcaa9f411ee6319507c2e871f30a42c6111f35a618fa0c8f9268fc4f7298fa8fcd2f5ee70494231cecba58e9d50f27b66c8017eb1d6a6db7759984a8fc93cd889d4b1f470c81f64ad87497d65bf8b2b928e090a9c1a125a43a2b37ea8f484d734bc184011304f872d4f528cedd5ff39017") perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x20, 0x71, 0x0, 0x0, 0xd9, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff0000, 0x4, @perf_config_ext={0xc4, 0x9}, 0x8, 0x8, 0x5, 0x7, 0x7, 0xdb, 0x4, 0x0, 0x1, 0x0, 0x800}, r0, 0x2, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="20bcbdf87a575ae16f8b20fa48bad74218e1979b7138c239ecf0db650fae3d9c5a969f1c7b670e5365f900d4838f39acc3d235060117ab28460f1e33f71a686f36df38745f78cf3df34a5c3fe67c0300198ace9c691130c2d45098f0c9a54f8cce71fc5b88d8fafe33ca310e3fe695a0c695e53bdb", 0x75}, {&(0x7f0000000240)="2a41175bcb42f0c4342289a40ed5c00fce81922aa2459a60187cadfb97a1a0d732d68287bfdfdab159927b8008f85543", 0x30}, {&(0x7f00000002c0)="48b4828556b67e58dccc82f56de57454304c44abb0288dfe849475f49d502209e5526601cc2e3e8929ce3dc6e7d9380326bdd8f37ca6c4897000413723be6cdd7c6a80300f4b9c6a00e1133dc4b406a12c71d15c719fb2e1d86308592a62c7bbb31f30d39d461294d1ff4a19471aa27df6d1c46457dc209e8a972b5bb6c3eb3ead56f7fd1cacdc50cad4711463954c81611ac23f2bebabb7786a9ca696ae3304d28e3eda3f027037decf9ce887b66351c7d575ea9dca87bb555c124f86e3c4103fc32136cf0ca8972c8aa91b0e3b5dd978a7e987c02a04f917192038a6371e5bb5192f7e8d", 0xe5}], 0x3}, 0x24044804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x2200080, &(0x7f00000004c0)="2dc36825", 0x4, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000780)="5ba7f5a285fabde563e14457e1d2be70540e1f1c74eb6d398b8507eed8822c3882634181aee5d74afa492ffd6f5de3673f59d537937984a527abcb952c3fdfa1418bde7a511e96acbdd28a1132d7681a8a7b11ea1885a7795c23a3f556c997cfdd84dcaa9f411ee6319507c2e871f30a42c6111f35a618fa0c8f9268fc4f7298fa8fcd2f5ee70494231cecba58e9d50f27b66c8017eb1d6a6db7759984a8fc93cd889d4b1f470c81f64ad87497d65bf8b2b928e090a9c1a125a43a2b37ea8f484d734bc184011304f872d4f528cedd5ff39017") (async) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x20, 0x71, 0x0, 0x0, 0xd9, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff0000, 0x4, @perf_config_ext={0xc4, 0x9}, 0x8, 0x8, 0x5, 0x7, 0x7, 0xdb, 0x4, 0x0, 0x1, 0x0, 0x800}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="20bcbdf87a575ae16f8b20fa48bad74218e1979b7138c239ecf0db650fae3d9c5a969f1c7b670e5365f900d4838f39acc3d235060117ab28460f1e33f71a686f36df38745f78cf3df34a5c3fe67c0300198ace9c691130c2d45098f0c9a54f8cce71fc5b88d8fafe33ca310e3fe695a0c695e53bdb", 0x75}, {&(0x7f0000000240)="2a41175bcb42f0c4342289a40ed5c00fce81922aa2459a60187cadfb97a1a0d732d68287bfdfdab159927b8008f85543", 0x30}, {&(0x7f00000002c0)="48b4828556b67e58dccc82f56de57454304c44abb0288dfe849475f49d502209e5526601cc2e3e8929ce3dc6e7d9380326bdd8f37ca6c4897000413723be6cdd7c6a80300f4b9c6a00e1133dc4b406a12c71d15c719fb2e1d86308592a62c7bbb31f30d39d461294d1ff4a19471aa27df6d1c46457dc209e8a972b5bb6c3eb3ead56f7fd1cacdc50cad4711463954c81611ac23f2bebabb7786a9ca696ae3304d28e3eda3f027037decf9ce887b66351c7d575ea9dca87bb555c124f86e3c4103fc32136cf0ca8972c8aa91b0e3b5dd978a7e987c02a04f917192038a6371e5bb5192f7e8d", 0xe5}], 0x3}, 0x24044804) (async) 08:37:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x2d}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x900000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x4, 0x7f, 0x100, 0x455, r4, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x48) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) (rerun: 64) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000580), 0x8, 0xb2, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000800)=""/139, 0x8b, 0x0, &(0x7f00000008c0)=""/106, 0x6a}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0x24, &(0x7f0000000400)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x380}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0xc9, &(0x7f0000000200)=""/201, 0x40f00, 0x25, '\x00', r7, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r0, 0x3, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x5, 0x2, 0x3, 0xc}, {0x2, 0x3, 0x8, 0xc}, {0x2, 0x1, 0xd, 0x3}], 0x10, 0x7ff}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r11, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000b80)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1d, 0x28, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d40)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x28, r11, 0x8, &(0x7f0000000d80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x7, 0x7f, 0x7}, 0x10, r8, r10, 0x4, &(0x7f0000000e00), &(0x7f0000000e40)=[{0x2, 0x4, 0x6, 0x1}, {0x4, 0x4, 0x7, 0x3}, {0x3, 0x2, 0x6, 0xd}, {0x3, 0x1, 0xf, 0xb}], 0x10, 0x1000}, 0x90) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r14 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b40)={&(0x7f0000000780)="1dc492ee8ab4d16aeb262e6e532938b5430832f6b4ee22c0396c", 0x0, &(0x7f0000000bc0), 0x0, 0x0, r14}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x1d, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbab3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x6, 0x8, 0x9, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x3, 0xaa, &(0x7f0000001040)=""/170, 0x41000, 0x0, '\x00', r7, 0x0, r11, 0x8, &(0x7f0000001100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x3, 0xfffffab1, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001180)=[r2, r14, r13, r12, r12, r2, r4], &(0x7f00000011c0)=[{0x3, 0x1, 0x6, 0x5}, {0x4, 0x2, 0x3}, {0x4, 0x1, 0xa, 0x6}, {0x5, 0x3, 0x3, 0xa}, {0x2, 0x2, 0x1, 0x4}, {0x1, 0x4, 0xf, 0x9}, {0x1, 0x4, 0x5, 0x4}], 0x10, 0x6}, 0x90) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x9, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xb7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7482, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x3, 0x5, 0x8, 0x2, 0x10}, @alu={0x4, 0x0, 0xc, 0x1, 0x3, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x3b, &(0x7f0000000100)=""/59, 0x40f00, 0x14, '\x00', r3, 0x0, r2, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x3, 0x401, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840), &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x8}], 0x10, 0x5}, 0x90) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) (async) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000440)='rpc_request\x00', r0}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x2d}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x900000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x4, 0x7f, 0x100, 0x455, r4, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x48) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000580), 0x8, 0xb2, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000800)=""/139, 0x8b, 0x0, &(0x7f00000008c0)=""/106, 0x6a}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0x24, &(0x7f0000000400)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x380}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0xc9, &(0x7f0000000200)=""/201, 0x40f00, 0x25, '\x00', r7, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r0, 0x3, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x5, 0x2, 0x3, 0xc}, {0x2, 0x3, 0x8, 0xc}, {0x2, 0x1, 0xd, 0x3}], 0x10, 0x7ff}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r11, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000b80)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1d, 0x28, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d40)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x28, r11, 0x8, &(0x7f0000000d80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x7, 0x7f, 0x7}, 0x10, r8, r10, 0x4, &(0x7f0000000e00), &(0x7f0000000e40)=[{0x2, 0x4, 0x6, 0x1}, {0x4, 0x4, 0x7, 0x3}, {0x3, 0x2, 0x6, 0xd}, {0x3, 0x1, 0xf, 0xb}], 0x10, 0x1000}, 0x90) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) r14 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b40)={&(0x7f0000000780)="1dc492ee8ab4d16aeb262e6e532938b5430832f6b4ee22c0396c", 0x0, &(0x7f0000000bc0), 0x0, 0x0, r14}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0x1d, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbab3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x6, 0x8, 0x9, 0x0, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x3, 0xaa, &(0x7f0000001040)=""/170, 0x41000, 0x0, '\x00', r7, 0x0, r11, 0x8, &(0x7f0000001100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x3, 0xfffffab1, 0x81}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001180)=[r2, r14, r13, r12, r12, r2, r4], &(0x7f00000011c0)=[{0x3, 0x1, 0x6, 0x5}, {0x4, 0x2, 0x3}, {0x4, 0x1, 0xa, 0x6}, {0x5, 0x3, 0x3, 0xa}, {0x2, 0x2, 