0x70)

[ 2639.991985][T15595] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2640.026480][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
03:28:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:28:53 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, 0x0, 0x0)

03:28:53 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:28:53 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:53 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:53 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
dup2(r5, r1)
preadv(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x200000000001f6)

03:28:53 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:28:53 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:53 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400), 0x0)

[ 2640.742539][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 2640.747700][T15730] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2640.778871][T15731] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2640.806498][T15731] debugfs: File 'msg' in directory 'loop0' already present!
[ 2640.833983][T15731] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2640.841755][T15730] CPU: 1 PID: 15730 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2640.850131][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2640.860213][T15730] Call Trace:
[ 2640.863516][T15730]  dump_stack+0x1fb/0x318
[ 2640.867856][T15730]  dump_header+0xd8/0x960
[ 2640.872194][T15730]  oom_kill_process+0xee/0x3a0
[ 2640.876963][T15730]  out_of_memory+0x5da/0x900
[ 2640.881569][T15730]  try_charge+0x1223/0x18d0
[ 2640.886107][T15730]  mem_cgroup_try_charge+0x20c/0x680
[ 2640.891406][T15730]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2640.897075][T15730]  wp_page_copy+0x349/0x1890
[ 2640.901676][T15730]  ? do_raw_spin_unlock+0x136/0x260
[ 2640.906884][T15730]  do_wp_page+0x5e5/0x1cc0
[ 2640.911306][T15730]  ? __kasan_check_write+0x14/0x20
[ 2640.916419][T15730]  ? do_raw_spin_lock+0xea/0x2d0
[ 2640.921370][T15730]  handle_mm_fault+0x2ada/0x5ff0
[ 2640.926342][T15730]  do_user_addr_fault+0x589/0xaf0
[ 2640.931403][T15730]  __do_page_fault+0xd3/0x1f0
[ 2640.936101][T15730]  do_page_fault+0x99/0xb0
[ 2640.940523][T15730]  page_fault+0x39/0x40
[ 2640.944672][T15730] RIP: 0033:0x40f6c8
03:28:53 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
dup2(r5, r1)
preadv(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x200000000001f6)

03:28:53 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400), 0x0)

[ 2640.948564][T15730] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 64 fe 4b 00 31 c0 e8 13 27 ff ff 31 ff e8 5c 23 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 2f 66 00
[ 2640.968164][T15730] RSP: 002b:00007fffe25b9740 EFLAGS: 00010246
[ 2640.968173][T15730] RAX: 00000000f06079e4 RBX: 00000000dc00d931 RCX: 0000001b2e820000
[ 2640.968178][T15730] RDX: 0000000000000000 RSI: 00000000000019e4 RDI: fffffffff06079e4
[ 2640.968182][T15730] RBP: 000000000000000c R08: 00000000f06079e4 R09: 00000000f06079e8
[ 2640.968187][T15730] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075bfa8
03:28:53 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2640.968191][T15730] R13: 0000000080000000 R14: 00007f4c19735008 R15: 000000000000000c
[ 2641.093551][T15730] memory: usage 307168kB, limit 307200kB, failcnt 47210
[ 2641.115063][T15730] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2641.134736][T15730] Memory cgroup stats for /syz1:
[ 2641.134813][T15730] anon 260972544
[ 2641.134813][T15730] file 36864
[ 2641.134813][T15730] kernel_stack 7536640
[ 2641.134813][T15730] slab 14385152
[ 2641.134813][T15730] sock 0
[ 2641.134813][T15730] shmem 0
[ 2641.134813][T15730] file_mapped 0
[ 2641.134813][T15730] file_dirty 0
[ 2641.134813][T15730] file_writeback 0
[ 2641.134813][T15730] anon_thp 232783872
[ 2641.134813][T15730] inactive_anon 135168
[ 2641.134813][T15730] active_anon 260972544
[ 2641.134813][T15730] inactive_file 16384
[ 2641.134813][T15730] active_file 0
[ 2641.134813][T15730] unevictable 0
[ 2641.134813][T15730] slab_reclaimable 3108864
[ 2641.134813][T15730] slab_unreclaimable 11276288
[ 2641.134813][T15730] pgfault 248193
[ 2641.134813][T15730] pgmajfault 0
[ 2641.134813][T15730] workingset_refault 99
[ 2641.134813][T15730] workingset_activate 0
[ 2641.134813][T15730] workingset_nodereclaim 0
[ 2641.134813][T15730] pgrefill 64791
[ 2641.134813][T15730] pgscan 140722
[ 2641.134813][T15730] pgsteal 74725
[ 2641.237794][T15730] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20190,uid=0
[ 2641.253789][T15730] Memory cgroup out of memory: Killed process 20190 (syz-executor.1) total-vm:72848kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000
[ 2641.273701][ T1035] oom_reaper: reaped process 20190 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
03:28:54 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:28:54 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:28:54 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:54 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:54 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
dup2(r5, r1)
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0)

03:28:54 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400), 0x0)

03:28:54 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:28:54 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)

03:28:54 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
dup2(r5, r1)
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0)

03:28:54 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2641.626296][T15771] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2641.630837][T15772] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 2641.653289][T15771] debugfs: File 'msg' in directory 'loop0' already present!
[ 2641.663781][T15771] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2641.721331][T15772] CPU: 1 PID: 15772 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2641.729693][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2641.739751][T15772] Call Trace:
[ 2641.743051][T15772]  dump_stack+0x1fb/0x318
[ 2641.747392][T15772]  dump_header+0xd8/0x960
[ 2641.751729][T15772]  oom_kill_process+0xee/0x3a0
[ 2641.756492][T15772]  out_of_memory+0x5da/0x900
[ 2641.761081][T15772]  try_charge+0x1223/0x18d0
[ 2641.765627][T15772]  __memcg_kmem_charge+0x146/0x510
03:28:54 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r14, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
fcntl$dupfd(r17, 0x0, r16)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32=r17, @ANYPTR, @ANYRES64=r19, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:54 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)

[ 2641.770739][T15772]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2641.776122][T15772]  copy_process+0x57e/0x5c00
[ 2641.780725][T15772]  ? do_raw_spin_unlock+0x136/0x260
[ 2641.785921][T15772]  ? handle_mm_fault+0x126b/0x5ff0
[ 2641.791307][T15772]  _do_fork+0x13e/0x660
[ 2641.795469][T15772]  ? debug_smp_processor_id+0x1c/0x20
[ 2641.801992][T15772]  ? __perf_sw_event+0x1a7/0x230
[ 2641.806967][T15772]  __x64_sys_clone+0x20b/0x250
[ 2641.811747][T15772]  do_syscall_64+0xf7/0x1c0
[ 2641.816267][T15772]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2641.822152][T15772] RIP: 0033:0x45d049
[ 2641.826997][T15772] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 2641.846596][T15772] RSP: 002b:00007fffe25b96d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 2641.855011][T15772] RAX: ffffffffffffffda RBX: 00007f4c17734700 RCX: 000000000045d049
[ 2641.862986][T15772] RDX: 00007f4c177349d0 RSI: 00007f4c17733db0 RDI: 00000000003d0f00
[ 2641.870958][T15772] RBP: 00007fffe25b98f0 R08: 00007f4c17734700 R09: 00007f4c17734700
[ 2641.878932][T15772] R10: 00007f4c177349d0 R11: 0000000000000202 R12: 0000000000000000
[ 2641.886904][T15772] R13: 00007fffe25b978f R14: 00007f4c177349c0 R15: 000000000075bf2c
[ 2641.887046][T15790] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2641.933686][    C1] net_ratelimit: 2 callbacks suppressed
[ 2641.933694][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[ 2641.954290][T15790] debugfs: File 'msg' in directory 'loop0' already present!
[ 2641.966008][T15772] memory: usage 307192kB, limit 307200kB, failcnt 47224
[ 2641.979764][T15772] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2641.989009][T15790] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2642.001637][T15772] Memory cgroup stats for /syz1:
[ 2642.001730][T15772] anon 260997120
[ 2642.001730][T15772] file 36864
[ 2642.001730][T15772] kernel_stack 7536640
[ 2642.001730][T15772] slab 14520320
[ 2642.001730][T15772] sock 0
[ 2642.001730][T15772] shmem 0
[ 2642.001730][T15772] file_mapped 0
[ 2642.001730][T15772] file_dirty 0
[ 2642.001730][T15772] file_writeback 0
[ 2642.001730][T15772] anon_thp 232783872
[ 2642.001730][T15772] inactive_anon 135168
[ 2642.001730][T15772] active_anon 261001216
[ 2642.001730][T15772] inactive_file 16384
[ 2642.001730][T15772] active_file 0
[ 2642.001730][T15772] unevictable 0
[ 2642.001730][T15772] slab_reclaimable 3108864
[ 2642.001730][T15772] slab_unreclaimable 11411456
[ 2642.001730][T15772] pgfault 248292
[ 2642.001730][T15772] pgmajfault 0
[ 2642.001730][T15772] workingset_refault 99
[ 2642.001730][T15772] workingset_activate 0
[ 2642.001730][T15772] workingset_nodereclaim 0
[ 2642.001730][T15772] pgrefill 64857
[ 2642.001730][T15772] pgscan 140821
[ 2642.001730][T15772] pgsteal 74725
[ 2642.096083][T15772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20171,uid=0
[ 2642.111789][T15772] Memory cgroup out of memory: Killed process 20171 (syz-executor.1) total-vm:72716kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000
[ 2642.130202][ T1035] oom_reaper: reaped process 20171 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
03:28:55 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:28:55 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:55 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{0x0}], 0x1)

03:28:55 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:28:55 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
dup2(r5, r1)
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/169, 0xa9}], 0x1, 0x0)

03:28:55 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r14, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
fcntl$dupfd(r17, 0x0, r16)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32=r17, @ANYPTR, @ANYRES64=r19, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:55 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)}], 0x1)

[ 2642.447695][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
03:28:55 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:55 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

03:28:55 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000005b00)="1213772e65e4075827a85fddef692ef3", 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @empty}}}, {{@in6=@local}, 0x0, @in=@initdev}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0)

[ 2642.494652][T15810] debugfs: File 'dropped' in directory 'loop0' already present!
03:28:55 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)}], 0x1)

[ 2642.560552][T15810] debugfs: File 'msg' in directory 'loop0' already present!
[ 2642.576649][T15810] debugfs: File 'trace0' in directory 'loop0' already present!
03:28:55 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
socket$inet6(0xa, 0x80003, 0x6b)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="1000060000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:28:56 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r14, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
fcntl$dupfd(r17, 0x0, r16)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32=r17, @ANYPTR, @ANYRES64=r19, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:56 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x2a, 0x4)
connect$inet(r1, &(0x7f0000000640)={0x2, 0x0, @broadcast}, 0x10)
ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}})
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000140)=0xfffffffe, 0x4)

03:28:56 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)}], 0x1)

03:28:56 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:56 executing program 5:
open(0x0, 0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0)

03:28:56 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x2aa}], 0x1)

[ 2643.345393][T15947] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2643.353499][T15947] debugfs: File 'msg' in directory 'loop0' already present!
[ 2643.362362][T15947] debugfs: File 'trace0' in directory 'loop0' already present!
03:28:56 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000640)={0x2, 0x0, @broadcast}, 0x10)
ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}})
setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000140)=0xfffffffe, 0x4)

03:28:56 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:56 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:56 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:56 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d", 0x2aa}], 0x1)

[ 2643.694358][T16287] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2643.705447][T16287] debugfs: File 'msg' in directory 'loop0' already present!
[ 2643.718914][T16287] debugfs: File 'trace0' in directory 'loop0' already present!
03:28:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="1000060000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:28:57 executing program 5:
r0 = memfd_create(0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff}, 0x14)
shutdown(r2, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
r4 = memfd_create(&(0x7f0000000740)='\x00\x9aF\aM\xe0~\x1e5\t\xe7@\xe7\x1a\xb3#\x84\xd0g^\xb0\xe0L\xcd\x84/\xbcho\xdeq\xe4\xf5\x85\x18R\xef\xc8\x8bg\x7f~r\xc5\xde\r\x86\\g\xef-\x02\xa4\x94\xd6=+1\xbb\x8a\xde\xec\xfa&\xd6\"\xa9\x8c\xbctJ\v)!\x9c\x98\xa5\x9b\x8f\n\"\xa2h\xf44\xa3K<\xa9\x02\x87\xb6\xef\xcd\xe7\x12\xcf|5\xd3\xd4\r\xd6#1\xa7\xf7\x1a\x00\xb4\x16;\xa2\xab\xc6\xc1\xbd&\xc9\xf7u\xac\x0e\xfdP\xa2\x91\x86\xf9\xc8S/\x94\x93\xd2\fI\x1e\xa4>\xa3\x18\xddc\x95\x9an\nE\xedV\x06\x9cK\x0fO\xf8dV\xee\b\x80\xe8\xcf\x8f\'8\xb0\x03\x99s\xa0f\xb2\xeflgI\xe2\xad\xc0\x90\xff\a\xd75\x18\xdc\x9dva\xa1\xfc\xb9\xfe\xf2\xfcB\xfe\xb7\x06\x0eN\x13\xce\xfaQ\xf1\x9b\x15\xd0/sx\x97K2hz\x92~\xdd5$\x02\x12\xd5\xa6I>k\xa4\xb7\xaa\x95\a\x1f\x1f\xafd\xfd\xc2X>\bp&\xa6`3\"\x1fa\xdd*\x92d-C\x9cwJ\xbcE\xe8\xdf\x15\x01\x9b\xa1^f\xfb6\b\xd3\f.4\xa5\x17\x89\n\xb5\xb4\x7f\x97\xebnJB?\xdb\x9d\xe90k\xa9\xe7_[S\x9e\xbf\xf5~\xc6\xf6\xc8G+N\x1f\x1a\xb9<\xcaB^\xd2\x97\xf8\x0ej>p99-\x04\x9e(\x9b\xf3@yJj=\xde\xce\xa2', 0x2)
pwritev(r4, 0x0, 0x0, 0x81805)
sendfile(r3, r3, 0x0, 0x24000000)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
close(r3)

03:28:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/39, 0x27}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0x896e, 0x0, 0x0, 0x800e00519)
shutdown(r1, 0x0)
r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
shutdown(r2, 0x0)

03:28:57 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x2aa}], 0x1)

03:28:57 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:57 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:57 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x3ff}], 0x1)

03:28:57 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2644.257757][T16302] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2644.280016][T16302] debugfs: File 'msg' in directory 'loop0' already present!
03:28:57 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0)
poll(0x0, 0x0, 0x4e)
recvfrom$inet(r0, 0x0, 0xfefc, 0x0, 0x0, 0x800e00510)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
poll(&(0x7f00000011c0)=[{r1}], 0x1, 0x4e)
shutdown(r0, 0x0)

[ 2644.327236][T16302] debugfs: File 'trace0' in directory 'loop0' already present!
03:28:57 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0)
poll(&(0x7f00000011c0)=[{r0}], 0x1, 0x4e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549)
poll(&(0x7f00000011c0)=[{}, {}], 0x2, 0x0)
recvfrom$inet(r1, 0x0, 0x55c1, 0x2, 0x0, 0x800e00545)
shutdown(r1, 0x0)

