# https://syzkaller.appspot.com/bug?id=f10ee477162a6f234fa4fc7120fa57a4586533c8
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"repeat":true,"procs":1,"slowdown":1,"sandbox":"none","sandbox_arg":0,"close_fds":true}
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(r1, 0x0, 0xda00)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00)
r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r2, 0x0, 0x275a, 0x0)
fdatasync(0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002580)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000002500), &(0x7f0000002540)='%ps    \x00'}, 0x20)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002600), 0x40800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x7, 0x13, &(0x7f00000023c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0x2, 0x1, 0x2, 0x4, 0xfffffffffffffff0}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x8, &(0x7f0000002480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000024c0)={0x3, 0xb, 0x2, 0x1000}, 0x10, 0x0, r3, 0x0, &(0x7f0000002640)=[r5, 0xffffffffffffffff, r3, r6, 0x1, 0x1, r4], 0x0, 0x10, 0x80}, 0x90)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000013c0)={{0x0, 0x3, 0x2, 0x101, 0xd4ba, 0x4, 0x400, 0x0, 0x7, 0x4, 0x1000, 0x5, 0x0, 0x0, 0x80000001}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fdatasync(r7)
r8 = open(0x0, 0x0, 0x0)
openat$cgroup_procs(r8, 0x0, 0x2, 0x0)
r9 = open(0x0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r9, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fdatasync(r10)
open(0x0, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0)
r11 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r11, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000080000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
r13 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r13, 0x0, 0x0)
sendto$inet6(r13, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r13, 0x0, 0x0, 0x44000102, 0x0)
ioctl$FS_IOC_RESVSP(r13, 0x40305828, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00)