0x1, 0x4}, {0x1, 0x4, 0xf, 0x9}, {0x1, 0x4, 0x5, 0x4}], 0x10, 0x6}, 0x90) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r5, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000dc0), 0x0, 0x10, &(0x7f0000001680), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x10000000, 0xfffffcdd, 0x0, 0x40f00, 0x0, '\x00', r6, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffe6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000400)={&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300)=""/105, 0x69}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x4, 0x8, 0x4, r2, 0xeac, '\x00', 0x0, r2, 0x1, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x34, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b3de59f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x24000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf6, &(0x7f0000000780)=""/246, 0x41000, 0x24, '\x00', r6, 0x2c, r2, 0x8, &(0x7f0000000100)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x4, 0x5}, 0x10, r7, r4, 0x0, &(0x7f00000009c0)=[r2, r1, r8, r2, r1, r9, r1], 0x0, 0x10, 0x9}, 0x90) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r3, 0xffffffffffffffff, 0x28}, 0x20) openat$cgroup_ro(r3, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x8, 0x4, 0x0, 0x8, 0x1, 0x8, '\x00', r4, r1, 0x3, 0x4}, 0x48) syz_clone(0x3000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000000200)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eacba8c8267f67a072fbad2ff3374933c98a823f6ff3ccfb6ac6c352e000000000000066c2ec49d6bab5fe4b081a94d2fb872e4f8ac8a75e") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='tcp_cong_state_set\x00', r0}, 0x10) 08:37:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x11, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2200080, &(0x7f00000004c0)="2dc36825", 0x4, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000780)="5ba7f5a285fabde563e14457e1d2be70540e1f1c74eb6d398b8507eed8822c3882634181aee5d74afa492ffd6f5de3673f59d537937984a527abcb952c3fdfa1418bde7a511e96acbdd28a1132d7681a8a7b11ea1885a7795c23a3f556c997cfdd84dcaa9f411ee6319507c2e871f30a42c6111f35a618fa0c8f9268fc4f7298fa8fcd2f5ee70494231cecba58e9d50f27b66c8017eb1d6a6db7759984a8fc93cd889d4b1f470c81f64ad87497d65bf8b2b928e090a9c1a125a43a2b37ea8f484d734bc184011304f872d4f528cedd5ff39017") perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x20, 0x71, 0x0, 0x0, 0xd9, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff0000, 0x4, @perf_config_ext={0xc4, 0x9}, 0x8, 0x8, 0x5, 0x7, 0x7, 0xdb, 0x4, 0x0, 0x1, 0x0, 0x800}, r0, 0x2, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="20bcbdf87a575ae16f8b20fa48bad74218e1979b7138c239ecf0db650fae3d9c5a969f1c7b670e5365f900d4838f39acc3d235060117ab28460f1e33f71a686f36df38745f78cf3df34a5c3fe67c0300198ace9c691130c2d45098f0c9a54f8cce71fc5b88d8fafe33ca310e3fe695a0c695e53bdb", 0x75}, {&(0x7f0000000240)="2a41175bcb42f0c4342289a40ed5c00fce81922aa2459a60187cadfb97a1a0d732d68287bfdfdab159927b8008f85543", 0x30}, {&(0x7f00000002c0)="48b4828556b67e58dccc82f56de57454304c44abb0288dfe849475f49d502209e5526601cc2e3e8929ce3dc6e7d9380326bdd8f37ca6c4897000413723be6cdd7c6a80300f4b9c6a00e1133dc4b406a12c71d15c719fb2e1d86308592a62c7bbb31f30d39d461294d1ff4a19471aa27df6d1c46457dc209e8a972b5bb6c3eb3ead56f7fd1cacdc50cad4711463954c81611ac23f2bebabb7786a9ca696ae3304d28e3eda3f027037decf9ce887b66351c7d575ea9dca87bb555c124f86e3c4103fc32136cf0ca8972c8aa91b0e3b5dd978a7e987c02a04f917192038a6371e5bb5192f7e8d", 0xe5}], 0x3}, 0x24044804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x2200080, &(0x7f00000004c0)="2dc36825", 0x4, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000780)="5ba7f5a285fabde563e14457e1d2be70540e1f1c74eb6d398b8507eed8822c3882634181aee5d74afa492ffd6f5de3673f59d537937984a527abcb952c3fdfa1418bde7a511e96acbdd28a1132d7681a8a7b11ea1885a7795c23a3f556c997cfdd84dcaa9f411ee6319507c2e871f30a42c6111f35a618fa0c8f9268fc4f7298fa8fcd2f5ee70494231cecba58e9d50f27b66c8017eb1d6a6db7759984a8fc93cd889d4b1f470c81f64ad87497d65bf8b2b928e090a9c1a125a43a2b37ea8f484d734bc184011304f872d4f528cedd5ff39017") (async) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x20, 0x71, 0x0, 0x0, 0xd9, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff0000, 0x4, @perf_config_ext={0xc4, 0x9}, 0x8, 0x8, 0x5, 0x7, 0x7, 0xdb, 0x4, 0x0, 0x1, 0x0, 0x800}, r0, 0x2, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="20bcbdf87a575ae16f8b20fa48bad74218e1979b7138c239ecf0db650fae3d9c5a969f1c7b670e5365f900d4838f39acc3d235060117ab28460f1e33f71a686f36df38745f78cf3df34a5c3fe67c0300198ace9c691130c2d45098f0c9a54f8cce71fc5b88d8fafe33ca310e3fe695a0c695e53bdb", 0x75}, {&(0x7f0000000240)="2a41175bcb42f0c4342289a40ed5c00fce81922aa2459a60187cadfb97a1a0d732d68287bfdfdab159927b8008f85543", 0x30}, {&(0x7f00000002c0)="48b4828556b67e58dccc82f56de57454304c44abb0288dfe849475f49d502209e5526601cc2e3e8929ce3dc6e7d9380326bdd8f37ca6c4897000413723be6cdd7c6a80300f4b9c6a00e1133dc4b406a12c71d15c719fb2e1d86308592a62c7bbb31f30d39d461294d1ff4a19471aa27df6d1c46457dc209e8a972b5bb6c3eb3ead56f7fd1cacdc50cad4711463954c81611ac23f2bebabb7786a9ca696ae3304d28e3eda3f027037decf9ce887b66351c7d575ea9dca87bb555c124f86e3c4103fc32136cf0ca8972c8aa91b0e3b5dd978a7e987c02a04f917192038a6371e5bb5192f7e8d", 0xe5}], 0x3}, 0x24044804) (async) 08:37:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r5, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000dc0), 0x0, 0x10, &(0x7f0000001680), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x10000000, 0xfffffcdd, 0x0, 0x40f00, 0x0, '\x00', r6, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffe6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000400)={&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300)=""/105, 0x69}}, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x4, 0x8, 0x4, r2, 0xeac, '\x00', 0x0, r2, 0x1, 0x5}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x34, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b3de59f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x24000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf6, &(0x7f0000000780)=""/246, 0x41000, 0x24, '\x00', r6, 0x2c, r2, 0x8, &(0x7f0000000100)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x4, 0x5}, 0x10, r7, r4, 0x0, &(0x7f00000009c0)=[r2, r1, r8, r2, r1, r9, r1], 0x0, 0x10, 0x9}, 0x90) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x70, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r3, 0xffffffffffffffff, 0x28}, 0x20) openat$cgroup_ro(r3, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x8, 0x4, 0x0, 0x8, 0x1, 0x8, '\x00', r4, r1, 0x3, 0x4}, 0x48) syz_clone(0x3000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000000200)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eacba8c8267f67a072fbad2ff3374933c98a823f6ff3ccfb6ac6c352e000000000000066c2ec49d6bab5fe4b081a94d2fb872e4f8ac8a75e") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='tcp_cong_state_set\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r3, 0xffffffffffffffff, 0x28}, 0x20) (async) openat$cgroup_ro(r3, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x8, 0x4, 0x0, 0x8, 0x1, 0x8, '\x00', r4, r1, 0x3, 0x4}, 0x48) (async) syz_clone(0x3000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000000200)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eacba8c8267f67a072fbad2ff3374933c98a823f6ff3ccfb6ac6c352e000000000000066c2ec49d6bab5fe4b081a94d2fb872e4f8ac8a75e") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='tcp_cong_state_set\x00', r0}, 0x10) (async) 08:37:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond_slave_1\x00', 0x1000}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0xfc, 0x81, 0x1f, 0x84, 0x0, 0x1, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x2000, 0x8, 0x0, 0x3, 0xd9ca, 0x7, 0x4, 0x0, 0xa8a, 0x0, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r5, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000dc0), 0x0, 0x10, &(0x7f0000001680), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x10000000, 0xfffffcdd, 0x0, 0x40f00, 0x0, '\x00', r6, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffe6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x10000000, 0xfffffcdd, 0x0, 0x40f00, 0x0, '\x00', r6, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffe6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000400)={&(0x7f0000000280), 0x0, 0x0, &(0x7f0000000300)=""/105, 0x69}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x4, 0x8, 0x4, r2, 0xeac, '\x00', 0x0, r2, 0x1, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x34, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b3de59f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x24000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf6, &(0x7f0000000780)=""/246, 