03:28:57 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x3ff}], 0x1)

03:28:57 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:57 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="1000060000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:28:57 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:57 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:57 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x3ff}], 0x1)

03:28:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x4e)
recvfrom$inet(r1, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e00516)
poll(&(0x7f00000011c0)=[{}, {}], 0x2, 0x4e)
shutdown(r1, 0x0)

03:28:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x4e)
recvfrom$inet(r1, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e00516)
poll(&(0x7f00000011c0)=[{}, {}], 0x2, 0x0)
recvfrom$inet(r1, 0x0, 0xfefc, 0x0, 0x0, 0x800e00510)
shutdown(r1, 0x0)

[ 2645.104602][T16732] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2645.112541][T16732] debugfs: File 'msg' in directory 'loop0' already present!
[ 2645.128377][T16732] debugfs: File 'trace0' in directory 'loop0' already present!
03:28:58 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x4a9}], 0x1)

03:28:58 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:58 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000040)=""/16, 0x10}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0)
recvfrom$inet(r2, 0x0, 0x1008d, 0x0, 0x0, 0x800e00527)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
flock(r4, 0x0)
recvfrom$inet(r2, 0x0, 0xfffffdc4, 0x2, 0x0, 0x800e0051e)
shutdown(r2, 0x0)

03:28:58 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
fcntl$dupfd(r13, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:58 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0)
getpid()
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
getpid()
tkill(0x0, 0x9)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002c40), 0x299, 0x10)

03:28:58 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x4a9}], 0x1)

[ 2645.339701][T16927] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2645.365897][T16927] debugfs: File 'msg' in directory 'loop0' already present!
[ 2645.397829][T16927] debugfs: File 'trace0' in directory 'loop0' already present!
03:28:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:28:58 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:58 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178", 0x4a9}], 0x1)

03:28:58 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/\x00\x00\x00\x00\x00\x00\a\x95\xf7\x17R\x8d\x80\x93q\x86@\f\xd3-%\xbef}U\xa4\xe1\x93i>F\xbf\xf6\xbaN\xff\x1d\xd6\xf9P\a\xfb\xb3\xb9\xa0\x14\xbd\xe6\xbe\xcd}\xfb\xc9\xcb\x84\xf2\x8d\xcc\x80\x1aX\xa8=\x90\'\xbdL\x89\xfd\xcb\x01\x83\x87\x95A\x1f\xd9\xc2\xba96\xe2X{ymS\xfbFx\x9c\tCB\xd4\x82\x93\xd0\xa4\x83\x01\xf7<\xad\a\xff\xde\xc1X\xf3\xfemX\xba\xe4\xf4\x1b>\xba\xbf\xf3\xf5\xdb\x1a\xfes\x11\fu\xdc>\xf2a\xe5\x16\xde!fc82\x01\x0f9Y}p\x88\xe3Q&\xf2Q\xb6W\xdf\xc5\x12\xa9\xbb\xd6'}}]})

03:28:58 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
fcntl$dupfd(r13, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:58 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x102)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:28:58 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x4fe}], 0x1)

03:28:58 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2646.078030][T17172] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2646.114273][T17172] debugfs: File 'msg' in directory 'loop0' already present!
03:28:59 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x4fe}], 0x1)

03:28:59 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:59 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/if_inet6\x00')
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/205, 0xcd}], 0x1, 0x0)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0xf2})
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

[ 2646.147942][T17172] debugfs: File 'trace0' in directory 'loop0' already present!
03:28:59 executing program 4:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x18, 0x4, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x3c)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")

03:28:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:28:59 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x4fe}], 0x1)

03:28:59 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
fcntl$dupfd(r13, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:28:59 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:59 executing program 5:
syz_open_procfs(0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="0002000000000000040100c910ff01001100000000b379f26337296b0b000000622db173ca9a177af8b0b259e5dbee00492a3dfec54984d30c0198d3ca990e8712a7ac3658c1007e6b9036229e10f6920a9b712486c396ed7d8938d61b829e69bd2c3ff32ffa79fbdb43eed3d1ffc21a53af1a4cb373ecce659bb707915332e9e27b2e1201008719d47e6902f4c881c43c0cef5679a939bbb019dccadf8d55a65867a9c0aec19bc801ebce2ee8321d9c204c4bf2bffe0000000000"], 0x20)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

03:28:59 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x311, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\xff', 0x200000000100017e, 0x0)
write$cgroup_type(r0, &(0x7f0000000000)='threade\xff\xff', 0x13ffffee7)

03:28:59 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:28:59 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x529}], 0x1)

[ 2646.897735][T17506] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2646.935386][T17506] debugfs: File 'msg' in directory 'loop0' already present!
[ 2646.959961][T17506] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2647.030431][T17516] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2647.042623][T17516] CPU: 1 PID: 17516 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2647.050969][T17516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2647.061041][T17516] Call Trace:
[ 2647.064351][T17516]  dump_stack+0x1fb/0x318
[ 2647.068705][T17516]  dump_header+0xd8/0x960
[ 2647.073065][T17516]  oom_kill_process+0xee/0x3a0
[ 2647.077841][T17516]  out_of_memory+0x5da/0x900
[ 2647.082449][T17516]  try_charge+0x1223/0x18d0
[ 2647.086988][T17516]  __memcg_kmem_charge+0x146/0x510
[ 2647.092117][T17516]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2647.097505][T17516]  alloc_pages_current+0x2db/0x500
[ 2647.102631][T17516]  pte_alloc_one+0x1f/0x180
[ 2647.107289][T17516]  __pte_alloc+0x20/0x2f0
[ 2647.111636][T17516]  copy_page_range+0x2315/0x2840
[ 2647.116605][T17516]  ? vma_gap_callbacks_rotate+0x1fc/0x230
[ 2647.122341][T17516]  ? __vma_link_rb+0x839/0x860
03:29:00 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a", 0x529}], 0x1)

[ 2647.127110][T17516]  dup_mmap+0xa01/0xe00
[ 2647.131277][T17516]  dup_mm+0x9e/0x340
[ 2647.135307][T17516]  copy_process+0x23d9/0x5c00
[ 2647.140024][T17516]  _do_fork+0x13e/0x660
[ 2647.144189][T17516]  ? check_preemption_disabled+0xb4/0x260
[ 2647.149921][T17516]  ? debug_smp_processor_id+0x9/0x20
[ 2647.155214][T17516]  ? debug_smp_processor_id+0x1c/0x20
[ 2647.160591][T17516]  __x64_sys_clone+0x20b/0x250
[ 2647.165381][T17516]  do_syscall_64+0xf7/0x1c0
[ 2647.169898][T17516]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2647.175873][T17516] RIP: 0033:0x45a679
03:29:00 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2647.179763][T17516] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2647.199367][T17516] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2647.207887][T17516] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2647.215861][T17516] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2647.223830][T17516] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2647.231798][T17516] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2647.239766][T17516] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2647.248097][T17516] memory: usage 307200kB, limit 307200kB, failcnt 47262
[ 2647.255039][T17516] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2647.262661][T17516] Memory cgroup stats for /syz1:
[ 2647.262745][T17516] anon 259346432
[ 2647.262745][T17516] file 36864
[ 2647.262745][T17516] kernel_stack 7798784
[ 2647.262745][T17516] slab 14790656
[ 2647.262745][T17516] sock 0
[ 2647.262745][T17516] shmem 0
[ 2647.262745][T17516] file_mapped 0
[ 2647.262745][T17516] file_dirty 0
[ 2647.262745][T17516] file_writeback 0
[ 2647.262745][T17516] anon_thp 230686720
[ 2647.262745][T17516] inactive_anon 135168
[ 2647.262745][T17516] active_anon 259350528
[ 2647.262745][T17516] inactive_file 16384
[ 2647.262745][T17516] active_file 0
[ 2647.262745][T17516] unevictable 0
[ 2647.262745][T17516] slab_reclaimable 3244032
[ 2647.262745][T17516] slab_unreclaimable 11546624
[ 2647.262745][T17516] pgfault 248886
[ 2647.262745][T17516] pgmajfault 0
[ 2647.262745][T17516] workingset_refault 99
[ 2647.262745][T17516] workingset_activate 0
[ 2647.262745][T17516] workingset_nodereclaim 0
[ 2647.262745][T17516] pgrefill 65121
[ 2647.262745][T17516] pgscan 141120
[ 2647.262745][T17516] pgsteal 74725
[ 2647.356835][T17516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18475,uid=0
03:29:00 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:29:00 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x529}], 0x1)

[ 2647.372412][T17516] Memory cgroup out of memory: Killed process 18475 (syz-executor.1) total-vm:72716kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000
[ 2647.391994][ T1035] oom_reaper: reaped process 18475 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB
[ 2647.447125][T17522] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2647.468957][T17522] debugfs: File 'msg' in directory 'loop0' already present!
[ 2647.490625][T17522] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:00 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:00 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:29:00 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:00 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x53e}], 0x1)

03:29:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x2, 0x0, @msi}]})

03:29:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040)})
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={<r2=>0x0}, &(0x7f00000003c0)=0xffffffffffffff1d)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000080)=0x82)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setreuid(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
setreuid(0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffafd63bfb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000)

03:29:00 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:29:00 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x53e}], 0x1)

[ 2647.830077][T17740] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2647.893176][T17740] debugfs: File 'msg' in directory 'loop0' already present!
[ 2647.893189][T17751] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 2647.893206][T17751] CPU: 0 PID: 17751 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2647.906132][T17740] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2647.912294][T17751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2647.912301][T17751] Call Trace:
[ 2647.912327][T17751]  dump_stack+0x1fb/0x318
[ 2647.912348][T17751]  dump_header+0xd8/0x960
[ 2647.912369][T17751]  oom_kill_process+0xee/0x3a0
[ 2647.955161][T17751]  out_of_memory+0x5da/0x900
[ 2647.959746][T17751]  try_charge+0x1223/0x18d0
[ 2647.964246][T17751]  __memcg_kmem_charge+0x146/0x510
[ 2647.969430][T17751]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2647.974819][T17751]  copy_process+0x57e/0x5c00
[ 2647.979415][T17751]  ? __might_fault+0xf9/0x160
[ 2647.984098][T17751]  _do_fork+0x13e/0x660
[ 2647.988262][T17751]  ? check_preemption_disabled+0xb4/0x260
[ 2647.993986][T17751]  ? debug_smp_processor_id+0x9/0x20
[ 2647.999264][T17751]  ? debug_smp_processor_id+0x1c/0x20
[ 2648.004634][T17751]  __x64_sys_clone+0x20b/0x250
[ 2648.009413][T17751]  do_syscall_64+0xf7/0x1c0
[ 2648.013934][T17751]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2648.019837][T17751] RIP: 0033:0x45a679
[ 2648.023758][T17751] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2648.043358][T17751] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2648.051764][T17751] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2648.059731][T17751] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2648.067734][T17751] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2648.075701][T17751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2648.083663][T17751] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2648.092241][T17751] memory: usage 307180kB, limit 307200kB, failcnt 47287
[ 2648.099255][T17751] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2648.106299][T17751] Memory cgroup stats for /syz1:
[ 2648.106389][T17751] anon 259624960
[ 2648.106389][T17751] file 36864
[ 2648.106389][T17751] kernel_stack 7798784
[ 2648.106389][T17751] slab 14790656
[ 2648.106389][T17751] sock 0
[ 2648.106389][T17751] shmem 0
[ 2648.106389][T17751] file_mapped 0
[ 2648.106389][T17751] file_dirty 0
[ 2648.106389][T17751] file_writeback 0
[ 2648.106389][T17751] anon_thp 230686720
[ 2648.106389][T17751] inactive_anon 135168
[ 2648.106389][T17751] active_anon 259624960
[ 2648.106389][T17751] inactive_file 16384
[ 2648.106389][T17751] active_file 0
[ 2648.106389][T17751] unevictable 0
[ 2648.106389][T17751] slab_reclaimable 3244032
[ 2648.106389][T17751] slab_unreclaimable 11546624
[ 2648.106389][T17751] pgfault 248985
[ 2648.106389][T17751] pgmajfault 0
[ 2648.106389][T17751] workingset_refault 99
[ 2648.106389][T17751] workingset_activate 0
[ 2648.106389][T17751] workingset_nodereclaim 0
[ 2648.106389][T17751] pgrefill 65253
[ 2648.106389][T17751] pgscan 141252
[ 2648.106389][T17751] pgsteal 74725
[ 2648.200989][T17751] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18461,uid=0
[ 2648.216700][T17751] Memory cgroup out of memory: Killed process 18461 (syz-executor.1) total-vm:72584kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000
[ 2648.236690][ T1035] oom_reaper: reaped process 18461 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB
03:29:01 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r0)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:29:01 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296", 0x53e}], 0x1)

03:29:01 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:01 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r0)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

[ 2648.513939][T17968] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2648.536221][T17968] debugfs: File 'msg' in directory 'loop0' already present!
03:29:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="1000060000000000200000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:01 executing program 5:
mkdir(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

[ 2648.563266][T17968] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:01 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x549}], 0x1)

03:29:01 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r0)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:29:01 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

03:29:01 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
r15 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
fcntl$dupfd(r17, 0x0, r16)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32=r17, @ANYPTR, @ANYRES64=r19, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:01 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x549}], 0x1)

03:29:01 executing program 2:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r0)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

[ 2648.821054][T18059] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2648.867514][T18059] debugfs: File 'msg' in directory 'loop0' already present!
[ 2648.900481][T18059] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:01 executing program 5:
mkdir(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

[ 2648.903639][T17983] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 2648.941120][T17983] CPU: 1 PID: 17983 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2648.949497][T17983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2648.959575][T17983] Call Trace:
[ 2648.962881][T17983]  dump_stack+0x1fb/0x318
[ 2648.967228][T17983]  dump_header+0xd8/0x960
[ 2648.971566][T17983]  oom_kill_process+0xee/0x3a0
[ 2648.976336][T17983]  out_of_memory+0x5da/0x900
[ 2648.980944][T17983]  try_charge+0x1223/0x18d0
[ 2648.985479][T17983]  __memcg_kmem_charge+0x146/0x510
03:29:01 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
r15 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
fcntl$dupfd(r17, 0x0, r16)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32=r17, @ANYPTR, @ANYRES64=r19, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2648.990596][T17983]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2648.995979][T17983]  copy_process+0x57e/0x5c00
[ 2649.000577][T17983]  ? __lock_acquire+0xc75/0x1be0
[ 2649.005694][T17983]  _do_fork+0x13e/0x660
[ 2649.009858][T17983]  ? rcu_lock_release+0x4/0x20
[ 2649.014633][T17983]  __x64_sys_clone+0x20b/0x250
[ 2649.019418][T17983]  do_syscall_64+0xf7/0x1c0
[ 2649.023923][T17983]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2649.029817][T17983] RIP: 0033:0x45d049
03:29:01 executing program 5:
mkdir(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