0x41000, 0x24, '\x00', r6, 0x2c, r2, 0x8, &(0x7f0000000100)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x4, 0x5}, 0x10, r7, r4, 0x0, &(0x7f00000009c0)=[r2, r1, r8, r2, r1, r9, r1], 0x0, 0x10, 0x9}, 0x90) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) (async) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='ext4_mballoc_alloc\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x18200) 08:37:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r3, 0xffffffffffffffff, 0x28}, 0x20) openat$cgroup_ro(r3, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1f, 0x8, 0x4, 0x0, 0x8, 0x1, 0x8, '\x00', r4, r1, 0x3, 0x4}, 0x48) (async) syz_clone(0x3000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000000200)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eacba8c8267f67a072fbad2ff3374933c98a823f6ff3ccfb6ac6c352e000000000000066c2ec49d6bab5fe4b081a94d2fb872e4f8ac8a75e") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='tcp_cong_state_set\x00', r0}, 0x10) 08:37:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x700, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func={0xe, 0x0, 0x0, 0xc, 0x1}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000780)=""/110, 0x4c, 0x6e, 0x0, 0x8000}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001b80)={0x1, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)='%ps \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="f69c706ed79cad167e594cb3a454442cf4200f7c381e251e67a86f6e6f3aec490b5897386d4628ed6422535a1aab56f2da6a4659f70eb0c318717cb98df5c0221880cef5958c7684176f4757dd6813d6cec1a6c0a242cf485ce7b10256a66ec55ab2b4e3380c18ce429043769e0104e08ae51af02a3ed0bb3c022e91b702d4e7a7a786f41e98468a"], 0x8) write$cgroup_devices(r7, &(0x7f0000000e00)=ANY=[@ANYRES32], 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x91) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r8, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0, 0x91, &(0x7f0000000980)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddff1c00850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x14, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffff697}, [@map_fd={0x18, 0x7, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0x1ff, 0x81, &(0x7f0000001f40)=""/129, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xffffffff, 0x20}, 0x10, r9, r10, 0x0, 0x0, 0x0, 0x10, 0xdd5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x4, 0x1d, &(0x7f0000001dc0)=@raw=[@map_idx={0x18, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xaf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb25}}], &(0x7f0000001ec0)='syzkaller\x00', 0x1, 0x21, &(0x7f0000001f00)=""/33, 0x41000, 0x28, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002280)={0x4, 0x9, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000002540)=[r1, 0xffffffffffffffff, r5, r8, r6, r5], &(0x7f0000002580)=[{0x0, 0x1, 0xf, 0xa}, {0x0, 0x4, 0x1, 0x2}, {0x5, 0x1, 0x1, 0x2}, {0x4, 0x2, 0x1}, {0x4, 0x2, 0xc}], 0x10, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x6, 0x21, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x1f, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x2, r3, 0x8, &(0x7f0000000900)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x8, 0x5}, 0x10, r4, r0, 0x2, &(0x7f0000001c80)=[r5, 0x1, r6], &(0x7f0000001cc0)=[{0x2, 0x3, 0x0, 0x5}, {0x5, 0x4, 0x2, 0x4}]}, 0x90) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f0000000500)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x4, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000340)=[r14], &(0x7f0000000380)=[{0x2, 0x5, 0x4, 0x7}, {0x2, 0x2, 0x2, 0x3}, {0x3, 0x3, 0x9, 0xa}, {0x4, 0x1, 0xa, 0x5}, {0x0, 0x2, 0xe}, {0x1, 0x4, 0xf, 0x1}, {0x0, 0x1, 0x2, 0x8}, {0x3, 0x4, 0x0, 0xb}, {0x4, 0x5, 0x7, 0x5}, {0x5, 0x4, 0x5, 0x3}], 0x10, 0x6}, 0x90) 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xffffffffa002a000, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@cgroup=r1, r2, 0x3}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x91) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xd, 0x4, 0x4, 0x4a8f2318, 0x0, r4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xd2}], &(0x7f0000000040)='GPL\x00', 0x5, 0x3, &(0x7f00000000c0)=""/3, 0x41100, 0xf, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0xc, 0x80, 0xfff}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f0000000140)=[r3, r4], &(0x7f0000000200)=[{0x2, 0x1, 0x2, 0x5}, {0x3, 0x4, 0x6, 0x6}, {0x5, 0x2, 0x6, 0x2}, {0x3, 0x4, 0xe, 0x1}, {0x5, 0x2, 0xb, 0x7}, {0x1, 0x5, 0x3, 0x6}], 0x10, 0x8}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x900, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x1100, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@cgroup=r1, r2, 0x3}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x91) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xd, 0x4, 0x4, 0x4a8f2318, 0x0, r4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xd2}], &(0x7f0000000040)='GPL\x00', 0x5, 0x3, &(0x7f00000000c0)=""/3, 0x41100, 0xf, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0xc, 0x80, 0xfff}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f0000000140)=[r3, r4], &(0x7f0000000200)=[{0x2, 0x1, 0x2, 0x5}, {0x3, 0x4, 0x6, 0x6}, {0x5, 0x2, 0x6, 0x2}, {0x3, 0x4, 0xe, 0x1}, {0x5, 0x2, 0xb, 0x7}, {0x1, 0x5, 0x3, 0x6}], 0x10, 0x8}, 0x90) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0xfbffffff, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@cgroup=r1, r2, 0x3}, 0x10) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x91) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xd, 0x4, 0x4, 0x4a8f2318, 0x0, r4}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xd2}], &(0x7f0000000040)='GPL\x00', 0x5, 0x3, &(0x7f00000000c0)=""/3, 0x41100, 0xf, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0xc, 0x80, 0xfff}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f0000000140)=[r3, r4], &(0x7f0000000200)=[{0x2, 0x1, 0x2, 0x5}, {0x3, 0x4, 0x6, 0x6}, {0x5, 0x2, 0x6, 0x2}, {0x3, 0x4, 0xe, 0x1}, {0x5, 0x2, 0xb, 0x7}, {0x1, 0x5, 0x3, 0x6}], 0x10, 0x8}, 0x90) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") 08:37:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x1f00, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x1100, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, &(0x7f0000000440)}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x2010, r2}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x3, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x4a}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, &(0x7f00000002c0), 0x41000, 0x18, '\x00', r3, 0x26, r1, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5, r6, r7, r8], 0x0, 0x10, 0x8}, 0x90) 08:37:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb0120180000000000030000000e000000000000010000000056007201003000"], &(0x7f0000000d00)=""/4096, 0x2b, 0x1000, 0x1, 0x2}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x22, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r6 = gettid() perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x5, 0x7, 0x0, 0x0, 0x1, 0x80806, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8, 0x4}, 0x18, 0x7, 0xde1c, 0x1, 0x5, 0x4, 0x3, 0x0, 0x6, 0x0, 0xea81}, r6, 0x0, r5, 0x3) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e40)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f00)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1a, 0x7, &(0x7f0000000800)=@raw=[@ringbuf_query, @alu={0x4, 0x1, 0xd, 0x9, 0x3, 0x10, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000840)='GPL\x00', 0x101, 0x85, &(0x7f0000000880)=""/133, 0x40f00, 0x1, '\x00', r1, 0x34, r2, 0x8, &(0x7f0000001d40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x4, 0x2, 0x5d3, 0x9}, 0x10, 0x0, r0, 0x0, &(0x7f0000001f80)=[0x1, r3, r4, r5, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9], 0x0, 0x10, 0xd5b}, 0x90) r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x60469, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000500)=0x101) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r12 = syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000005c0)='xprtrdma_frwr_maperr\x00', r0}, 0x10) r13 = syz_clone(0x4000000, &(0x7f0000000040)="4ec33972027c68dc6de7", 0xa, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)="6f564bd8accb4ab5245a81cc548132851a207d9d1c82058f6fe4a210458be6f65644893e703eb0ce7861fc9869e17fde44c2eefb0db63a23862f81262e7be96cab3e826aca16bd61b0e21f6fbba85de77d9810836e0f273ad766aa3f26d7c47a9961acba60f2a4dfe0facd00dcf428295f464edfb68a5bafad1aedc22b71106df4a297fd3f68b35330feacde71f6e81be088d11bf5d218b41c3a28006a4b8a1bc185c50fa73eb6c32d26c65e520f09924f7a2e460c4b") r14 = perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0xff, 0x1, 0x3, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000340)}, 0x2000, 0x8, 0xffffff0a, 0x8, 0xfff, 0x7f, 0xff, 0x0, 0x400, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x9, r10, 0x0) r15 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x6, 0x5, 0x1, 0x0, 0xd7b9, 0x8000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x9}, 0xc00, 0x7ff, 0xfffffffa, 0x8, 0x20, 0x9, 0x3f, 0x0, 0x1}, r13, 0x4, r14, 0x0) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/ipc\x00') perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1, 0x20403, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_config_ext={0xffffffffffffffb7, 0x85}, 0xa00, 0x5, 0x1, 0x5, 0x9, 0x5, 0x401, 0x0, 0xfffffff9, 0x0, 0xfffffffffffffffd}, r13, 0x3, r11, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x40082404, &(0x7f0000000580)=0x2) 08:37:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x2000, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x1100, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x7000, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, &(0x7f0000000440)}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x2010, r2}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x3, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x4a}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, &(0x7f00000002c0), 0x41000, 0x18, '\x00', r3, 0x26, r1, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5, r6, r7, r8], 0x0, 0x10, 0x8}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, &(0x7f0000000440)}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x2010, r2}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x3, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x4a}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, &(0x7f00000002c0), 0x41000, 0x18, '\x00', r3, 0x26, r1, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5, r6, r7, r8], 0x0, 0x10, 0x8}, 0x90) (async) 08:37:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb0120180000000000030000000e000000000000010000000056007201003000"], &(0x7f0000000d00)=""/4096, 0x2b, 0x1000, 0x1, 0x2}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb0120180000000000030000000e000000000000010000000056007201003000"], &(0x7f0000000d00)=""/4096, 0x2b, 0x1000, 0x1, 0x2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x22, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x22, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r6 = gettid() perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x5, 0x7, 0x0, 0x0, 0x1, 0x80806, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8, 0x4}, 0x18, 0x7, 0xde1c, 0x1, 0x5, 0x4, 0x3, 0x0, 0x6, 0x0, 0xea81}, r6, 0x0, r5, 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e40)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e40)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f00)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1a, 0x7, &(0x7f0000000800)=@raw=[@ringbuf_query, @alu={0x4, 0x1, 0xd, 0x9, 0x3, 0x10, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000840)='GPL\x00', 0x101, 0x85, &(0x7f0000000880)=""/133, 0x40f00, 0x1, '\x00', r1, 0x34, r2, 0x8, &(0x7f0000001d40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x4, 0x2, 0x5d3, 0x9}, 0x10, 0x0, r0, 0x0, &(0x7f0000001f80)=[0x1, r3, r4, r5, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9], 0x0, 0x10, 0xd5b}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x60469, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x60469, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000500)=0x101) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r12 = syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000005c0)='xprtrdma_frwr_maperr\x00', r0}, 0x10) r13 = syz_clone(0x4000000, &(0x7f0000000040)="4ec33972027c68dc6de7", 0xa, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)="6f564bd8accb4ab5245a81cc548132851a207d9d1c82058f6fe4a210458be6f65644893e703eb0ce7861fc9869e17fde44c2eefb0db63a23862f81262e7be96cab3e826aca16bd61b0e21f6fbba85de77d9810836e0f273ad766aa3f26d7c47a9961acba60f2a4dfe0facd00dcf428295f464edfb68a5bafad1aedc22b71106df4a297fd3f68b35330feacde71f6e81be088d11bf5d218b41c3a28006a4b8a1bc185c50fa73eb6c32d26c65e520f09924f7a2e460c4b") perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0xff, 0x1, 0x3, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000340)}, 0x2000, 0x8, 0xffffff0a, 0x8, 0xfff, 0x7f, 0xff, 0x0, 0x400, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x9, r10, 0x0) (async) r14 = perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0xff, 0x1, 0x3, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000340)}, 0x2000, 0x8, 0xffffff0a, 0x8, 0xfff, 0x7f, 0xff, 0x0, 0x400, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x9, r10, 0x0) r15 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x6, 0x5, 0x1, 0x0, 0xd7b9, 0x8000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x9}, 0xc00, 0x7ff, 0xfffffffa, 0x8, 0x20, 0x9, 0x3f, 0x0, 0x1}, r13, 0x4, r14, 0x0) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/ipc\x00') (async) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/ipc\x00') perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1, 0x20403, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_config_ext={0xffffffffffffffb7, 0x85}, 0xa00, 0x5, 0x1, 0x5, 0x9, 0x5, 0x401, 0x0, 0xfffffff9, 0x0, 0xfffffffffffffffd}, r13, 0x3, r11, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x40082404, &(0x7f0000000580)=0x2) 08:37:32 executing program 0: close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0xffffffff}, 0x10}, 0x2e) close(0xffffffffffffffff) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r0}, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780), 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000140)='GPL\x00', 0x8000, 0x7f, &(0x7f0000000480)=""/127, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0x4}, 0x10}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3f, 0x1, 0x3ff, 0x1a24, r3, 0xd2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x2}, 0x48) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r4}, 0x8) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x924}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x20, 0x4, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000006020000000000006500000001db010080000019fe15da009500000000000000a7f730ac64d5e636508b3ca0e4976e2fcf09217d487900d2416457469f8bd73fcfd1a4643bcff77c2a7798904483236c8f50c90fc02557a526de57cff27367067d45dacc4d2ea112a27be4b2c93091e761d6a86e12c716dc52c64ec57811d1c1f0803cf8fe327f0060edf60ea01f106b9e865c56e12a216ba9e1384b4091f3243f109dc5ba46cd962eab030000000000000007d2c3bcc61760ee6c86fa3de9853b572e3363812f3b1537d9996487d0e9363ed52d4461ad41d6"], &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001b40)={0x3}, 0x8, 0x10, &(0x7f0000001b80)={0x3, 0x10, 0x4, 0xfbf7}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001bc0)=[{0x1, 0x3, 0xf, 0x9}], 0x10, 0x9}, 0x90) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0xabf200d45b7902a8, 0x4, 0x2, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) r9 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x58769e47}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x53}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x0, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000018010000", @ANYRES32=r7, @ANYRES32=r5], &(0x7f00000001c0)='GPL\x00', 0x400, 0xc, &(0x7f0000000340)=""/12, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x20f5, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0xffffffffffffffff, r3, r10, r6, 0xffffffffffffffff, 0xffffffffffffffff, r4, r3, r1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x1, 0x1, 0x1, 0x8}, {0x4, 0x1, 0xe}, {0x4, 0x4, 0x2, 0x8}], 0x10, 0x6}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.numa_stat\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x3, 0x80, 0x9, 0x0, 0x0, 0x8, 0x0, 0x101, 0x62120, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9cbe, 0x2, @perf_config_ext={0x5, 0xce8d}, 0x880, 0x7ff, 0x4, 0x4, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4030582a, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x6, 0x6, 0x9c, 0x5, 0x0, 0xffff, 0x200, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xcab, 0x5}, 0x40, 0xe9, 0x6, 0x4, 0xe46a, 0xfa9, 0x401, 0x0, 0x7, 0x0, 0xc000}, r11, 0xc, r8, 0x0) 08:37:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x10fff, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:32 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func={0xe, 0x0, 0x0, 0xc, 0x1}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000780)=""/110, 0x4c, 0x6e, 0x0, 0x8000}, 0x20) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001b80)={0x1, 0x0}, 0x8) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)='%ps \x00'}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="f69c706ed79cad167e594cb3a454442cf4200f7c381e251e67a86f6e6f3aec490b5897386d4628ed6422535a1aab56f2da6a4659f70eb0c318717cb98df5c0221880cef5958c7684176f4757dd6813d6cec1a6c0a242cf485ce7b10256a66ec55ab2b4e3380c18ce429043769e0104e08ae51af02a3ed0bb3c022e91b702d4e7a7a786f41e98468a"], 0x8) write$cgroup_devices(r7, &(0x7f0000000e00)=ANY=[@ANYRES32], 0x9) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x91) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r8, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0, 0x91, &(0x7f0000000980)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddff1c00850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x14, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffff697}, [@map_fd={0x18, 0x7, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0x1ff, 0x81, &(0x7f0000001f40)=""/129, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xffffffff, 0x20}, 0x10, r9, r10, 0x0, 0x0, 0x0, 0x10, 0xdd5}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x4, 0x1d, &(0x7f0000001dc0)=@raw=[@map_idx={0x18, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xaf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb25}}], &(0x7f0000001ec0)='syzkaller\x00', 0x1, 0x21, &(0x7f0000001f00)=""/33, 0x41000, 0x28, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002280)={0x4, 0x9, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000002540)=[r1, 0xffffffffffffffff, r5, r8, r6, r5], &(0x7f0000002580)=[{0x0, 0x1, 0xf, 0xa}, {0x0, 0x4, 0x1, 0x2}, {0x5, 0x1, 0x1, 0x2}, {0x4, 0x2, 0x1}, {0x4, 0x2, 0xc}], 0x10, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x6, 0x21, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x1f, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x2, r3, 0x8, &(0x7f0000000900)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x8, 0x5}, 0x10, r4, r0, 0x2, &(0x7f0000001c80)=[r5, 0x1, r6], &(0x7f0000001cc0)=[{0x2, 0x3, 0x0, 0x5}, {0x5, 0x4, 0x2, 0x4}]}, 0x90) (async) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f0000000500)=0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x4, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000340)=[r14], &(0x7f0000000380)=[{0x2, 0x5, 0x4, 0x7}, {0x2, 0x2, 0x2, 0x3}, {0x3, 0x3, 0x9, 0xa}, {0x4, 0x1, 0xa, 0x5}, {0x0, 0x2, 0xe}, {0x1, 0x4, 0xf, 0x1}, {0x0, 0x1, 0x2, 0x8}, {0x3, 0x4, 0x0, 0xb}, {0x4, 0x5, 0x7, 0x5}, {0x5, 0x4, 0x5, 0x3}], 0x10, 0x6}, 0x90) 08:37:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, &(0x7f0000000440)}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x2010, r2}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r8, &(0x7f0000000000), 0x165243) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x3, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x4a}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, &(0x7f00000002c0), 0x41000, 0x18, '\x00', r3, 0x26, r1, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r5, r6, r7, r8], 0x0, 0x10, 0x8}, 0x90) 08:37:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x20010, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000a80)=[{}], 0x8, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb0120180000000000030000000e000000000000010000000056007201003000"], &(0x7f0000000d00)=""/4096, 0x2b, 0x1000, 0x1, 0x2}, 0x20) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x22, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) r6 = gettid() perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x5, 0x7, 0x0, 0x0, 0x1, 0x80806, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8, 0x4}, 0x18, 0x7, 0xde1c, 0x1, 0x5, 0x4, 0x3, 0x0, 0x6, 0x0, 0xea81}, r6, 0x0, r5, 0x3) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e40)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f00)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1a, 0x7, &(0x7f0000000800)=@raw=[@ringbuf_query, @alu={0x4, 0x1, 0xd, 0x9, 0x3, 0x10, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000840)='GPL\x00', 0x101, 0x85, &(0x7f0000000880)=""/133, 0x40f00, 0x1, '\x00', r1, 0x34, r2, 0x8, &(0x7f0000001d40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001d80)={0x4, 0x2, 0x5d3, 0x9}, 0x10, 0x0, r0, 0x0, &(0x7f0000001f80)=[0x1, r3, r4, r5, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9], 0x0, 0x10, 0xd5b}, 0x90) r10 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x60469, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000500)=0x101) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r12 = syz_clone(0x8000000, &(0x7f00000006c0)='(', 0x1, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000005c0)='xprtrdma_frwr_maperr\x00', r0}, 0x10) r13 = syz_clone(0x4000000, &(0x7f0000000040)="4ec33972027c68dc6de7", 0xa, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)="6f564bd8accb4ab5245a81cc548132851a207d9d1c82058f6fe4a210458be6f65644893e703eb0ce7861fc9869e17fde44c2eefb0db63a23862f81262e7be96cab3e826aca16bd61b0e21f6fbba85de77d9810836e0f273ad766aa3f26d7c47a9961acba60f2a4dfe0facd00dcf428295f464edfb68a5bafad1aedc22b71106df4a297fd3f68b35330feacde71f6e81be088d11bf5d218b41c3a28006a4b8a1bc185c50fa73eb6c32d26c65e520f09924f7a2e460c4b") (async) r14 = perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0xff, 0x1, 0x3, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000340)}, 0x2000, 0x8, 0xffffff0a, 0x8, 0xfff, 0x7f, 0xff, 0x0, 0x400, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x9, r10, 0x0) r15 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x6, 0x5, 0x1, 0x0, 0xd7b9, 0x8000, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x9}, 0xc00, 0x7ff, 0xfffffffa, 0x8, 0x20, 0x9, 0x3f, 0x0, 0x1}, r13, 0x4, r14, 0x0) (async) syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/ipc\x00') perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1, 0x20403, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x4, @perf_config_ext={0xffffffffffffffb7, 0x85}, 0xa00, 0x5, 0x1, 0x5, 0x9, 0x5, 0x401, 0x0, 0xfffffff9, 0x0, 0xfffffffffffffffd}, r13, 0x3, r11, 0x2) (async) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x40082404, &(0x7f0000000580)=0x2) 08:37:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xb502, 0x0, 0xffffffffffffffff, 0xe3b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="00373409a7b6339500b7870000000000007b8af8ff00000000b7080000010001007b8af0ff00000000d6a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000140)='GPL\x00', 0xbf, 0xb, &(0x7f0000000280)=""/11, 0x40f00, 0x0, '\x00', r4, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x4, 0x80000000}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0, 0x10, 0x4}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x81, 0x11b0, r3, 0x2, '\x00', r4, r3, 0x0, 0x0, 0x0, 0xc}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r7}, 0x0, &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x5, 0xf, 0x7, 0x7, 0x6}, @generic={0x28, 0x6, 0x4, 0x5, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xec2}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x14, &(0x7f0000000480)=""/20, 0x41000, 0x10, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xd, 0x4, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r6, r7], 0x0, 0x10, 0x289}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x20200, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xb502, 0x0, 0xffffffffffffffff, 0xe3b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="00373409a7b6339500b7870000000000007b8af8ff00000000b7080000010001007b8af0ff00000000d6a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000140)='GPL\x00', 0xbf, 0xb, &(0x7f0000000280)=""/11, 0x40f00, 0x0, '\x00', r4, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x4, 0x80000000}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0, 0x10, 0x4}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x81, 0x11b0, r3, 0x2, '\x00', r4, r3, 0x0, 0x0, 0x0, 0xc}, 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r7}, 0x0, &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x5, 0xf, 0x7, 0x7, 0x6}, @generic={0x28, 0x6, 0x4, 0x5, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xec2}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x14, &(0x7f0000000480)=""/20, 0x41000, 0x10, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xd, 