[ 2649.033711][T17983] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 2649.053320][T17983] RSP: 002b:00007fffe25b96d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 2649.061739][T17983] RAX: ffffffffffffffda RBX: 00007f4c176f2700 RCX: 000000000045d049
[ 2649.069721][T17983] RDX: 00007f4c176f29d0 RSI: 00007f4c176f1db0 RDI: 00000000003d0f00
[ 2649.077701][T17983] RBP: 00007fffe25b98f0 R08: 00007f4c176f2700 R09: 00007f4c176f2700
03:29:01 executing program 2:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r0)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

[ 2649.085703][T17983] R10: 00007f4c176f29d0 R11: 0000000000000202 R12: 0000000000000000
[ 2649.093684][T17983] R13: 00007fffe25b978f R14: 00007f4c176f29c0 R15: 000000000075c07c
[ 2649.173464][T18103] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2649.191250][T18103] debugfs: File 'msg' in directory 'loop0' already present!
[ 2649.202232][T18103] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2649.252612][T17983] memory: usage 307176kB, limit 307200kB, failcnt 47317
[ 2649.260804][T17983] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2649.275425][T17983] Memory cgroup stats for /syz1:
[ 2649.275507][T17983] anon 259579904
[ 2649.275507][T17983] file 36864
[ 2649.275507][T17983] kernel_stack 7733248
[ 2649.275507][T17983] slab 14790656
[ 2649.275507][T17983] sock 0
[ 2649.275507][T17983] shmem 0
[ 2649.275507][T17983] file_mapped 0
[ 2649.275507][T17983] file_dirty 0
[ 2649.275507][T17983] file_writeback 0
[ 2649.275507][T17983] anon_thp 230686720
[ 2649.275507][T17983] inactive_anon 135168
[ 2649.275507][T17983] active_anon 259579904
[ 2649.275507][T17983] inactive_file 16384
[ 2649.275507][T17983] active_file 0
[ 2649.275507][T17983] unevictable 0
[ 2649.275507][T17983] slab_reclaimable 3244032
[ 2649.275507][T17983] slab_unreclaimable 11546624
[ 2649.275507][T17983] pgfault 249051
[ 2649.275507][T17983] pgmajfault 0
[ 2649.275507][T17983] workingset_refault 99
[ 2649.275507][T17983] workingset_activate 0
[ 2649.275507][T17983] workingset_nodereclaim 0
[ 2649.275507][T17983] pgrefill 65286
[ 2649.275507][T17983] pgscan 141285
[ 2649.275507][T17983] pgsteal 74725
[ 2649.370546][T17983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=29782,uid=0
[ 2649.386161][T17983] Memory cgroup out of memory: Killed process 29782 (syz-executor.1) total-vm:72584kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000
03:29:02 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="1000060000000000200000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:02 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f3", 0x549}], 0x1)

03:29:02 executing program 5:
mkdir(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

03:29:02 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
r15 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
fcntl$dupfd(r17, 0x0, r16)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32=r17, @ANYPTR, @ANYRES64=r19, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:02 executing program 2:
pipe(0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r0)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)

03:29:02 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0x8}})

03:29:02 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229", 0x54e}], 0x1)

03:29:02 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg(r0, &(0x7f0000006640)=[{{&(0x7f0000000600)=@nfc={0x27, 0x1}, 0x80, 0x0}}], 0x1, 0x0)

03:29:02 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x54e}], 0x1)

[ 2649.643859][T18215] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:02 executing program 5:
mkdir(0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)

03:29:02 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2649.717936][T18215] debugfs: File 'msg' in directory 'loop0' already present!
[ 2649.741868][T18215] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2649.782063][T18270] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2649.811520][T18270] CPU: 1 PID: 18270 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2649.819894][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:29:02 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(0xffffffffffffffff, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2649.829939][T18270] Call Trace:
[ 2649.829960][T18270]  dump_stack+0x1fb/0x318
[ 2649.829976][T18270]  dump_header+0xd8/0x960
[ 2649.829989][T18270]  oom_kill_process+0xee/0x3a0
[ 2649.829999][T18270]  out_of_memory+0x5da/0x900
[ 2649.830018][T18270]  try_charge+0x1223/0x18d0
[ 2649.855750][T18270]  mem_cgroup_try_charge+0x20c/0x680
[ 2649.861056][T18270]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2649.866690][T18270]  handle_mm_fault+0x310e/0x5ff0
[ 2649.871644][T18270]  do_user_addr_fault+0x589/0xaf0
[ 2649.876683][T18270]  __do_page_fault+0xd3/0x1f0
[ 2649.881363][T18270]  do_page_fault+0x99/0xb0
[ 2649.885779][T18270]  page_fault+0x39/0x40
[ 2649.889929][T18270] RIP: 0033:0x411e6f
[ 2649.893820][T18270] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41
[ 2649.913576][T18270] RSP: 002b:00007fffe25b9720 EFLAGS: 00010206
[ 2649.913587][T18270] RAX: 00007f4c176d2000 RBX: 0000000000020000 RCX: 000000000045a6ca
[ 2649.913591][T18270] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000
[ 2649.913596][T18270] RBP: 00007fffe25b9800 R08: ffffffffffffffff R09: 0000000000000000
[ 2649.913601][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe25b98f0
[ 2649.913604][T18270] R13: 00007f4c176f2700 R14: 0000000000000002 R15: 000000000075c07c
[ 2649.943157][T18270] memory: usage 307200kB, limit 307200kB, failcnt 47333
[ 2649.991160][T18341] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2649.999549][T18270] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2650.006837][T18341] debugfs: File 'msg' in directory 'loop0' already present!
[ 2650.014221][T18341] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2650.022449][T18270] Memory cgroup stats for /syz1:
[ 2650.022507][T18270] anon 259645440
[ 2650.022507][T18270] file 36864
[ 2650.022507][T18270] kernel_stack 7733248
[ 2650.022507][T18270] slab 14790656
[ 2650.022507][T18270] sock 0
[ 2650.022507][T18270] shmem 0
[ 2650.022507][T18270] file_mapped 0
[ 2650.022507][T18270] file_dirty 0
[ 2650.022507][T18270] file_writeback 0
[ 2650.022507][T18270] anon_thp 230686720
[ 2650.022507][T18270] inactive_anon 135168
[ 2650.022507][T18270] active_anon 259645440
[ 2650.022507][T18270] inactive_file 16384
[ 2650.022507][T18270] active_file 0
[ 2650.022507][T18270] unevictable 0
[ 2650.022507][T18270] slab_reclaimable 3244032
[ 2650.022507][T18270] slab_unreclaimable 11546624
[ 2650.022507][T18270] pgfault 249183
[ 2650.022507][T18270] pgmajfault 0
[ 2650.022507][T18270] workingset_refault 99
[ 2650.022507][T18270] workingset_activate 0
[ 2650.022507][T18270] workingset_nodereclaim 0
[ 2650.022507][T18270] pgrefill 65320
[ 2650.022507][T18270] pgscan 141285
[ 2650.022507][T18270] pgsteal 74725
[ 2650.117766][T18270] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=29769,uid=0
[ 2650.133986][T18270] Memory cgroup out of memory: Killed process 29769 (syz-executor.1) total-vm:72584kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000
[ 2650.154630][ T1035] oom_reaper: reaped process 29769 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
03:29:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="1000060000000000200000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:03 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x54e}], 0x1)

03:29:03 executing program 5:
mkdir(0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)

03:29:03 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:03 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_INDEX={0x8}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x4c}}, 0x0)

03:29:03 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(0xffffffffffffffff, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:03 executing program 5:
mkdir(0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)

03:29:03 executing program 4:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e3, &(0x7f0000000000))

03:29:03 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x551}], 0x1)

03:29:03 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2650.539632][T18352] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2650.568847][T18350] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 2650.621763][T18350] CPU: 1 PID: 18350 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2650.630135][T18350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2650.640218][T18350] Call Trace:
[ 2650.643519][T18350]  dump_stack+0x1fb/0x318
[ 2650.647864][T18350]  dump_header+0xd8/0x960
[ 2650.652206][T18350]  oom_kill_process+0xee/0x3a0
[ 2650.656974][T18350]  out_of_memory+0x5da/0x900
[ 2650.661615][T18350]  try_charge+0x1223/0x18d0
[ 2650.666144][T18350]  __memcg_kmem_charge+0x146/0x510
[ 2650.671264][T18350]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2650.676657][T18350]  copy_process+0x57e/0x5c00
[ 2650.681271][T18350]  ? __lock_acquire+0xc75/0x1be0
[ 2650.686243][T18350]  _do_fork+0x13e/0x660
[ 2650.690407][T18350]  ? rcu_lock_release+0x4/0x20
[ 2650.695180][T18350]  __x64_sys_clone+0x20b/0x250
[ 2650.699959][T18350]  do_syscall_64+0xf7/0x1c0
[ 2650.704460][T18350]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2650.710348][T18350] RIP: 0033:0x45d049
03:29:03 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x551}], 0x1)

[ 2650.714243][T18350] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 2650.733850][T18350] RSP: 002b:00007fffe25b96d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 2650.742273][T18350] RAX: ffffffffffffffda RBX: 00007f4c17713700 RCX: 000000000045d049
[ 2650.746061][T18352] debugfs: File 'msg' in directory 'loop0' already present!
[ 2650.750245][T18350] RDX: 00007f4c177139d0 RSI: 00007f4c17712db0 RDI: 00000000003d0f00
03:29:03 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2650.750252][T18350] RBP: 00007fffe25b98f0 R08: 00007f4c17713700 R09: 00007f4c17713700
[ 2650.750258][T18350] R10: 00007f4c177139d0 R11: 0000000000000202 R12: 0000000000000000
[ 2650.750263][T18350] R13: 00007fffe25b978f R14: 00007f4c177139c0 R15: 000000000075bfd4
[ 2650.763541][T18350] memory: usage 307196kB, limit 307200kB, failcnt 47349
[ 2650.774031][T18350] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2650.804445][T18350] Memory cgroup stats for /syz1:
[ 2650.806467][T18350] anon 259719168
[ 2650.806467][T18350] file 36864
[ 2650.806467][T18350] kernel_stack 7733248
[ 2650.806467][T18350] slab 14925824
[ 2650.806467][T18350] sock 0
[ 2650.806467][T18350] shmem 0
[ 2650.806467][T18350] file_mapped 0
[ 2650.806467][T18350] file_dirty 0
[ 2650.806467][T18350] file_writeback 0
[ 2650.806467][T18350] anon_thp 230686720
[ 2650.806467][T18350] inactive_anon 135168
[ 2650.806467][T18350] active_anon 259719168
[ 2650.806467][T18350] inactive_file 16384
[ 2650.806467][T18350] active_file 0
[ 2650.806467][T18350] unevictable 0
[ 2650.806467][T18350] slab_reclaimable 3244032
[ 2650.806467][T18350] slab_unreclaimable 11681792
[ 2650.806467][T18350] pgfault 249282
[ 2650.806467][T18350] pgmajfault 0
[ 2650.806467][T18350] workingset_refault 99
[ 2650.806467][T18350] workingset_activate 0
[ 2650.806467][T18350] workingset_nodereclaim 0
[ 2650.806467][T18350] pgrefill 65320
[ 2650.806467][T18350] pgscan 141318
[ 2650.806467][T18350] pgsteal 74725
[ 2650.820250][T18352] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2650.901977][T18350] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=29744,uid=0
[ 2650.935288][T18350] Memory cgroup out of memory: Killed process 29744 (syz-executor.1) total-vm:72584kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000
[ 2650.958342][ T1035] oom_reaper: reaped process 29744 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
03:29:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYBLOB="100006000000000020000000000000"], 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

03:29:04 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r0, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003940)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0)

03:29:04 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cce", 0x551}], 0x1)

03:29:04 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(0xffffffffffffffff, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:04 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:04 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x552}], 0x1)

03:29:04 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:04 executing program 4:
ioctl(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="3100000013000900690006342fc56aef40be44080200000046000107000000540d000dc0", 0x24}], 0x1)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492700, 0x0)

03:29:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

[ 2651.393386][T18490] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2651.409496][T18490] debugfs: File 'msg' in directory 'loop0' already present!
[ 2651.421625][T18484] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2651.462573][T18497] netlink: 'syz-executor.4': attribute type 13 has an invalid length.
[ 2651.489372][T18484] CPU: 0 PID: 18484 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2651.494608][T18497] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'.
03:29:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