0x4, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r6, r7], 0x0, 0x10, 0x289}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xb502, 0x0, 0xffffffffffffffff, 0xe3b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x4}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="00373409a7b6339500b7870000000000007b8af8ff00000000b7080000010001007b8af0ff00000000d6a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000140)='GPL\x00', 0xbf, 0xb, &(0x7f0000000280)=""/11, 0x40f00, 0x0, '\x00', r4, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x4, 0x80000000}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0, 0x10, 0x4}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x81, 0x11b0, r3, 0x2, '\x00', r4, r3, 0x0, 0x0, 0x0, 0xc}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r7}, 0x0, &(0x7f0000000240)}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x5, 0xf, 0x7, 0x7, 0x6}, @generic={0x28, 0x6, 0x4, 0x5, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xec2}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x14, &(0x7f0000000480)=""/20, 0x41000, 0x10, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xd, 0x4, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r6, r7], 0x0, 0x10, 0x289}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") (async) 08:37:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x80000, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:33 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xda00) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func={0xe, 0x0, 0x0, 0xc, 0x1}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000780)=""/110, 0x4c, 0x6e, 0x0, 0x8000}, 0x20) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001b80)={0x1, 0x0}, 0x8) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)='%ps \x00'}, 0x20) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (rerun: 32) write$cgroup_devices(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="f69c706ed79cad167e594cb3a454442cf4200f7c381e251e67a86f6e6f3aec490b5897386d4628ed6422535a1aab56f2da6a4659f70eb0c318717cb98df5c0221880cef5958c7684176f4757dd6813d6cec1a6c0a242cf485ce7b10256a66ec55ab2b4e3380c18ce429043769e0104e08ae51af02a3ed0bb3c022e91b702d4e7a7a786f41e98468a"], 0x8) (async) write$cgroup_devices(r7, &(0x7f0000000e00)=ANY=[@ANYRES32], 0x9) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x91) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r8, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0, 0x91, &(0x7f0000000980)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddff1c00850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x14, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffff697}, [@map_fd={0x18, 0x7, 0x1, 0x0, r8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='GPL\x00', 0x1ff, 0x81, &(0x7f0000001f40)=""/129, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000bc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xffffffff, 0x20}, 0x10, r9, r10, 0x0, 0x0, 0x0, 0x10, 0xdd5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x4, 0x1d, &(0x7f0000001dc0)=@raw=[@map_idx={0x18, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xaf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb25}}], &(0x7f0000001ec0)='syzkaller\x00', 0x1, 0x21, &(0x7f0000001f00)=""/33, 0x41000, 0x28, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002280)={0x4, 0x9, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000002540)=[r1, 0xffffffffffffffff, r5, r8, r6, r5], &(0x7f0000002580)=[{0x0, 0x1, 0xf, 0xa}, {0x0, 0x4, 0x1, 0x2}, {0x5, 0x1, 0x1, 0x2}, {0x4, 0x2, 0x1}, {0x4, 0x2, 0xc}], 0x10, 0x9}, 0x90) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x6, 0x21, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x1f, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x2, r3, 0x8, &(0x7f0000000900)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x5, 0x8, 0x5}, 0x10, r4, r0, 0x2, &(0x7f0000001c80)=[r5, 0x1, r6], &(0x7f0000001cc0)=[{0x2, 0x3, 0x0, 0x5}, {0x5, 0x4, 0x2, 0x4}]}, 0x90) (async, rerun: 64) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f0000000500)=0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) (async) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000a40)=""/4096, 0x41000, 0x4, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000340)=[r14], &(0x7f0000000380)=[{0x2, 0x5, 0x4, 0x7}, {0x2, 0x2, 0x2, 0x3}, {0x3, 0x3, 0x9, 0xa}, {0x4, 0x1, 0xa, 0x5}, {0x0, 0x2, 0xe}, {0x1, 0x4, 0xf, 0x1}, {0x0, 0x1, 0x2, 0x8}, {0x3, 0x4, 0x0, 0xb}, {0x4, 0x5, 0x7, 0x5}, {0x5, 0x4, 0x5, 0x3}], 0x10, 0x6}, 0x90) 08:37:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x101000, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f0000000280)='(', 0xd, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000001c40)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x19, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x20, &(0x7f0000000640)={&(0x7f00000008c0)=""/156, 0x9c, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r9, &(0x7f0000000000), 0x248800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r4, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f0000001a40)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x17, 0x36, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @exit, @call={0x85, 0x0, 0x0, 0x83}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x1, 0x6, 0x1, 0x2, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x0, 0x4, 0x5, 0xffffffffffffffe9, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x80000000, 0x5b, &(0x7f00000000c0)=""/91, 0x41100, 0x60, '\x00', r7, 0x10, r1, 0x8, &(0x7f00000005c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r0, 0x5, &(0x7f0000001ac0)=[r5, r5, r3, r9, r5, r10, r5], &(0x7f0000001b00)=[{0x2, 0x3, 0x4, 0xa}, {0x3, 0x2, 0xb, 0x2}, {0x5, 0x2, 0xc, 0x7}, {0x0, 0x4, 0x10, 0x13}, {0x1, 0x2, 0x10, 0x5}], 0x10, 0x4}, 0x90) 08:37:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xb502, 0x0, 0xffffffffffffffff, 0xe3b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="00373409a7b6339500b7870000000000007b8af8ff00000000b7080000010001007b8af0ff00000000d6a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000140)='GPL\x00', 0xbf, 0xb, &(0x7f0000000280)=""/11, 0x40f00, 0x0, '\x00', r4, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x4, 0x80000000}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0, 0x10, 0x4}, 0x90) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x81, 0x11b0, r3, 0x2, '\x00', r4, r3, 0x0, 0x0, 0x0, 0xc}, 0x48) (rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r7}, 0x0, &(0x7f0000000240)}, 0x20) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x5, 0xf, 0x7, 0x7, 0x6}, @generic={0x28, 0x6, 0x4, 0x5, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xec2}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x14, &(0x7f0000000480)=""/20, 0x41000, 0x10, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xd, 0x4, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r6, r7], 0x0, 0x10, 0x289}, 0x90) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x700000, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000140)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x7fff, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @func={0x6, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xf2fb}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x40}}]}, {0x0, [0x30, 0x61]}}, &(0x7f00000008c0)=""/120, 0x64, 0x78, 0x0, 0x6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xa, &(0x7f0000000700)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000780)='syzkaller\x00', 0x8001, 0x80, &(0x7f00000007c0)=""/128, 0x41100, 0x9, '\x00', r1, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0xd, 0x4, 0x400}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x4, 0x3, 0x9, 0x9}, {0x2, 0x2, 0x8, 0x3}, {0x4, 0x5, 0x7, 0x9}, {0x2, 0x5, 0xd}, {0x2, 0x1, 0xe, 0x2}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair(0x27, 0x5, 0x20, &(0x7f0000000040)={0xffffffffffffffff}) r5 = gettid() r6 = syz_clone(0x2200000, &(0x7f00000001c0)="9a304952e6ccfe643645163b8f67b003dbcc510998fcd620df022e46285304913257d54cca21eed275d81eebe2059719045f2a9b1ce88759b6775a66944ac8c0b4900ee25ee5ddd594b4e04a421d61fa596b8522c4cd0b9c979e23675249e54a2ff4c81a0f4de795494228a0fae5d6bae895f794ab3aadffb0ec583e54ee0195b19926741c4f494c114fbb1421357a5eea9fe119df88cb044a7b5d91fb33831e89c1a7f89b4afd96e178fdfda8677b334b23e2fbec000f4931ef57e06111cec1cb54127d3ed20157fca9f843524827c0deee9dfd65f35c2fec305b35d51092cebe84b98d019bd444e261f7ffa7ee8d2d81f376", 0xf3, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="b04f32cd346fb4c2fc1f90ac23d458b8d62d3b26afaeadcc913ab6374a1b3d45fcd037d032177d0298b9028a23af9c2c34c513e104e9d46f33eafa8a468238c16721f17ab5aa7fae220da7ba9717ace506dda18bd27911028de7ff51bc71be2b5162b7403ca3863f5a1289dc0f6cf498e9f8a9a0") r7 = syz_clone(0x40202000, &(0x7f0000000c80)="2bc46b4631dbe1775ddaa8417fcf84a550f3352266d6fc34fce7da2b3afecd380827b3917bc02415ac374b7c3142d3d4e1086394c057adf3b0b5bfbbaeaaf1343e7b3a76affb4d84e83bc912a64cf3aa173da4987159d178d70c01517dd906e0e9b742dbf1e7b68572a491055e938a6ce943021bf4", 0x75, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)="860b5b50e85cb52c65fa4500b83d46844051718c4e2bfad0fb72796d91a5e1bd87c39989718db843e143602ffeda2709b58f674343276201e08ee8832dac4997d251") sendmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00}}}, @cred={{0xffffffffffffff65, 0x1, 0x2, {r6, 0xffffffffffffffff}}}], 0x60, 0x2c881}, 0x4000) perf_event_open(&(0x7f0000000180)={0x1, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r7, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:33 executing program 0: close(0xffffffffffffffff) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc, 0xffffffff}, 0x10}, 0x2e) close(0xffffffffffffffff) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r0}, 0x10) (async) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780), 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES64=r2], &(0x7f0000000140)='GPL\x00', 0x8000, 0x7f, &(0x7f0000000480)=""/127, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0x4}, 0x10}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3f, 0x1, 0x3ff, 0x1a24, r3, 0xd2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x2}, 0x48) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r4}, 0x8) (async) close(0xffffffffffffffff) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x924}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x20, 0x4, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000006020000000000006500000001db010080000019fe15da009500000000000000a7f730ac64d5e636508b3ca0e4976e2fcf09217d487900d2416457469f8bd73fcfd1a4643bcff77c2a7798904483236c8f50c90fc02557a526de57cff27367067d45dacc4d2ea112a27be4b2c93091e761d6a86e12c716dc52c64ec57811d1c1f0803cf8fe327f0060edf60ea01f106b9e865c56e12a216ba9e1384b4091f3243f109dc5ba46cd962eab030000000000000007d2c3bcc61760ee6c86fa3de9853b572e3363812f3b1537d9996487d0e9363ed52d4461ad41d6"], &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001b40)={0x3}, 0x8, 0x10, &(0x7f0000001b80)={0x3, 0x10, 0x4, 0xfbf7}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001bc0)=[{0x1, 0x3, 0xf, 0x9}], 0x10, 0x9}, 0x90) syz_clone(0x738c0480, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0xabf200d45b7902a8, 0x4, 0x2, &(0x7f0000000200)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) (async) r9 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x58769e47}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x53}, 0x80) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x0, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000018010000", @ANYRES32=r7, @ANYRES32=r5], &(0x7f00000001c0)='GPL\x00', 0x400, 0xc, &(0x7f0000000340)=""/12, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x20f5, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0xffffffffffffffff, r3, r10, r6, 0xffffffffffffffff, 0xffffffffffffffff, r4, r3, r1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x1, 0x1, 0x1, 0x8}, {0x4, 0x1, 0xe}, {0x4, 0x4, 0x2, 0x8}], 0x10, 0x6}, 0x90) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.numa_stat\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000700)={0x3, 0x80, 0x9, 0x0, 0x0, 0x8, 0x0, 0x101, 0x62120, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9cbe, 0x2, @perf_config_ext={0x5, 0xce8d}, 0x880, 0x7ff, 0x4, 0x4, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0x9) (async) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4030582a, &(0x7f0000000040)) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x6, 0x6, 0x9c, 0x5, 0x0, 0xffff, 0x200, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xcab, 0x5}, 0x40, 0xe9, 0x6, 0x4, 0xe46a, 0xfa9, 0x401, 0x0, 0x7, 0x0, 0xc000}, r11, 0xc, r8, 0x0) 08:37:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0xa002a0, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0xf0ff1f, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x1000000, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") 08:37:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000140)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000140)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x7fff, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x0, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @func={0x6, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xf2fb}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x40}}]}, {0x0, [0x30, 0x61]}}, &(0x7f00000008c0)=""/120, 0x64, 0x78, 0x0, 0x6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xa, &(0x7f0000000700)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000780)='syzkaller\x00', 0x8001, 0x80, &(0x7f00000007c0)=""/128, 0x41100, 0x9, '\x00', r1, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0xd, 0x4, 0x400}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x4, 0x3, 0x9, 0x9}, {0x2, 0x2, 0x8, 0x3}, {0x4, 0x5, 0x7, 0x9}, {0x2, 0x5, 0xd}, {0x2, 0x1, 0xe, 0x2}], 0x10, 0x4}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xa, &(0x7f0000000700)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000780)='syzkaller\x00', 0x8001, 0x80, &(0x7f00000007c0)=""/128, 0x41100, 0x9, '\x00', r1, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0xd, 0x4, 0x400}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x4, 0x3, 0x9, 0x9}, {0x2, 0x2, 0x8, 0x3}, {0x4, 0x5, 0x7, 0x9}, {0x2, 0x5, 0xd}, {0x2, 0x1, 0xe, 0x2}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair(0x27, 0x5, 0x20, &(0x7f0000000040)) (async) socketpair(0x27, 0x5, 0x20, &(0x7f0000000040)={0xffffffffffffffff}) r5 = gettid() r6 = syz_clone(0x2200000, &(0x7f00000001c0)="9a304952e6ccfe643645163b8f67b003dbcc510998fcd620df022e46285304913257d54cca21eed275d81eebe2059719045f2a9b1ce88759b6775a66944ac8c0b4900ee25ee5ddd594b4e04a421d61fa596b8522c4cd0b9c979e23675249e54a2ff4c81a0f4de795494228a0fae5d6bae895f794ab3aadffb0ec583e54ee0195b19926741c4f494c114fbb1421357a5eea9fe119df88cb044a7b5d91fb33831e89c1a7f89b4afd96e178fdfda8677b334b23e2fbec000f4931ef57e06111cec1cb54127d3ed20157fca9f843524827c0deee9dfd65f35c2fec305b35d51092cebe84b98d019bd444e261f7ffa7ee8d2d81f376", 0xf3, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="b04f32cd346fb4c2fc1f90ac23d458b8d62d3b26afaeadcc913ab6374a1b3d45fcd037d032177d0298b9028a23af9c2c34c513e104e9d46f33eafa8a468238c16721f17ab5aa7fae220da7ba9717ace506dda18bd27911028de7ff51bc71be2b5162b7403ca3863f5a1289dc0f6cf498e9f8a9a0") syz_clone(0x40202000, &(0x7f0000000c80)="2bc46b4631dbe1775ddaa8417fcf84a550f3352266d6fc34fce7da2b3afecd380827b3917bc02415ac374b7c3142d3d4e1086394c057adf3b0b5bfbbaeaaf1343e7b3a76affb4d84e83bc912a64cf3aa173da4987159d178d70c01517dd906e0e9b742dbf1e7b68572a491055e938a6ce943021bf4", 0x75, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)="860b5b50e85cb52c65fa4500b83d46844051718c4e2bfad0fb72796d91a5e1bd87c39989718db843e143602ffeda2709b58f674343276201e08ee8832dac4997d251") (async) r7 = syz_clone(0x40202000, &(0x7f0000000c80)="2bc46b4631dbe1775ddaa8417fcf84a550f3352266d6fc34fce7da2b3afecd380827b3917bc02415ac374b7c3142d3d4e1086394c057adf3b0b5bfbbaeaaf1343e7b3a76affb4d84e83bc912a64cf3aa173da4987159d178d70c01517dd906e0e9b742dbf1e7b68572a491055e938a6ce943021bf4", 0x75, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)="860b5b50e85cb52c65fa4500b83d46844051718c4e2bfad0fb72796d91a5e1bd87c39989718db843e143602ffeda2709b58f674343276201e08ee8832dac4997d251") sendmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00}}}, @cred={{0xffffffffffffff65, 0x1, 0x2, {r6, 0xffffffffffffffff}}}], 0x60, 0x2c881}, 0x4000) perf_event_open(&(0x7f0000000180)={0x1, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r7, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000000, &(0x7f00000006c0), 0x0, &(0x7f0000000300), &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b") 08:37:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x8000000, &(0x7f0000000280)='(', 0xd, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000001c40)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x19, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x20, &(0x7f0000000640)={&(0x7f00000008c0)=""/156, 0x9c, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r9, &(0x7f0000000000), 