03:29:04 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

[ 2651.497756][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2651.497762][T18484] Call Trace:
[ 2651.497784][T18484]  dump_stack+0x1fb/0x318
[ 2651.497801][T18484]  dump_header+0xd8/0x960
[ 2651.497815][T18484]  oom_kill_process+0xee/0x3a0
[ 2651.497827][T18484]  out_of_memory+0x5da/0x900
[ 2651.497845][T18484]  try_charge+0x1223/0x18d0
[ 2651.497877][T18484]  mem_cgroup_try_charge+0x20c/0x680
[ 2651.548474][T18484]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2651.548744][T18490] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2651.554109][T18484]  handle_mm_fault+0x310e/0x5ff0
[ 2651.554144][T18484]  do_user_addr_fault+0x589/0xaf0
[ 2651.554164][T18484]  __do_page_fault+0xd3/0x1f0
[ 2651.576285][T18484]  do_page_fault+0x99/0xb0
[ 2651.580707][T18484]  page_fault+0x39/0x40
[ 2651.584863][T18484] RIP: 0033:0x45d02d
[ 2651.588751][T18484] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8
[ 2651.608624][T18484] RSP: 002b:00007fffe25b96d8 EFLAGS: 00010202
[ 2651.614695][T18484] RAX: ffffffffffffffea RBX: 00007f4c17713700 RCX: 00007f4c17713700
[ 2651.622664][T18484] RDX: 00000000003d0f00 RSI: 00007f4c17712db0 RDI: 0000000000411260
[ 2651.630636][T18484] RBP: 00007fffe25b98f0 R08: 00007f4c177139d0 R09: 00007f4c17713700
[ 2651.638635][T18484] R10: 00007f4c17712dc0 R11: 0000000000000246 R12: 0000000000000000
[ 2651.646612][T18484] R13: 00007fffe25b978f R14: 00007f4c177139c0 R15: 000000000075bfd4
[ 2651.655346][T18497] netlink: 'syz-executor.4': attribute type 13 has an invalid length.
[ 2651.661430][T18484] memory: usage 307200kB, limit 307200kB, failcnt 47366
[ 2651.671274][T18484] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2651.683815][T18484] Memory cgroup stats for /syz1:
[ 2651.683904][T18484] anon 259604480
[ 2651.683904][T18484] file 36864
[ 2651.683904][T18484] kernel_stack 7667712
[ 2651.683904][T18484] slab 14925824
[ 2651.683904][T18484] sock 0
[ 2651.683904][T18484] shmem 0
[ 2651.683904][T18484] file_mapped 0
[ 2651.683904][T18484] file_dirty 0
[ 2651.683904][T18484] file_writeback 0
[ 2651.683904][T18484] anon_thp 230686720
[ 2651.683904][T18484] inactive_anon 135168
[ 2651.683904][T18484] active_anon 259604480
[ 2651.683904][T18484] inactive_file 16384
[ 2651.683904][T18484] active_file 110592
[ 2651.683904][T18484] unevictable 0
[ 2651.683904][T18484] slab_reclaimable 3244032
[ 2651.683904][T18484] slab_unreclaimable 11681792
[ 2651.683904][T18484] pgfault 249348
[ 2651.683904][T18484] pgmajfault 0
[ 2651.683904][T18484] workingset_refault 99
[ 2651.683904][T18484] workingset_activate 33
[ 2651.683904][T18484] workingset_nodereclaim 0
[ 2651.683904][T18484] pgrefill 65353
[ 2651.683904][T18484] pgscan 141351
[ 2651.683904][T18484] pgsteal 74725
[ 2651.689302][T18497] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2651.781274][T18484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=4748,uid=0
[ 2651.810991][T18484] Memory cgroup out of memory: Killed process 4748 (syz-executor.1) total-vm:72716kB, anon-rss:172kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2651.913041][T18484] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2651.923988][T18484] CPU: 1 PID: 18484 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2651.932329][T18484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2651.942501][T18484] Call Trace:
[ 2651.945803][T18484]  dump_stack+0x1fb/0x318
[ 2651.950141][T18484]  dump_header+0xd8/0x960
[ 2651.954502][T18484]  oom_kill_process+0xee/0x3a0
[ 2651.959346][T18484]  out_of_memory+0x5da/0x900
[ 2651.963942][T18484]  try_charge+0x1223/0x18d0
[ 2651.968489][T18484]  mem_cgroup_try_charge+0x20c/0x680
[ 2651.973763][T18484]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2651.979394][T18484]  wp_page_copy+0x349/0x1890
[ 2651.983981][T18484]  ? do_raw_spin_unlock+0x136/0x260
[ 2651.989170][T18484]  do_wp_page+0x5e5/0x1cc0
[ 2651.993564][T18484]  ? __kasan_check_write+0x14/0x20
[ 2651.998704][T18484]  handle_mm_fault+0x2ada/0x5ff0
[ 2652.003630][T18484]  do_user_addr_fault+0x589/0xaf0
[ 2652.008635][T18484]  __do_page_fault+0xd3/0x1f0
[ 2652.013321][T18484]  do_page_fault+0x99/0xb0
[ 2652.017715][T18484]  page_fault+0x39/0x40
[ 2652.021842][T18484] RIP: 0033:0x40d7c3
[ 2652.025805][T18484] Code: 4b 00 31 c0 e8 4e 45 ff ff 41 8b 0f 85 c9 74 cb 80 78 21 00 75 c5 0f b6 4c 24 5c c7 40 0c 00 00 00 00 c6 40 21 01 44 89 68 2c <4c> 89 25 4e e7 34 00 88 48 20 48 8b 4c 24 50 80 60 20 01 48 89 48
[ 2652.045460][T18484] RSP: 002b:00007fffe25b9810 EFLAGS: 00010246
[ 2652.051513][T18484] RAX: 000000000075c070 RBX: 0000000000000000 RCX: 0000000000000000
[ 2652.059512][T18484] RDX: 0000000000000150 RSI: 0000000000000001 RDI: 000000000075c078
[ 2652.067463][T18484] RBP: 000000000075c07c R08: 00007fffe25b98d0 R09: 00000000007608c0
[ 2652.075413][T18484] R10: 00007fffe25b98e0 R11: 0000000000000012 R12: 000000000075c070
[ 2652.083403][T18484] R13: 0000000000000003 R14: 0000000000000002 R15: 000000000075c07c
[ 2652.096430][T18484] memory: usage 307196kB, limit 307200kB, failcnt 47398
[ 2652.103398][T18484] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2652.111798][T18484] Memory cgroup stats for /syz1:
[ 2652.111872][T18484] anon 259604480
[ 2652.111872][T18484] file 36864
[ 2652.111872][T18484] kernel_stack 7733248
[ 2652.111872][T18484] slab 14925824
[ 2652.111872][T18484] sock 0
[ 2652.111872][T18484] shmem 0
[ 2652.111872][T18484] file_mapped 0
[ 2652.111872][T18484] file_dirty 0
[ 2652.111872][T18484] file_writeback 0
[ 2652.111872][T18484] anon_thp 230686720
[ 2652.111872][T18484] inactive_anon 135168
[ 2652.111872][T18484] active_anon 259604480
[ 2652.111872][T18484] inactive_file 16384
[ 2652.111872][T18484] active_file 110592
[ 2652.111872][T18484] unevictable 0
[ 2652.111872][T18484] slab_reclaimable 3244032
[ 2652.111872][T18484] slab_unreclaimable 11681792
[ 2652.111872][T18484] pgfault 249381
[ 2652.111872][T18484] pgmajfault 0
[ 2652.111872][T18484] workingset_refault 99
[ 2652.111872][T18484] workingset_activate 33
[ 2652.111872][T18484] workingset_nodereclaim 0
[ 2652.111872][T18484] pgrefill 65485
[ 2652.111872][T18484] pgscan 141483
[ 2652.111872][T18484] pgsteal 74725
[ 2652.207406][T18484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6919,uid=0
[ 2652.223040][T18484] Memory cgroup out of memory: Killed process 6919 (syz-executor.1) total-vm:72848kB, anon-rss:184kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYBLOB="100006000000000020000000000000"], 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)

03:29:05 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200), 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:05 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x552}], 0x1)

03:29:05 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:05 executing program 4:
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000040))
fcntl$getown(0xffffffffffffffff, 0x9)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32], 0x2)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="ffd934aa54cdfc17009c37dfb755c6d450726f13c9f79a076b"], 0x19)
sendfile(r1, r1, &(0x7f0000000240), 0x7fff)

03:29:05 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x552}], 0x1)

03:29:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)

03:29:05 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200), 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2652.474219][T18622] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2652.495988][T18622] debugfs: File 'msg' in directory 'loop0' already present!
[ 2652.562001][T18622] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:05 executing program 0:

03:29:05 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)

03:29:05 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200), 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2652.685550][T18624] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2652.739285][T18624] CPU: 0 PID: 18624 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2652.747674][T18624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2652.758380][T18624] Call Trace:
[ 2652.761684][T18624]  dump_stack+0x1fb/0x318
[ 2652.766042][T18624]  dump_header+0xd8/0x960
[ 2652.770388][T18624]  oom_kill_process+0xee/0x3a0
[ 2652.775155][T18624]  out_of_memory+0x5da/0x900
[ 2652.779752][T18624]  try_charge+0x1223/0x18d0
[ 2652.784289][T18624]  mem_cgroup_try_charge+0x20c/0x680
[ 2652.789583][T18624]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2652.795216][T18624]  wp_page_copy+0x349/0x1890
[ 2652.799811][T18624]  ? do_raw_spin_unlock+0x136/0x260
[ 2652.805010][T18624]  do_wp_page+0x5e5/0x1cc0
[ 2652.809424][T18624]  ? __kasan_check_write+0x14/0x20
[ 2652.814545][T18624]  handle_mm_fault+0x2ada/0x5ff0
[ 2652.819496][T18624]  do_user_addr_fault+0x589/0xaf0
[ 2652.824536][T18624]  __do_page_fault+0xd3/0x1f0
[ 2652.829213][T18624]  do_page_fault+0x99/0xb0
[ 2652.833626][T18624]  page_fault+0x39/0x40
[ 2652.837779][T18624] RIP: 0033:0x40f6c8
[ 2652.841682][T18624] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 64 fe 4b 00 31 c0 e8 13 27 ff ff 31 ff e8 5c 23 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 2f 66 00
[ 2652.861901][T18624] RSP: 002b:00007fffe25b9740 EFLAGS: 00010246
[ 2652.867976][T18624] RAX: 000000008b5ca1f4 RBX: 00000000b5e0df27 RCX: 0000001b2e820000
[ 2652.875981][T18624] RDX: 0000000000000000 RSI: 00000000000001f4 RDI: ffffffff8b5ca1f4
[ 2652.883949][T18624] RBP: 0000000000000016 R08: 000000008b5ca1f4 R09: 000000008b5ca1f8
[ 2652.891923][T18624] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c0f8
[ 2652.891929][T18624] R13: 0000000080000000 R14: 00007f4c19335008 R15: 00000000000000d8
[ 2652.899586][T18624] memory: usage 307200kB, limit 307200kB, failcnt 47440
[ 2652.916849][T18624] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2652.925232][T18624] Memory cgroup stats for /syz1:
[ 2652.925313][T18624] anon 259448832
[ 2652.925313][T18624] file 36864
[ 2652.925313][T18624] kernel_stack 7733248
[ 2652.925313][T18624] slab 15060992
[ 2652.925313][T18624] sock 0
[ 2652.925313][T18624] shmem 0
[ 2652.925313][T18624] file_mapped 0
[ 2652.925313][T18624] file_dirty 0
[ 2652.925313][T18624] file_writeback 0
[ 2652.925313][T18624] anon_thp 230686720
[ 2652.925313][T18624] inactive_anon 135168
[ 2652.925313][T18624] active_anon 259469312
[ 2652.925313][T18624] inactive_file 16384
[ 2652.925313][T18624] active_file 110592
[ 2652.925313][T18624] unevictable 0
[ 2652.925313][T18624] slab_reclaimable 3244032
[ 2652.925313][T18624] slab_unreclaimable 11816960
[ 2652.925313][T18624] pgfault 249480
[ 2652.925313][T18624] pgmajfault 0
[ 2652.925313][T18624] workingset_refault 99
[ 2652.925313][T18624] workingset_activate 33
[ 2652.925313][T18624] workingset_nodereclaim 0
[ 2652.925313][T18624] pgrefill 65683
[ 2652.925313][T18624] pgscan 141648
[ 2652.925313][T18624] pgsteal 74725
[ 2653.023549][T18624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10491,uid=0
[ 2653.039171][T18624] Memory cgroup out of memory: Killed process 10491 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2653.066691][ T1035] oom_reaper: reaped process 10491 (syz-executor.1), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB
03:29:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYBLOB="100006000000000020000000000000"], 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:06 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:06 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)

03:29:06 executing program 0:

03:29:06 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:06 executing program 4:

03:29:06 executing program 0:

03:29:06 executing program 4:

03:29:06 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)

[ 2653.413475][T18757] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:06 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2653.456118][T18757] debugfs: File 'msg' in directory 'loop0' already present!
[ 2653.472374][T18757] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2653.499442][T18767] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2653.509446][T18767] CPU: 1 PID: 18767 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2653.518271][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2653.528315][T18767] Call Trace:
[ 2653.531600][T18767]  dump_stack+0x1fb/0x318
[ 2653.535916][T18767]  dump_header+0xd8/0x960
[ 2653.540234][T18767]  oom_kill_process+0xee/0x3a0
[ 2653.544980][T18767]  out_of_memory+0x5da/0x900
[ 2653.549570][T18767]  try_charge+0x1223/0x18d0
[ 2653.554070][T18767]  mem_cgroup_try_charge+0x20c/0x680
[ 2653.559352][T18767]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2653.564969][T18767]  wp_page_copy+0x349/0x1890
[ 2653.569556][T18767]  ? do_raw_spin_unlock+0x136/0x260
[ 2653.574735][T18767]  do_wp_page+0x5e5/0x1cc0
[ 2653.579132][T18767]  ? __kasan_check_write+0x14/0x20
[ 2653.584229][T18767]  handle_mm_fault+0x2ada/0x5ff0
[ 2653.589172][T18767]  do_user_addr_fault+0x589/0xaf0
[ 2653.594188][T18767]  __do_page_fault+0xd3/0x1f0
[ 2653.598849][T18767]  do_page_fault+0x99/0xb0
[ 2653.603248][T18767]  page_fault+0x39/0x40
[ 2653.607384][T18767] RIP: 0033:0x40421e
[ 2653.611262][T18767] Code: 48 8b 55 40 48 8b 75 38 48 8b 7d 30 ff 75 70 ff 75 68 ff 75 60 4c 8b 4d 58 4c 8b 45 50 ff d0 48 83 c4 20 48 89 c3 48 83 fb ff <48> 89 5d 78 41 8b 04 24 0f 85 d4 00 00 00 85 c0 0f 85 cc 00 00 00
[ 2653.630857][T18767] RSP: 002b:00007f4c176f1c90 EFLAGS: 00010213
[ 2653.636913][T18767] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045a679
[ 2653.644865][T18767] RDX: 00000000004041d6 RSI: 0000000000000000 RDI: 0000000000000000
[ 2653.652819][T18767] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2653.660783][T18767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2653.668736][T18767] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2653.677006][T18767] memory: usage 307200kB, limit 307200kB, failcnt 47487
[ 2653.683922][T18767] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2653.690792][T18767] Memory cgroup stats for /syz1:
[ 2653.690885][T18767] anon 259584000
[ 2653.690885][T18767] file 36864
[ 2653.690885][T18767] kernel_stack 7798784
[ 2653.690885][T18767] slab 15060992
[ 2653.690885][T18767] sock 0
[ 2653.690885][T18767] shmem 0
[ 2653.690885][T18767] file_mapped 0
[ 2653.690885][T18767] file_dirty 0
[ 2653.690885][T18767] file_writeback 0
[ 2653.690885][T18767] anon_thp 230686720
[ 2653.690885][T18767] inactive_anon 135168
[ 2653.690885][T18767] active_anon 259604480
[ 2653.690885][T18767] inactive_file 16384
[ 2653.690885][T18767] active_file 110592
[ 2653.690885][T18767] unevictable 0
[ 2653.690885][T18767] slab_reclaimable 3244032
[ 2653.690885][T18767] slab_unreclaimable 11816960
[ 2653.690885][T18767] pgfault 249546
[ 2653.690885][T18767] pgmajfault 0
[ 2653.690885][T18767] workingset_refault 132
[ 2653.690885][T18767] workingset_activate 33
[ 2653.690885][T18767] workingset_nodereclaim 0
[ 2653.690885][T18767] pgrefill 65782
[ 2653.690885][T18767] pgscan 141714
[ 2653.690885][T18767] pgsteal 74725
[ 2653.785829][T18767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10431,uid=0
[ 2653.801473][T18767] Memory cgroup out of memory: Killed process 10431 (syz-executor.1) total-vm:72716kB, anon-rss:168kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:07 executing program 0:

[ 2654.468367][ T1035] oom_reaper: reaped process 10431 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
03:29:07 executing program 5:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0)

03:29:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:07 executing program 4:

03:29:07 executing program 0:

03:29:07 executing program 5:

03:29:07 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{0x0}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:07 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:07 executing program 5:

03:29:07 executing program 0:

[ 2654.735140][T18780] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2654.744033][T18780] debugfs: File 'msg' in directory 'loop0' already present!
[ 2654.755418][T18780] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:07 executing program 4:

03:29:07 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:07 executing program 5:

03:29:07 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2654.888404][T18791] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2654.900380][T18791] CPU: 0 PID: 18791 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2654.908727][T18791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2654.918808][T18791] Call Trace:
[ 2654.918830][T18791]  dump_stack+0x1fb/0x318
[ 2654.918847][T18791]  dump_header+0xd8/0x960
[ 2654.918860][T18791]  oom_kill_process+0xee/0x3a0
[ 2654.918871][T18791]  out_of_memory+0x5da/0x900
[ 2654.918893][T18791]  try_charge+0x1223/0x18d0
[ 2654.926539][T18791]  __memcg_kmem_charge+0x146/0x510
[ 2654.926559][T18791]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2654.926579][T18791]  alloc_pages_current+0x2db/0x500
[ 2654.926596][T18791]  pte_alloc_one+0x1f/0x180
[ 2654.964707][T18791]  __pte_alloc+0x20/0x2f0
[ 2654.969046][T18791]  copy_page_range+0x2315/0x2840
[ 2654.974005][T18791]  ? vma_gap_callbacks_rotate+0x1fc/0x230
[ 2654.979746][T18791]  ? __vma_link_rb+0x839/0x860
[ 2654.984521][T18791]  dup_mmap+0xa01/0xe00
[ 2654.988691][T18791]  dup_mm+0x9e/0x340
[ 2654.992586][T18791]  copy_process+0x23d9/0x5c00
[ 2654.997296][T18791]  _do_fork+0x13e/0x660
[ 2655.001459][T18791]  ? check_preemption_disabled+0xb4/0x260
[ 2655.007176][T18791]  ? debug_smp_processor_id+0x9/0x20
[ 2655.012467][T18791]  ? debug_smp_processor_id+0x1c/0x20
[ 2655.017845][T18791]  __x64_sys_clone+0x20b/0x250
[ 2655.022622][T18791]  do_syscall_64+0xf7/0x1c0
[ 2655.022650][T18797] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2655.027120][T18791]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2655.027131][T18791] RIP: 0033:0x45a679
[ 2655.027142][T18791] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2655.027147][T18791] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2655.027155][T18791] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2655.027160][T18791] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2655.027165][T18791] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2655.027170][T18791] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2655.027175][T18791] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2655.027711][T18791] memory: usage 307200kB, limit 307200kB, failcnt 51510
[ 2655.040909][T18797] debugfs: File 'msg' in directory 'loop0' already present!
[ 2655.044711][T18791] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2655.044716][T18791] Memory cgroup stats for /syz1:
[ 2655.044810][T18791] anon 259436544
[ 2655.044810][T18791] file 36864
[ 2655.044810][T18791] kernel_stack 7733248
[ 2655.044810][T18791] slab 15060992
[ 2655.044810][T18791] sock 0
[ 2655.044810][T18791] shmem 0
[ 2655.044810][T18791] file_mapped 0
[ 2655.044810][T18791] file_dirty 0
[ 2655.044810][T18791] file_writeback 0
[ 2655.044810][T18791] anon_thp 230686720
[ 2655.044810][T18791] inactive_anon 135168
[ 2655.044810][T18791] active_anon 259469312
[ 2655.044810][T18791] inactive_file 16384
[ 2655.044810][T18791] active_file 110592
[ 2655.044810][T18791] unevictable 0
[ 2655.044810][T18791] slab_reclaimable 3244032
[ 2655.044810][T18791] slab_unreclaimable 11816960
[ 2655.044810][T18791] pgfault 249645
[ 2655.044810][T18791] pgmajfault 0
[ 2655.044810][T18791] workingset_refault 132
[ 2655.044810][T18791] workingset_activate 33
[ 2655.044810][T18791] workingset_nodereclaim 0
[ 2655.044810][T18791] pgrefill 85054
[ 2655.044810][T18791] pgscan 160986
[ 2655.044810][T18791] pgsteal 74725
[ 2655.102946][T18797] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2655.105046][T18791] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9565,uid=0
[ 2655.252353][T18791] Memory cgroup out of memory: Killed process 9565 (syz-executor.1) total-vm:72716kB, anon-rss:168kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2655.271478][ T1035] oom_reaper: reaped process 9565 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
[ 2655.300042][T18783] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2655.310170][T18783] CPU: 1 PID: 18783 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2655.318487][T18783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2655.328579][T18783] Call Trace:
[ 2655.331865][T18783]  dump_stack+0x1fb/0x318
[ 2655.336194][T18783]  dump_header+0xd8/0x960
[ 2655.340511][T18783]  oom_kill_process+0xee/0x3a0
[ 2655.345259][T18783]  out_of_memory+0x5da/0x900
[ 2655.349886][T18783]  try_charge+0x1223/0x18d0
[ 2655.354417][T18783]  mem_cgroup_try_charge+0x20c/0x680
[ 2655.359707][T18783]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2655.365317][T18783]  wp_page_copy+0x349/0x1890
[ 2655.369911][T18783]  ? do_raw_spin_unlock+0x136/0x260
[ 2655.375096][T18783]  do_wp_page+0x5e5/0x1cc0
[ 2655.379515][T18783]  ? __kasan_check_write+0x14/0x20
[ 2655.384673][T18783]  handle_mm_fault+0x2ada/0x5ff0
[ 2655.389616][T18783]  do_user_addr_fault+0x589/0xaf0
[ 2655.394629][T18783]  __do_page_fault+0xd3/0x1f0
[ 2655.399295][T18783]  do_page_fault+0x99/0xb0
[ 2655.403712][T18783]  page_fault+0x39/0x40
[ 2655.407965][T18783] RIP: 0033:0x4418f9
[ 2655.411853][T18783] Code: b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e 89 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e <48> 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40
[ 2655.431573][T18783] RSP: 002b:00007fffe25b9808 EFLAGS: 00010202
[ 2655.437673][T18783] RAX: 0000000020000080 RBX: 000000000075c9a0 RCX: 0030656c69662f2e
[ 2655.445682][T18783] RDX: 0000000000000008 RSI: 00000000007609b0 RDI: 0000000020000080
[ 2655.454292][T18783] RBP: 0000000000760990 R08: 0000000098926c7f R09: 0000000098926c83
[ 2655.462375][T18783] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c070
[ 2655.470358][T18783] R13: 000000000028841a R14: 0000000000760998 R15: 000000000075c07c
[ 2655.479738][T18783] memory: usage 307036kB, limit 307200kB, failcnt 51553
[ 2655.487280][T18783] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2655.494127][T18783] Memory cgroup stats for /syz1:
[ 2655.494211][T18783] anon 259571712
[ 2655.494211][T18783] file 36864
[ 2655.494211][T18783] kernel_stack 7733248
[ 2655.494211][T18783] slab 15060992
[ 2655.494211][T18783] sock 0
[ 2655.494211][T18783] shmem 0
[ 2655.494211][T18783] file_mapped 0
[ 2655.494211][T18783] file_dirty 0
[ 2655.494211][T18783] file_writeback 0
[ 2655.494211][T18783] anon_thp 230686720
[ 2655.494211][T18783] inactive_anon 135168
[ 2655.494211][T18783] active_anon 259469312
[ 2655.494211][T18783] inactive_file 16384
[ 2655.494211][T18783] active_file 110592
[ 2655.494211][T18783] unevictable 0
[ 2655.494211][T18783] slab_reclaimable 3244032
[ 2655.494211][T18783] slab_unreclaimable 11816960
[ 2655.494211][T18783] pgfault 249678
[ 2655.494211][T18783] pgmajfault 0
[ 2655.494211][T18783] workingset_refault 132
[ 2655.494211][T18783] workingset_activate 33
[ 2655.494211][T18783] workingset_nodereclaim 0
[ 2655.494211][T18783] pgrefill 85219
[ 2655.494211][T18783] pgscan 161184
[ 2655.494211][T18783] pgsteal 74725
[ 2655.590319][T18783] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9552,uid=0
[ 2655.606516][T18783] Memory cgroup out of memory: Killed process 9552 (syz-executor.1) total-vm:72716kB, anon-rss:168kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2655.625380][ T1035] oom_reaper: reaped process 9552 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
03:29:08 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:08 executing program 4:

03:29:08 executing program 0:

03:29:08 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:08 executing program 5:

03:29:08 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:08 executing program 4:

03:29:08 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:08 executing program 0:

03:29:08 executing program 5:
poll(&(0x7f00000011c0)=[{}], 0x1, 0x4e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549)
poll(&(0x7f00000011c0)=[{}, {}], 0x2, 0x0)
recvfrom$inet(r0, 0x0, 0x55c1, 0x2, 0x0, 0x800e00545)
shutdown(r0, 0x0)

[ 2655.853758][T18809] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
poll(0x0, 0x0, 0x4e)
recvfrom$inet(r0, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e00516)
poll(&(0x7f00000011c0)=[{}], 0x1, 0x0)
recvfrom$inet(r0, 0x0, 0xfefc, 0x0, 0x0, 0x800e00510)
shutdown(r0, 0x0)

[ 2655.898534][T18809] debugfs: File 'msg' in directory 'loop0' already present!
03:29:08 executing program 0:

[ 2655.942184][T18809] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:09 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:09 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:09 executing program 0:

03:29:09 executing program 4:

03:29:09 executing program 5:

03:29:09 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f0000000040), 0x0, 0x4e)
recvfrom$inet(r0, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e00516)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0)
poll(&(0x7f00000011c0)=[{}], 0x1, 0x4e)
recvfrom$inet(r0, 0x0, 0xfefc, 0x0, 0x0, 0x800e00510)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
poll(&(0x7f00000011c0)=[{r1}, {}], 0x2, 0x4e)
shutdown(r0, 0x0)

03:29:09 executing program 4:
poll(&(0x7f00000011c0)=[{}], 0x1, 0x4e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549)
poll(&(0x7f00000011c0)=[{}], 0x1, 0x0)
recvfrom$inet(r0, 0x0, 0x55c1, 0x0, 0x0, 0x800e00545)
shutdown(r0, 0x0)

03:29:09 executing program 5:
poll(&(0x7f0000000240)=[{}], 0x206a, 0x800000000004c)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002a40)=""/4112, 0x1010}], 0x1}, 0x0)
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0x1de, 0x0, 0x0, 0x800e0050e)
shutdown(r3, 0x0)
r5 = socket$inet6_sctp(0x1c, 0x5, 0x84)
read(r5, &(0x7f0000000000)=""/135, 0x87)
shutdown(r4, 0x0)
shutdown(r1, 0x0)

[ 2656.642506][T19036] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2656.661984][T19036] debugfs: File 'msg' in directory 'loop0' already present!
[ 2656.684440][T19036] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2656.729179][T19043] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 2656.741177][T19043] CPU: 0 PID: 19043 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2656.749512][T19043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2656.759575][T19043] Call Trace:
[ 2656.762885][T19043]  dump_stack+0x1fb/0x318
[ 2656.767236][T19043]  dump_header+0xd8/0x960
[ 2656.771584][T19043]  oom_kill_process+0xee/0x3a0
[ 2656.776370][T19043]  out_of_memory+0x5da/0x900
[ 2656.780977][T19043]  try_charge+0x1223/0x18d0
[ 2656.785515][T19043]  __memcg_kmem_charge+0x146/0x510
[ 2656.790641][T19043]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2656.796031][T19043]  copy_process+0x57e/0x5c00
[ 2656.800642][T19043]  ? __might_fault+0xf9/0x160
[ 2656.805338][T19043]  _do_fork+0x13e/0x660
[ 2656.809498][T19043]  ? check_preemption_disabled+0xb4/0x260
[ 2656.815222][T19043]  ? debug_smp_processor_id+0x9/0x20
[ 2656.820523][T19043]  ? debug_smp_processor_id+0x1c/0x20
[ 2656.825914][T19043]  __x64_sys_clone+0x20b/0x250
[ 2656.830710][T19043]  do_syscall_64+0xf7/0x1c0
[ 2656.835230][T19043]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2656.841139][T19043] RIP: 0033:0x45a679
[ 2656.845041][T19043] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2656.864651][T19043] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
03:29:09 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:09 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00\x00\x00', 0x4}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/241, 0xf1}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xfff7, 0x0, 0x0, 0x800e00507)
shutdown(r0, 0x0)
r2 = dup(r1)
r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
shutdown(r2, 0x0)