0x248800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r4, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f0000001a40)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x17, 0x36, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @exit, @call={0x85, 0x0, 0x0, 0x83}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x1, 0x6, 0x1, 0x2, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x0, 0x4, 0x5, 0xffffffffffffffe9, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x80000000, 0x5b, &(0x7f00000000c0)=""/91, 0x41100, 0x60, '\x00', r7, 0x10, r1, 0x8, &(0x7f00000005c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r0, 0x5, &(0x7f0000001ac0)=[r5, r5, r3, r9, r5, r10, r5], &(0x7f0000001b00)=[{0x2, 0x3, 0x4, 0xa}, {0x3, 0x2, 0xb, 0x2}, {0x5, 0x2, 0xc, 0x7}, {0x0, 0x4, 0x10, 0x13}, {0x1, 0x2, 0x10, 0x5}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x40, 0x7, 0x8bdc, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) syz_clone(0x8000000, &(0x7f0000000280)='(', 0xd, &(0x7f0000000300), &(0x7f0000000600), &(0x7f0000001c40)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e299e8e") (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x19, &(0x7f0000000280), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x20, &(0x7f0000000640)={&(0x7f00000008c0)=""/156, 0x9c, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_type(r9, &(0x7f0000000000), 0x248800) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r4}, &(0x7f0000000980), &(0x7f0000001a40)='%+9llu \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x17, 0x36, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @exit, @call={0x85, 0x0, 0x0, 0x83}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x1, 0x6, 0x1, 0x2, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x0, 0x4, 0x5, 0xffffffffffffffe9, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x80000000, 0x5b, &(0x7f00000000c0)=""/91, 0x41100, 0x60, '\x00', r7, 0x10, r1, 0x8, &(0x7f00000005c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r0, 0x5, &(0x7f0000001ac0)=[r5, r5, r3, r9, r5, r10, r5], &(0x7f0000001b00)=[{0x2, 0x3, 0x4, 0xa}, {0x3, 0x2, 0xb, 0x2}, {0x5, 0x2, 0xc, 0x7}, {0x0, 0x4, 0x10, 0x13}, {0x1, 0x2, 0x10, 0x5}], 0x10, 0x4}, 0x90) (async) 08:37:34 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0) syz_clone(0x8000000, 0x0, 0x2000000, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6c352e0025a9cb79e419739ec967b2c6aac6366c2ec49d6bab5fe4b08fd93d2fb872e4f8ac8a75e") [ 363.728415][T15339] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 363.740064][T15339] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 363.748335][T15339] CPU: 1 PID: 15339 Comm: syz-executor.4 Tainted: G B W 5.15.148-syzkaller-00718-g993bed180178 #0 [ 363.759847][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 363.769745][T15339] RIP: 0010:__rb_erase_color+0x20b/0xa60 [ 363.775214][T15339] Code: 49 89 de 49 c1 ee 03 43 80 3c 26 00 74 08 48 89 df e8 d9 27 2b ff 4c 8b 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 b6 27 2b ff 41 f6 07 01 48 89 5d [ 363.794652][T15339] RSP: 0018:ffffc900022275a0 EFLAGS: 00010246 [ 363.800549][T15339] RAX: dffffc0000000000 RBX: ffff88812e9b9d20 RCX: ffff888118f92780 [ 363.808363][T15339] RDX: ffffffff81a50880 RSI: ffff8881091acf40 RDI: ffff88812e9b9d10 [ 363.816173][T15339] RBP: ffffc90002227600 R08: ffffffff81a4e940 R09: ffffed10212359ec [ 363.823987][T15339] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 363.831794][T15339] R13: ffff88812e9b9d10 R14: 1ffff11025d373a4 R15: 0000000000000000 [ 363.839606][T15339] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 363.848370][T15339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.854791][T15339] CR2: 0000000000000000 CR3: 00000001081fb000 CR4: 00000000003506a0 [ 363.862604][T15339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.870416][T15339] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.878244][T15339] Call Trace: [ 363.881357][T15339] [ 363.884131][T15339] ? __die_body+0x62/0xb0 [ 363.888303][T15339] ? die_addr+0x9f/0xd0 [ 363.892288][T15339] ? exc_general_protection+0x311/0x4b0 [ 363.897675][T15339] ? asm_exc_general_protection+0x27/0x30 [ 363.903230][T15339] ? vma_interval_tree_remove+0xae0/0xba0 [ 363.908778][T15339] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 363.915028][T15339] ? __rb_erase_color+0x20b/0xa60 [ 363.919890][T15339] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 363.926135][T15339] ? rwsem_mark_wake+0x6b0/0x6b0 [ 363.930910][T15339] vma_interval_tree_remove+0xb82/0xba0 [ 363.936292][T15339] unlink_file_vma+0xd9/0xf0 [ 363.940731][T15339] free_pgtables+0x13f/0x280 [ 363.945146][T15339] exit_mmap+0x3e7/0x6f0 [ 363.949221][T15339] ? exit_aio+0x25e/0x3c0 [ 363.953394][T15339] ? vm_brk+0x30/0x30 [ 363.957205][T15339] ? mutex_unlock+0xb2/0x260 [ 363.961635][T15339] ? uprobe_clear_state+0x2cd/0x320 [ 363.966671][T15339] __mmput+0x95/0x310 [ 363.970583][T15339] mmput+0x5b/0x170 [ 363.974231][T15339] do_exit+0xb9c/0x2ca0 [ 363.978209][T15339] ? simple_acl_create+0x2c0/0x2c0 [ 363.983161][T15339] ? put_task_struct+0x80/0x80 [ 363.987756][T15339] ? ____kasan_slab_free+0x131/0x160 [ 363.992880][T15339] do_group_exit+0x141/0x310 [ 363.997308][T15339] get_signal+0x7a3/0x1630 [ 364.001560][T15339] arch_do_signal_or_restart+0xbd/0x1680 [ 364.007145][T15339] ? __send_signal+0x96f/0xcb0 [ 364.011838][T15339] ? get_sigframe_size+0x10/0x10 [ 364.016604][T15339] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 364.022245][T15339] ? force_sig_info_to_task+0x31c/0x440 [ 364.027626][T15339] ? force_sig+0x114/0x1d0 [ 364.031879][T15339] exit_to_user_mode_loop+0xa0/0xe0 [ 364.036912][T15339] exit_to_user_mode_prepare+0x5a/0xa0 [ 364.042212][T15339] irqentry_exit_to_user_mode+0x9/0x20 [ 364.047499][T15339] irqentry_exit+0x12/0x40 [ 364.051752][T15339] exc_general_protection+0x327/0x4b0 [ 364.056968][T15339] asm_exc_general_protection+0x27/0x30 [ 364.062343][T15339] RIP: 0033:0x7f9d59aafdb1 [ 364.066593][T15339] Code: Unable to access opcode bytes at RIP 0x7f9d59aafd87. [ 364.073799][T15339] RSP: 002b:0000000020000040 EFLAGS: 00010217 [ 364.079704][T15339] RAX: 0000000000000000 RBX: 00007f9d59bde050 RCX: 00007f9d59aafda9 [ 364.087513][T15339] RDX: 0000000020000140 RSI: 0000000020000040 RDI: 0000000004000000 [ 364.095338][T15339] RBP: 00007f9d59afc47a R08: 0000000020000240 R09: 0000000020000240 [ 364.103134][T15339] R10: 0000000020000200 R11: 0000000000000206 R12: 0000000000000000 [ 364.110949][T15339] R13: 000000000000006e R14: 00007f9d59bde050 R15: 00007ffc75d20028 [ 364.118768][T15339] [ 364.121617][T15339] Modules linked in: [ 364.144528][T15339] ---[ end trace b74619b37823c4cc ]--- [ 364.151146][T15339] RIP: 0010:__rb_erase_color+0x20b/0xa60 08:37:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x7e, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x8000000, &(0x7f00000006c0)="28698baeb43611f5b9939188f9c1be492cf81ab43ebc83b55f1148ddd4251681b4545744229cea8ddc635f7e743cff19766a3517dc45ee848036cd17e0162249fc74ef5d90b480bad2053e7c0c3b63ae5178caa226f24ec1ca67222bf9019a92cf89fb1b19e62bcc185ddea456f82902ddcdd02791410b361bc34289035e69d6cbc54447197985a0fce361c4ab34a8ca09136bf0a7193aef515befb4d7ce00634784", 0xa2, 0x0, &(0x7f0000000600), &(0x7f00000009c0)="5976ab6359bab305fdcba15a0f4271a0ce355468e15fc73986e0e00bfe52217b28f43cf22fd5c31f621376364054eac4a8c8267f67a072fbadb4571c2333cb8a823fccfb6ac6") [ 364.179922][T15339] Code: 49 89 de 49 c1 ee 03 43 80 3c 26 00 74 08 48 89 df e8 d9 27 2b ff 4c 8b 3b 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 b6 27 2b ff 41 f6 07 01 48 89 5d [ 364.298783][T15339] RSP: 0018:ffffc900022275a0 EFLAGS: 00010246 [ 364.304787][T15339] RAX: dffffc0000000000 RBX: ffff88812e9b9d20 RCX: ffff888118f92780 [ 364.314242][T15339] RDX: ffffffff81a50880 RSI: ffff8881091acf40 RDI: ffff88812e9b9d10 [ 364.322166][T15339] RBP: ffffc90002227600 R08: ffffffff81a4e940 R09: ffffed10212359ec [ 364.329962][T15339] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 364.337770][T15339] R13: ffff88812e9b9d10 R14: 1ffff11025d373a4 R15: 0000000000000000 [ 364.345649][T15339] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 364.354753][T15339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.362823][T15339] CR2: ffffffffffffffac CR3: 0000000110a7d000 CR4: 00000000003506b0 [ 364.370759][T15339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 364.378652][T15339] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 364.386615][T15339] Kernel panic - not syncing: Fatal exception [ 364.392772][T15339] Kernel Offset: disabled [ 364.396909][T15339] Rebooting in 86400 seconds..