[ 2656.873074][T19043] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2656.881070][T19043] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2656.889049][T19043] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2656.897036][T19043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2656.905004][T19043] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2656.913122][T19043] memory: usage 307176kB, limit 307200kB, failcnt 51574
[ 2656.920382][T19043] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2656.927311][T19043] Memory cgroup stats for /syz1:
[ 2656.927380][T19043] anon 259538944
[ 2656.927380][T19043] file 36864
[ 2656.927380][T19043] kernel_stack 7733248
[ 2656.927380][T19043] slab 15196160
[ 2656.927380][T19043] sock 0
[ 2656.927380][T19043] shmem 0
[ 2656.927380][T19043] file_mapped 0
[ 2656.927380][T19043] file_dirty 0
[ 2656.927380][T19043] file_writeback 0
[ 2656.927380][T19043] anon_thp 230686720
[ 2656.927380][T19043] inactive_anon 135168
[ 2656.927380][T19043] active_anon 259604480
[ 2656.927380][T19043] inactive_file 16384
[ 2656.927380][T19043] active_file 110592
[ 2656.927380][T19043] unevictable 0
[ 2656.927380][T19043] slab_reclaimable 3244032
[ 2656.927380][T19043] slab_unreclaimable 11952128
[ 2656.927380][T19043] pgfault 249876
[ 2656.927380][T19043] pgmajfault 0
[ 2656.927380][T19043] workingset_refault 132
[ 2656.927380][T19043] workingset_activate 33
[ 2656.927380][T19043] workingset_nodereclaim 0
[ 2656.927380][T19043] pgrefill 85219
[ 2656.927380][T19043] pgscan 161217
[ 2656.927380][T19043] pgsteal 74725
[ 2657.022250][T19043] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11091,uid=0
[ 2657.037817][T19043] Memory cgroup out of memory: Killed process 11091 (syz-executor.1) total-vm:72848kB, anon-rss:172kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000
[ 2657.059076][T19043] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0
[ 2657.059117][ T1035] oom_reaper: reaped process 11091 (syz-executor.1), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB
[ 2657.070187][T19043] CPU: 0 PID: 19043 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2657.070193][T19043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2657.070196][T19043] Call Trace:
[ 2657.070219][T19043]  dump_stack+0x1fb/0x318
[ 2657.070235][T19043]  dump_header+0xd8/0x960
[ 2657.070248][T19043]  oom_kill_process+0xee/0x3a0
[ 2657.070259][T19043]  out_of_memory+0x5da/0x900
[ 2657.070276][T19043]  try_charge+0x1223/0x18d0
[ 2657.070308][T19043]  __memcg_kmem_charge_memcg+0x37/0xc0
[ 2657.070325][T19043]  kmem_getpages+0x449/0xa00
[ 2657.070338][T19043]  cache_grow_begin+0x7e/0x2c0
[ 2657.070347][T19043]  ? __cpuset_node_allowed+0x195/0x510
[ 2657.070360][T19043]  fallback_alloc+0x134/0x1c0
[ 2657.150286][T19043]  ____cache_alloc_node+0x22a/0x250
[ 2657.155503][T19043]  kmem_cache_alloc+0x163/0x2e0
[ 2657.160368][T19043]  ? dup_mm+0x29/0x340
[ 2657.164443][T19043]  dup_mm+0x29/0x340
[ 2657.168331][T19043]  copy_process+0x23d9/0x5c00
[ 2657.168364][T19043]  _do_fork+0x13e/0x660
[ 2657.168376][T19043]  ? check_preemption_disabled+0xb4/0x260
[ 2657.168384][T19043]  ? debug_smp_processor_id+0x9/0x20
[ 2657.168395][T19043]  ? debug_smp_processor_id+0x1c/0x20
[ 2657.168408][T19043]  __x64_sys_clone+0x20b/0x250
[ 2657.168434][T19043]  do_syscall_64+0xf7/0x1c0
[ 2657.202834][T19043]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2657.208752][T19043] RIP: 0033:0x45a679
[ 2657.212650][T19043] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2657.232257][T19043] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2657.240677][T19043] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2657.248656][T19043] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2657.248663][T19043] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2657.248668][T19043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2657.248673][T19043] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2657.248981][T19043] memory: usage 307064kB, limit 307200kB, failcnt 51597
[ 2657.287945][T19043] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2657.294787][T19043] Memory cgroup stats for /syz1:
[ 2657.294872][T19043] anon 259399680
[ 2657.294872][T19043] file 36864
[ 2657.294872][T19043] kernel_stack 7733248
[ 2657.294872][T19043] slab 15196160
[ 2657.294872][T19043] sock 0
[ 2657.294872][T19043] shmem 0
[ 2657.294872][T19043] file_mapped 0
[ 2657.294872][T19043] file_dirty 0
[ 2657.294872][T19043] file_writeback 0
[ 2657.294872][T19043] anon_thp 230686720
[ 2657.294872][T19043] inactive_anon 135168
[ 2657.294872][T19043] active_anon 259469312
[ 2657.294872][T19043] inactive_file 16384
[ 2657.294872][T19043] active_file 110592
[ 2657.294872][T19043] unevictable 0
[ 2657.294872][T19043] slab_reclaimable 3244032
[ 2657.294872][T19043] slab_unreclaimable 11952128
[ 2657.294872][T19043] pgfault 249876
[ 2657.294872][T19043] pgmajfault 0
[ 2657.294872][T19043] workingset_refault 132
[ 2657.294872][T19043] workingset_activate 33
[ 2657.294872][T19043] workingset_nodereclaim 0
[ 2657.294872][T19043] pgrefill 85219
[ 2657.294872][T19043] pgscan 161217
[ 2657.294872][T19043] pgsteal 74725
[ 2657.389645][T19043] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10840,uid=0
[ 2657.389743][T19043] Memory cgroup out of memory: Killed process 10840 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2657.432538][T19029] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 2657.444707][T19029] CPU: 0 PID: 19029 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2657.453046][T19029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2657.463100][T19029] Call Trace:
[ 2657.466394][T19029]  dump_stack+0x1fb/0x318
[ 2657.470738][T19029]  dump_header+0xd8/0x960
[ 2657.475066][T19029]  oom_kill_process+0xee/0x3a0
[ 2657.479837][T19029]  out_of_memory+0x5da/0x900
[ 2657.484448][T19029]  try_charge+0x1223/0x18d0
[ 2657.488981][T19029]  __memcg_kmem_charge+0x146/0x510
[ 2657.494093][T19029]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2657.499478][T19029]  copy_process+0x57e/0x5c00
[ 2657.504060][T19029]  ? __lock_acquire+0xc75/0x1be0
[ 2657.509066][T19029]  _do_fork+0x13e/0x660
[ 2657.513212][T19029]  ? rcu_lock_release+0x4/0x20
[ 2657.517966][T19029]  __x64_sys_clone+0x20b/0x250
[ 2657.522717][T19029]  do_syscall_64+0xf7/0x1c0
[ 2657.527268][T19029]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2657.533141][T19029] RIP: 0033:0x45d049
[ 2657.537013][T19029] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 2657.557275][T19029] RSP: 002b:00007fffe25b96d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 2657.565730][T19029] RAX: ffffffffffffffda RBX: 00007f4c176d1700 RCX: 000000000045d049
[ 2657.573707][T19029] RDX: 00007f4c176d19d0 RSI: 00007f4c176d0db0 RDI: 00000000003d0f00
[ 2657.581670][T19029] RBP: 00007fffe25b98f0 R08: 00007f4c176d1700 R09: 00007f4c176d1700
[ 2657.589644][T19029] R10: 00007f4c176d19d0 R11: 0000000000000202 R12: 0000000000000000
[ 2657.597611][T19029] R13: 00007fffe25b978f R14: 00007f4c176d19c0 R15: 000000000075c124
[ 2657.606887][T19029] memory: usage 307020kB, limit 307200kB, failcnt 51597
[ 2657.614281][T19029] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2657.621358][T19029] Memory cgroup stats for /syz1:
[ 2657.621429][T19029] anon 259399680
[ 2657.621429][T19029] file 36864
[ 2657.621429][T19029] kernel_stack 7733248
[ 2657.621429][T19029] slab 15196160
[ 2657.621429][T19029] sock 0
[ 2657.621429][T19029] shmem 0
[ 2657.621429][T19029] file_mapped 0
[ 2657.621429][T19029] file_dirty 0
[ 2657.621429][T19029] file_writeback 0
[ 2657.621429][T19029] anon_thp 230686720
[ 2657.621429][T19029] inactive_anon 135168
[ 2657.621429][T19029] active_anon 259469312
[ 2657.621429][T19029] inactive_file 16384
[ 2657.621429][T19029] active_file 110592
[ 2657.621429][T19029] unevictable 0
[ 2657.621429][T19029] slab_reclaimable 3244032
[ 2657.621429][T19029] slab_unreclaimable 11952128
[ 2657.621429][T19029] pgfault 249876
[ 2657.621429][T19029] pgmajfault 0
[ 2657.621429][T19029] workingset_refault 132
[ 2657.621429][T19029] workingset_activate 33
[ 2657.621429][T19029] workingset_nodereclaim 0
[ 2657.621429][T19029] pgrefill 85219
[ 2657.621429][T19029] pgscan 161217
[ 2657.621429][T19029] pgsteal 74725
[ 2657.716541][T19029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10827,uid=0
[ 2657.732191][T19029] Memory cgroup out of memory: Killed process 10827 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2657.750881][ T1035] oom_reaper: reaped process 10827 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
03:29:10 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:10 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000040)=""/16, 0x10}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0)
recvfrom$inet(r2, 0x0, 0x1008d, 0x0, 0x0, 0x800e00527)
shutdown(r1, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
flock(r4, 0x0)
recvfrom$inet(r2, 0x0, 0xfffffdc4, 0x2, 0x0, 0x800e0051e)
shutdown(r2, 0x0)

03:29:10 executing program 0:
poll(&(0x7f00000011c0)=[{}], 0x1, 0x4e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549)
poll(&(0x7f00000011c0)=[{}], 0x1, 0x0)
recvfrom$inet(r0, 0x0, 0x55c1, 0x2, 0x0, 0x800e00545)
shutdown(r0, 0x0)

03:29:10 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0)
poll(&(0x7f00000011c0)=[{r0}], 0x1, 0x4e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549)
poll(&(0x7f00000011c0)=[{}], 0x1, 0x4e)
recvfrom$inet(r1, 0x0, 0x55c1, 0x0, 0x0, 0x800e00545)
shutdown(r1, 0x0)

03:29:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:10 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x0)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:10 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2657.949271][T19370] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2657.964159][T19370] debugfs: File 'msg' in directory 'loop0' already present!
[ 2657.973503][T19370] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:10 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400", 0x6}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:10 executing program 4:
poll(0x0, 0x0, 0x800000000004c)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/154, 0x9a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0)
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r4, 0x0, 0x1de, 0x0, 0x0, 0x800e0050e)
shutdown(r3, 0x0)
r5 = socket$inet6_sctp(0x1c, 0x5, 0x84)
read(r5, &(0x7f0000000000)=""/135, 0x87)
shutdown(r4, 0x0)
shutdown(r1, 0x0)

03:29:10 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/39, 0x27}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r2, 0x0, 0x896e, 0x0, 0x0, 0x800e00519)
shutdown(r1, 0x0)
r3 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400001803c1, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0)
shutdown(r2, 0x0)

03:29:10 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x0)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:10 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:11 executing program 0:
poll(0x0, 0x0, 0x4e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549)
poll(0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x55c1, 0x2, 0x0, 0x800e00545)
shutdown(r0, 0x0)

03:29:11 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2658.220353][T19601] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2658.239226][T19601] debugfs: File 'msg' in directory 'loop0' already present!
[ 2658.269779][T19601] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:11 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:11 executing program 4:
poll(0x0, 0x0, 0x4e)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549)
poll(0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x55c1, 0x0, 0x0, 0x800e00545)
shutdown(r0, 0x0)

03:29:11 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x4e)
recvfrom$inet(r1, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e00516)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
poll(&(0x7f00000011c0)=[{r2}], 0x1, 0x4e)
shutdown(r1, 0x0)

03:29:11 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x0)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:11 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chroot(&(0x7f0000000080)='./file0\x00')
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000040)='./file0/../file1\x00', 0x2000, 0x0)

03:29:11 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:11 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0x12c)

[ 2658.819057][T19923] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2658.839454][T19923] debugfs: File 'msg' in directory 'loop0' already present!
03:29:11 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
mkdir(0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r4 = creat(0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f00000001c0)=0x1e)
write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)

03:29:11 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2658.863527][T19923] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:11 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
ptrace$peekuser(0x3, 0x0, 0x1)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000003c0), 0x160)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd)
ftruncate(r2, 0x80003)
sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd17ea0000000c00050000000000000000000c0005000c01000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet6(0xa, 0x2, 0x0)

03:29:11 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
ptrace$peekuser(0x3, 0x0, 0x1)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000003c0), 0x160)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd)
ftruncate(r2, 0x80003)
sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd17ea0000000c00050000000000000000000c0005000c01000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x7ffffff7)

03:29:11 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:11 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2659.040056][T20141] input: syz1 as /devices/virtual/input/input35
[ 2659.077376][T19924] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2659.116061][T20144] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2659.124721][T20144] debugfs: File 'msg' in directory 'loop0' already present!
[ 2659.162179][T19924] CPU: 0 PID: 19924 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2659.167965][T20144] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2659.170567][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2659.170573][T19924] Call Trace:
[ 2659.170596][T19924]  dump_stack+0x1fb/0x318
[ 2659.170613][T19924]  dump_header+0xd8/0x960
[ 2659.170628][T19924]  oom_kill_process+0xee/0x3a0
[ 2659.170645][T19924]  out_of_memory+0x5da/0x900
[ 2659.209522][T19924]  try_charge+0x1223/0x18d0
[ 2659.214071][T19924]  mem_cgroup_try_charge+0x20c/0x680
[ 2659.219359][T19924]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2659.224984][T19924]  wp_page_copy+0x349/0x1890
[ 2659.229562][T19924]  ? do_raw_spin_unlock+0x136/0x260
[ 2659.234756][T19924]  do_wp_page+0x5e5/0x1cc0
[ 2659.239151][T19924]  ? __kasan_check_write+0x14/0x20
[ 2659.244245][T19924]  handle_mm_fault+0x2ada/0x5ff0
[ 2659.249248][T19924]  do_user_addr_fault+0x589/0xaf0
[ 2659.254261][T19924]  __do_page_fault+0xd3/0x1f0
[ 2659.258917][T19924]  do_page_fault+0x99/0xb0
[ 2659.263313][T19924]  page_fault+0x39/0x40
[ 2659.267465][T19924] RIP: 0033:0x4418f9
[ 2659.271340][T19924] Code: b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e 89 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e <48> 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40
[ 2659.290934][T19924] RSP: 002b:00007fffe25b9808 EFLAGS: 00010202
[ 2659.297011][T19924] RAX: 0000000020000080 RBX: 000000000075c9a0 RCX: 0030656c69662f2e
[ 2659.304968][T19924] RDX: 0000000000000008 RSI: 00000000007609d0 RDI: 0000000020000080
[ 2659.312934][T19924] RBP: 00000000007609b0 R08: 0000000098926c7f R09: 0000000098926c83
[ 2659.320891][T19924] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c070
[ 2659.328842][T19924] R13: 00000000002892d4 R14: 00000000007609b8 R15: 000000000075c07c
[ 2659.350622][T19924] memory: usage 307200kB, limit 307200kB, failcnt 51642
[ 2659.358027][T19924] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2659.365180][T19924] Memory cgroup stats for /syz1:
[ 2659.365274][T19924] anon 259399680
[ 2659.365274][T19924] file 36864
[ 2659.365274][T19924] kernel_stack 7733248
[ 2659.365274][T19924] slab 15196160
[ 2659.365274][T19924] sock 0
[ 2659.365274][T19924] shmem 0
[ 2659.365274][T19924] file_mapped 0
[ 2659.365274][T19924] file_dirty 0
[ 2659.365274][T19924] file_writeback 0
[ 2659.365274][T19924] anon_thp 230686720
[ 2659.365274][T19924] inactive_anon 135168
[ 2659.365274][T19924] active_anon 259469312
[ 2659.365274][T19924] inactive_file 16384
[ 2659.365274][T19924] active_file 110592
[ 2659.365274][T19924] unevictable 0
[ 2659.365274][T19924] slab_reclaimable 3244032
[ 2659.365274][T19924] slab_unreclaimable 11952128
[ 2659.365274][T19924] pgfault 250074
[ 2659.365274][T19924] pgmajfault 0
[ 2659.365274][T19924] workingset_refault 132
[ 2659.365274][T19924] workingset_activate 33
[ 2659.365274][T19924] workingset_nodereclaim 0
[ 2659.365274][T19924] pgrefill 85516
[ 2659.365274][T19924] pgscan 161481
[ 2659.365274][T19924] pgsteal 74758
[ 2659.460606][T19924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10812,uid=0
[ 2659.480230][T19924] Memory cgroup out of memory: Killed process 10812 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:12 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:12 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
ptrace$peekuser(0x3, 0x0, 0x1)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000003c0), 0x160)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd)
ftruncate(r2, 0x80003)
sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd17ea0000000c00050000000000000000000c0005000c01000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet6(0xa, 0x2, 0x0)

03:29:12 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:12 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:12 executing program 0:
socket$key(0xf, 0x3, 0x2)
ptrace$peekuser(0x3, 0x0, 0x1)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000003c0), 0x160)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd)
ftruncate(r2, 0x80003)
sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd17ea0000000c00050000000000000000000c0005000c01000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x7ffffff7)

03:29:12 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:12 executing program 5:
socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
ptrace$peekuser(0x3, 0x0, 0x1)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000003c0), 0x160)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd)
ftruncate(r2, 0x80003)
sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd17ea0000000c00050000000000000000000c0005000c01000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x7ffffff7)

[ 2659.881835][T20357] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2659.913698][T20358] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2659.936255][T20357] debugfs: File 'msg' in directory 'loop0' already present!
[ 2659.967241][T20358] CPU: 0 PID: 20358 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2659.975614][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2659.985679][T20358] Call Trace:
[ 2659.989115][T20358]  dump_stack+0x1fb/0x318
[ 2659.993465][T20358]  dump_header+0xd8/0x960
[ 2659.997808][T20358]  oom_kill_process+0xee/0x3a0
[ 2660.002586][T20358]  out_of_memory+0x5da/0x900
[ 2660.007339][T20358]  try_charge+0x1223/0x18d0
[ 2660.011877][T20358]  mem_cgroup_try_charge+0x20c/0x680
[ 2660.017184][T20358]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2660.022823][T20358]  wp_page_copy+0x349/0x1890
[ 2660.027427][T20358]  ? do_raw_spin_unlock+0x136/0x260
[ 2660.032633][T20358]  do_wp_page+0x5e5/0x1cc0
[ 2660.037058][T20358]  ? __kasan_check_write+0x14/0x20
[ 2660.042262][T20358]  handle_mm_fault+0x2ada/0x5ff0
[ 2660.047229][T20358]  do_user_addr_fault+0x589/0xaf0
[ 2660.052275][T20358]  __do_page_fault+0xd3/0x1f0
[ 2660.056956][T20358]  do_page_fault+0x99/0xb0
[ 2660.061374][T20358]  page_fault+0x39/0x40
[ 2660.065543][T20358] RIP: 0033:0x40f6c8
[ 2660.069441][T20358] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 64 fe 4b 00 31 c0 e8 13 27 ff ff 31 ff e8 5c 23 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 2f 66 00
[ 2660.089058][T20358] RSP: 002b:00007fffe25b9740 EFLAGS: 00010246
[ 2660.095134][T20358] RAX: 00000000569eb2b4 RBX: 00000000e8da5323 RCX: 0000001b2e820000
[ 2660.103109][T20358] RDX: 0000000000000000 RSI: 00000000000012b4 RDI: ffffffff569eb2b4
[ 2660.111089][T20358] RBP: 0000000000000002 R08: 00000000569eb2b4 R09: 00000000569eb2b8
[ 2660.119059][T20358] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c0f8
[ 2660.127033][T20358] R13: 0000000080000000 R14: 00007f4c19335008 R15: 000000000000000d
03:29:13 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2660.138558][T20357] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:13 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
getrandom(&(0x7f0000000400)=""/173, 0xfffffffffffffd85, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0)

03:29:13 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2660.240801][T20358] memory: usage 307200kB, limit 307200kB, failcnt 51682
[ 2660.253881][T20358] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2660.261447][T20358] Memory cgroup stats for /syz1:
[ 2660.261529][T20358] anon 259399680
[ 2660.261529][T20358] file 36864
[ 2660.261529][T20358] kernel_stack 7667712
[ 2660.261529][T20358] slab 15196160
[ 2660.261529][T20358] sock 0
[ 2660.261529][T20358] shmem 0
[ 2660.261529][T20358] file_mapped 0
[ 2660.261529][T20358] file_dirty 0
[ 2660.261529][T20358] file_writeback 0
[ 2660.261529][T20358] anon_thp 230686720
[ 2660.261529][T20358] inactive_anon 135168
[ 2660.261529][T20358] active_anon 259469312
[ 2660.261529][T20358] inactive_file 16384
[ 2660.261529][T20358] active_file 110592
[ 2660.261529][T20358] unevictable 0
[ 2660.261529][T20358] slab_reclaimable 3244032
[ 2660.261529][T20358] slab_unreclaimable 11952128
[ 2660.261529][T20358] pgfault 250140
[ 2660.261529][T20358] pgmajfault 0
[ 2660.261529][T20358] workingset_refault 132
[ 2660.261529][T20358] workingset_activate 33
[ 2660.261529][T20358] workingset_nodereclaim 0
[ 2660.261529][T20358] pgrefill 85648
[ 2660.261529][T20358] pgscan 161613
[ 2660.261529][T20358] pgsteal 74758
03:29:13 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = getpgid(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0)
write$cgroup_pid(r3, &(0x7f0000000080), 0xfffffe38)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x660c, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
semop(0x0, 0x0, 0x0)

03:29:13 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2660.572591][T20691] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2660.602807][T20691] debugfs: File 'msg' in directory 'loop0' already present!
[ 2660.625388][T20691] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2660.738861][T20358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10782,uid=0
[ 2660.777385][T20358] Memory cgroup out of memory: Killed process 10782 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:13 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:13 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:13 executing program 0:
socket$key(0xf, 0x3, 0x2)
ptrace$peekuser(0x3, 0x0, 0x1)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(0x0, &(0x7f0000000100)='./file0\x00')
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000003c0), 0x160)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd)
ftruncate(r2, 0x80003)
sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd17ea0000000c00050000000000000000000c0005000c01000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x7ffffff7)

03:29:13 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = socket$inet6(0xa, 0x800000003, 0xff)
connect$inet6(r0, &(0x7f0000000000), 0x1c)
r1 = dup(r0)
r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x49, 0x0, {0x24, 0x3}}, 0x14)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00')
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
write$9p(r3, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000)
perf_event_open$cgroup(0x0, r3, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000d80)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
r4 = socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x20}, 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')

03:29:13 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32, @ANYPTR, @ANYRES64=r19, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:14 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2661.201572][T20764] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2661.250018][T20764] debugfs: File 'msg' in directory 'loop0' already present!
[ 2661.303993][T20905] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2661.316266][T20905] CPU: 1 PID: 20905 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2661.324605][T20905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2661.328934][T20764] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2661.334665][T20905] Call Trace:
[ 2661.334692][T20905]  dump_stack+0x1fb/0x318
[ 2661.334709][T20905]  dump_header+0xd8/0x960
[ 2661.334725][T20905]  oom_kill_process+0xee/0x3a0
[ 2661.358900][T20905]  out_of_memory+0x5da/0x900
[ 2661.363499][T20905]  try_charge+0x1223/0x18d0
[ 2661.368030][T20905]  __memcg_kmem_charge+0x146/0x510
[ 2661.373151][T20905]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2661.378536][T20905]  alloc_pages_current+0x2db/0x500
[ 2661.383650][T20905]  __pmd_alloc+0x39/0x3d0
[ 2661.387986][T20905]  copy_page_range+0x248c/0x2840
[ 2661.392931][T20905]  ? anon_vma_fork+0x4a5/0x540
[ 2661.397711][T20905]  ? vma_gap_callbacks_rotate+0x1ee/0x230
[ 2661.403447][T20905]  ? init_admin_reserve+0xc0/0xc0
[ 2661.408487][T20905]  dup_mmap+0xa01/0xe00
[ 2661.412661][T20905]  dup_mm+0x9e/0x340
[ 2661.416557][T20905]  copy_process+0x23d9/0x5c00
[ 2661.421259][T20905]  _do_fork+0x13e/0x660
[ 2661.425418][T20905]  ? check_preemption_disabled+0xb4/0x260
[ 2661.431135][T20905]  ? debug_smp_processor_id+0x9/0x20
[ 2661.436423][T20905]  ? debug_smp_processor_id+0x1c/0x20
[ 2661.441799][T20905]  __x64_sys_clone+0x20b/0x250
[ 2661.446568][T20905]  do_syscall_64+0xf7/0x1c0
[ 2661.451057][T20905]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2661.456927][T20905] RIP: 0033:0x45a679
[ 2661.460803][T20905] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2661.480384][T20905] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2661.488770][T20905] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2661.496734][T20905] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2661.504680][T20905] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2661.512628][T20905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2661.520580][T20905] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2661.528881][T20905] memory: usage 307200kB, limit 307200kB, failcnt 51711
[ 2661.535857][T20905] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2661.542702][T20905] Memory cgroup stats for /syz1:
[ 2661.542796][T20905] anon 259399680
[ 2661.542796][T20905] file 36864
03:29:14 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x3)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2661.542796][T20905] kernel_stack 7733248
[ 2661.542796][T20905] slab 15196160
[ 2661.542796][T20905] sock 0
[ 2661.542796][T20905] shmem 0
[ 2661.542796][T20905] file_mapped 0
[ 2661.542796][T20905] file_dirty 0
[ 2661.542796][T20905] file_writeback 0
[ 2661.542796][T20905] anon_thp 230686720
[ 2661.542796][T20905] inactive_anon 135168
[ 2661.542796][T20905] active_anon 259334144
[ 2661.542796][T20905] inactive_file 16384
[ 2661.542796][T20905] active_file 110592
[ 2661.542796][T20905] unevictable 0
[ 2661.542796][T20905] slab_reclaimable 3244032
[ 2661.542796][T20905] slab_unreclaimable 11952128
[ 2661.542796][T20905] pgfault 250239
[ 2661.542796][T20905] pgmajfault 0
[ 2661.542796][T20905] workingset_refault 132
[ 2661.542796][T20905] workingset_activate 33
[ 2661.542796][T20905] workingset_nodereclaim 0
[ 2661.542796][T20905] pgrefill 85780
[ 2661.542796][T20905] pgscan 161745
[ 2661.542796][T20905] pgsteal 74758
[ 2661.637711][T20905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10772,uid=0
03:29:14 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = getgid()
mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x1000000, &(0x7f00000004c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xa617026505e60ef9}}, {@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x8}}]}})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
getgid()

[ 2661.653258][T20905] Memory cgroup out of memory: Killed process 10772 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2661.674190][T20905] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2661.686094][T20905] CPU: 1 PID: 20905 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2661.694512][T20905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2661.704573][T20905] Call Trace:
[ 2661.707880][T20905]  dump_stack+0x1fb/0x318
[ 2661.712212][T20905]  dump_header+0xd8/0x960
[ 2661.716547][T20905]  oom_kill_process+0xee/0x3a0
[ 2661.721324][T20905]  out_of_memory+0x5da/0x900
[ 2661.725926][T20905]  try_charge+0x1223/0x18d0
[ 2661.726468][ T1035] oom_reaper: reaped process 10772 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
[ 2661.730444][T20905]  __memcg_kmem_charge+0x146/0x510
[ 2661.746532][T20905]  __alloc_pages_nodemask+0x29a/0x5d0
03:29:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1000000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x7ffffff7)
syz_open_procfs(0x0, 0x0)

[ 2661.751914][T20905]  alloc_pages_current+0x2db/0x500
[ 2661.757033][T20905]  __pmd_alloc+0x39/0x3d0
[ 2661.761370][T20905]  copy_page_range+0x248c/0x2840
[ 2661.766311][T20905]  ? anon_vma_fork+0x4a5/0x540
[ 2661.771094][T20905]  ? vma_gap_callbacks_rotate+0x1ee/0x230
[ 2661.776821][T20905]  ? init_admin_reserve+0xc0/0xc0
[ 2661.781852][T20905]  dup_mmap+0xa01/0xe00
[ 2661.786041][T20905]  dup_mm+0x9e/0x340
[ 2661.789935][T20905]  copy_process+0x23d9/0x5c00
[ 2661.794637][T20905]  _do_fork+0x13e/0x660
[ 2661.798797][T20905]  ? check_preemption_disabled+0xb4/0x260
[ 2661.804518][T20905]  ? debug_smp_processor_id+0x9/0x20
[ 2661.809809][T20905]  ? debug_smp_processor_id+0x1c/0x20
[ 2661.815190][T20905]  __x64_sys_clone+0x20b/0x250
[ 2661.819974][T20905]  do_syscall_64+0xf7/0x1c0
[ 2661.824481][T20905]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2661.830371][T20905] RIP: 0033:0x45a679
[ 2661.834261][T20905] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2661.853873][T20905] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2661.862301][T20905] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2661.870287][T20905] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2661.878267][T20905] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2661.886247][T20905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2661.894230][T20905] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2661.902623][T20905] memory: usage 306928kB, limit 307200kB, failcnt 51717
[ 2661.909660][T20905] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2661.916572][T20905] Memory cgroup stats for /syz1:
[ 2661.916659][T20905] anon 259399680
[ 2661.916659][T20905] file 36864
[ 2661.916659][T20905] kernel_stack 7733248
[ 2661.916659][T20905] slab 15196160
[ 2661.916659][T20905] sock 0
[ 2661.916659][T20905] shmem 0
[ 2661.916659][T20905] file_mapped 0
[ 2661.916659][T20905] file_dirty 0
[ 2661.916659][T20905] file_writeback 0
[ 2661.916659][T20905] anon_thp 230686720
03:29:14 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x3)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2661.916659][T20905] inactive_anon 135168
[ 2661.916659][T20905] active_anon 259334144
[ 2661.916659][T20905] inactive_file 16384
[ 2661.916659][T20905] active_file 110592
[ 2661.916659][T20905] unevictable 0
[ 2661.916659][T20905] slab_reclaimable 3244032
[ 2661.916659][T20905] slab_unreclaimable 11952128
[ 2661.916659][T20905] pgfault 250239
[ 2661.916659][T20905] pgmajfault 0
[ 2661.916659][T20905] workingset_refault 132
[ 2661.916659][T20905] workingset_activate 33
[ 2661.916659][T20905] workingset_nodereclaim 0
[ 2661.916659][T20905] pgrefill 85780
03:29:14 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
readv(r1, &(0x7f00000002c0), 0x3a9)

[ 2661.916659][T20905] pgscan 161745
[ 2661.916659][T20905] pgsteal 74758
[ 2662.011472][T20905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10764,uid=0
[ 2662.027024][T20905] Memory cgroup out of memory: Killed process 10764 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2662.047925][ T1035] oom_reaper: reaped process 10764 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
03:29:15 executing program 0:
socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f00000002c0)=@un=@abs={0x1}, 0x80, 0x0}, 0x0)

03:29:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:15 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32, @ANYPTR, @ANYRES64=r19, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:15 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x3)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:15 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39766021cbf8e95e, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x802, 0x88)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000002c0)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x80, 0x0}, 0x8000)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x0, 0x90b3, 0x0, 0x7f0b}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xe803}], 0x1}, 0x0)

03:29:15 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000031c0)={0xb, 0x0, 0x0, 0x40000003, 0x185}, 0x3c)

03:29:15 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2662.368091][T21226] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:15 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2662.414974][T21226] debugfs: File 'msg' in directory 'loop0' already present!
03:29:15 executing program 5:
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2662.472301][T21226] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:15 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39766021cbf8e95e, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x802, 0x88)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000002c0)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x80, 0x0}, 0x8000)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec={0x0, 0x90b3, 0x0, 0x7f0b}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280), 0xe803}], 0x1}, 0x0)

[ 2662.525708][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2662.540543][T21329] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:15 executing program 4:
rt_sigpending(0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x729d0213259a469e, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x0, [], 0x4}, {0x0, 0x0, 0x0, [], 0x8}]}})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x1000000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x7ffffff7)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e5080000273d26ce5e525601226e94e12c24405681e0ffffff00000000000000000000000000000000004000", "0ec806aa37c991831eb25895d52dc4092a46931c5c1959d6b4be05e571a62983"})
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"])
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000400)=0x1ff)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000440))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e6661740002040100", 0x10}], 0x0, 0x0)

03:29:15 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:15 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2662.641745][ T2513] blk_update_request: I/O error, dev loop11, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2662.659092][T21352] isofs_fill_super: bread failed, dev=loop11, iso_blknum=16, block=32
[ 2662.779215][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2662.792296][T21378] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:15 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32, @ANYPTR, @ANYRES64=r19, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:15 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:15 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:15 executing program 5:

03:29:15 executing program 4:

03:29:16 executing program 5:

03:29:16 executing program 4:

03:29:16 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:16 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2663.211752][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2663.214273][T21590] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2663.224434][T21594] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:16 executing program 4:

[ 2663.300080][T21590] debugfs: File 'msg' in directory 'loop0' already present!
[ 2663.364376][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2663.377092][T21607] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2663.386600][T21590] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2663.401441][T21610] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2663.413414][T21610] CPU: 1 PID: 21610 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2663.421736][T21610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2663.431803][T21610] Call Trace:
[ 2663.435091][T21610]  dump_stack+0x1fb/0x318
[ 2663.439403][T21610]  dump_header+0xd8/0x960
[ 2663.443715][T21610]  oom_kill_process+0xee/0x3a0
[ 2663.448461][T21610]  out_of_memory+0x5da/0x900
[ 2663.453038][T21610]  try_charge+0x1223/0x18d0
[ 2663.457541][T21610]  __memcg_kmem_charge+0x146/0x510
[ 2663.462634][T21610]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2663.467989][T21610]  alloc_pages_current+0x2db/0x500
[ 2663.473085][T21610]  pte_alloc_one+0x1f/0x180
[ 2663.477565][T21610]  __pte_alloc+0x20/0x2f0
[ 2663.481873][T21610]  copy_page_range+0x2315/0x2840
[ 2663.486803][T21610]  ? vma_gap_callbacks_rotate+0x1fc/0x230
[ 2663.492505][T21610]  ? __vma_link_rb+0x839/0x860
[ 2663.497251][T21610]  dup_mmap+0xa01/0xe00
[ 2663.501389][T21610]  dup_mm+0x9e/0x340
[ 2663.505261][T21610]  copy_process+0x23d9/0x5c00
[ 2663.509934][T21610]  _do_fork+0x13e/0x660
[ 2663.514067][T21610]  ? check_preemption_disabled+0xb4/0x260
[ 2663.519759][T21610]  ? debug_smp_processor_id+0x9/0x20
[ 2663.525018][T21610]  ? debug_smp_processor_id+0x1c/0x20
[ 2663.530372][T21610]  __x64_sys_clone+0x20b/0x250
[ 2663.535125][T21610]  do_syscall_64+0xf7/0x1c0
[ 2663.539610][T21610]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2663.545479][T21610] RIP: 0033:0x45a679
[ 2663.549350][T21610] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2663.568929][T21610] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2663.577317][T21610] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2663.585264][T21610] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2663.593224][T21610] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2663.601170][T21610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
03:29:16 executing program 5:

[ 2663.609119][T21610] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2663.617169][T21610] memory: usage 307200kB, limit 307200kB, failcnt 51766
[ 2663.624106][T21610] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2663.631044][T21610] Memory cgroup stats for /syz1:
[ 2663.631131][T21610] anon 259469312
[ 2663.631131][T21610] file 36864
[ 2663.631131][T21610] kernel_stack 7733248
[ 2663.631131][T21610] slab 15196160
[ 2663.631131][T21610] sock 0
[ 2663.631131][T21610] shmem 0
[ 2663.631131][T21610] file_mapped 0
[ 2663.631131][T21610] file_dirty 0
[ 2663.631131][T21610] file_writeback 0
[ 2663.631131][T21610] anon_thp 230686720
[ 2663.631131][T21610] inactive_anon 135168
[ 2663.631131][T21610] active_anon 259604480
[ 2663.631131][T21610] inactive_file 16384
[ 2663.631131][T21610] active_file 110592
[ 2663.631131][T21610] unevictable 0
[ 2663.631131][T21610] slab_reclaimable 3244032
[ 2663.631131][T21610] slab_unreclaimable 11952128
[ 2663.631131][T21610] pgfault 250437
[ 2663.631131][T21610] pgmajfault 0
[ 2663.631131][T21610] workingset_refault 132
[ 2663.631131][T21610] workingset_activate 33
[ 2663.631131][T21610] workingset_nodereclaim 0
[ 2663.631131][T21610] pgrefill 85846
[ 2663.631131][T21610] pgscan 161844
[ 2663.631131][T21610] pgsteal 74758
[ 2663.726373][T21610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10609,uid=0
[ 2663.726489][T21610] Memory cgroup out of memory: Killed process 10609 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2665.565828][T21610] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2665.577728][T21610] CPU: 1 PID: 21610 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2665.586056][T21610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2665.596116][T21610] Call Trace:
[ 2665.599411][T21610]  dump_stack+0x1fb/0x318
[ 2665.603747][T21610]  dump_header+0xd8/0x960
[ 2665.608087][T21610]  oom_kill_process+0xee/0x3a0
[ 2665.612856][T21610]  out_of_memory+0x5da/0x900
[ 2665.617461][T21610]  try_charge+0x1223/0x18d0
[ 2665.621992][T21610]  __memcg_kmem_charge+0x146/0x510
[ 2665.627112][T21610]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2665.632496][T21610]  alloc_pages_current+0x2db/0x500
[ 2665.637614][T21610]  pte_alloc_one+0x1f/0x180
[ 2665.642116][T21610]  __pte_alloc+0x20/0x2f0
[ 2665.646447][T21610]  copy_page_range+0x2315/0x2840
[ 2665.651406][T21610]  ? vma_gap_callbacks_rotate+0x1fc/0x230
[ 2665.657136][T21610]  ? __vma_link_rb+0x839/0x860
[ 2665.661912][T21610]  dup_mmap+0xa01/0xe00
[ 2665.666064][T21610]  dup_mm+0x9e/0x340
[ 2665.669937][T21610]  copy_process+0x23d9/0x5c00
[ 2665.674606][T21610]  _do_fork+0x13e/0x660
[ 2665.678756][T21610]  ? check_preemption_disabled+0xb4/0x260
[ 2665.684465][T21610]  ? debug_smp_processor_id+0x9/0x20
[ 2665.689729][T21610]  ? debug_smp_processor_id+0x1c/0x20
[ 2665.695171][T21610]  __x64_sys_clone+0x20b/0x250
[ 2665.699944][T21610]  do_syscall_64+0xf7/0x1c0
[ 2665.704442][T21610]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2665.710310][T21610] RIP: 0033:0x45a679
[ 2665.714181][T21610] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2665.733772][T21610] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2665.742172][T21610] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2665.752747][T21610] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2665.760748][T21610] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2665.768717][T21610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2665.776798][T21610] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2665.784880][T21610] memory: usage 306928kB, limit 307200kB, failcnt 59020
[ 2665.791864][T21610] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2665.798765][T21610] Memory cgroup stats for /syz1:
[ 2665.798861][T21610] anon 259469312
[ 2665.798861][T21610] file 36864
[ 2665.798861][T21610] kernel_stack 7733248
[ 2665.798861][T21610] slab 15196160
[ 2665.798861][T21610] sock 0
[ 2665.798861][T21610] shmem 0
[ 2665.798861][T21610] file_mapped 0
[ 2665.798861][T21610] file_dirty 0
[ 2665.798861][T21610] file_writeback 0
[ 2665.798861][T21610] anon_thp 230686720
[ 2665.798861][T21610] inactive_anon 135168
[ 2665.798861][T21610] active_anon 259469312
[ 2665.798861][T21610] inactive_file 16384
[ 2665.798861][T21610] active_file 110592
[ 2665.798861][T21610] unevictable 0
[ 2665.798861][T21610] slab_reclaimable 3244032
[ 2665.798861][T21610] slab_unreclaimable 11952128
[ 2665.798861][T21610] pgfault 250437
[ 2665.798861][T21610] pgmajfault 0
[ 2665.798861][T21610] workingset_refault 132
[ 2665.798861][T21610] workingset_activate 33
[ 2665.798861][T21610] workingset_nodereclaim 0
[ 2665.798861][T21610] pgrefill 85846
[ 2665.798861][T21610] pgscan 161844
[ 2665.798861][T21610] pgsteal 74758
[ 2665.893588][T21610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10590,uid=0
[ 2665.909105][T21610] Memory cgroup out of memory: Killed process 10590 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2665.927845][ T1035] oom_reaper: reaped process 10590 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
03:29:18 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:18 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:18 executing program 4:

03:29:18 executing program 5:

03:29:18 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:18 executing program 5:

03:29:18 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2666.131680][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2666.153321][T21626] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2666.165342][T21624] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:19 executing program 4:

03:29:19 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2666.177142][T21626] debugfs: File 'msg' in directory 'loop0' already present!
[ 2666.191089][T21626] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:19 executing program 4:

03:29:19 executing program 5:

03:29:19 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:19 executing program 4:

03:29:19 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:19 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:19 executing program 5:

[ 2666.357336][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2666.379070][T21642] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2666.460370][T21647] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2666.468231][T21647] debugfs: File 'msg' in directory 'loop0' already present!
[ 2666.475830][T21647] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:19 executing program 5:

03:29:19 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:19 executing program 4:

03:29:19 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:19 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2666.885986][  T671] tipc: TX() has been purged, node left!
03:29:19 executing program 4:

03:29:19 executing program 5:

03:29:19 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:19 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2666.949985][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2666.973588][T21657] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2667.029357][T21660] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2667.062119][T21660] debugfs: File 'msg' in directory 'loop0' already present!
03:29:19 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2667.080473][T21660] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2667.115193][T21672] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2667.127366][T21672] CPU: 0 PID: 21672 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2667.135701][T21672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2667.145795][T21672] Call Trace:
[ 2667.149101][T21672]  dump_stack+0x1fb/0x318
[ 2667.153643][T21672]  dump_header+0xd8/0x960
[ 2667.157995][T21672]  oom_kill_process+0xee/0x3a0
[ 2667.162774][T21672]  out_of_memory+0x5da/0x900
[ 2667.167378][T21672]  try_charge+0x1223/0x18d0
[ 2667.171916][T21672]  __memcg_kmem_charge+0x146/0x510
03:29:19 executing program 4:

[ 2667.177035][T21672]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2667.182416][T21672]  alloc_pages_current+0x2db/0x500
[ 2667.187534][T21672]  pte_alloc_one+0x1f/0x180
[ 2667.192057][T21672]  __pte_alloc+0x20/0x2f0
[ 2667.196393][T21672]  copy_page_range+0x2315/0x2840
[ 2667.201347][T21672]  ? vma_gap_callbacks_rotate+0x1fc/0x230
[ 2667.207083][T21672]  ? __vma_link_rb+0x839/0x860
[ 2667.211850][T21672]  dup_mmap+0xa01/0xe00
[ 2667.216021][T21672]  dup_mm+0x9e/0x340
[ 2667.219911][T21672]  copy_process+0x23d9/0x5c00
[ 2667.224585][T21672]  _do_fork+0x13e/0x660
[ 2667.228722][T21672]  ? check_preemption_disabled+0xb4/0x260
[ 2667.234436][T21672]  ? debug_smp_processor_id+0x9/0x20
[ 2667.239810][T21672]  ? debug_smp_processor_id+0x1c/0x20
[ 2667.245169][T21672]  __x64_sys_clone+0x20b/0x250
[ 2667.249929][T21672]  do_syscall_64+0xf7/0x1c0
[ 2667.254415][T21672]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2667.260312][T21672] RIP: 0033:0x45a679
[ 2667.264185][T21672] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2667.283767][T21672] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2667.292153][T21672] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2667.300100][T21672] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2667.308050][T21672] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2667.315998][T21672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2667.323946][T21672] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2667.332453][T21672] memory: usage 307200kB, limit 307200kB, failcnt 59052
[ 2667.339466][T21672] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2667.346400][T21672] Memory cgroup stats for /syz1:
[ 2667.346495][T21672] anon 259584000
[ 2667.346495][T21672] file 36864
[ 2667.346495][T21672] kernel_stack 7733248
[ 2667.346495][T21672] slab 15196160
[ 2667.346495][T21672] sock 0
[ 2667.346495][T21672] shmem 0
[ 2667.346495][T21672] file_mapped 0
[ 2667.346495][T21672] file_dirty 0
[ 2667.346495][T21672] file_writeback 0
[ 2667.346495][T21672] anon_thp 230686720
[ 2667.346495][T21672] inactive_anon 135168
[ 2667.346495][T21672] active_anon 259469312
[ 2667.346495][T21672] inactive_file 16384
[ 2667.346495][T21672] active_file 110592
[ 2667.346495][T21672] unevictable 0
[ 2667.346495][T21672] slab_reclaimable 3244032
[ 2667.346495][T21672] slab_unreclaimable 11952128
[ 2667.346495][T21672] pgfault 250635
[ 2667.346495][T21672] pgmajfault 0
[ 2667.346495][T21672] workingset_refault 132
[ 2667.346495][T21672] workingset_activate 33
[ 2667.346495][T21672] workingset_nodereclaim 0
[ 2667.346495][T21672] pgrefill 85846
[ 2667.346495][T21672] pgscan 161844
[ 2667.346495][T21672] pgsteal 74758
[ 2667.441472][T21672] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14128,uid=0
[ 2667.457100][T21672] Memory cgroup out of memory: Killed process 14128 (syz-executor.1) total-vm:72716kB, anon-rss:168kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2667.511911][ T1035] oom_reaper: reaped process 14128 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 2667.527560][T21653] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2667.564376][T21653] CPU: 0 PID: 21653 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2667.572910][T21653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2667.582964][T21653] Call Trace:
[ 2667.586251][T21653]  dump_stack+0x1fb/0x318
[ 2667.590564][T21653]  dump_header+0xd8/0x960
[ 2667.594872][T21653]  oom_kill_process+0xee/0x3a0
[ 2667.599612][T21653]  out_of_memory+0x5da/0x900
[ 2667.604183][T21653]  try_charge+0x1223/0x18d0
[ 2667.608731][T21653]  mem_cgroup_try_charge+0x20c/0x680
[ 2667.614000][T21653]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2667.619611][T21653]  wp_page_copy+0x349/0x1890
[ 2667.624183][T21653]  ? do_raw_spin_unlock+0x136/0x260
[ 2667.629503][T21653]  do_wp_page+0x5e5/0x1cc0
[ 2667.633905][T21653]  ? __kasan_check_write+0x14/0x20
[ 2667.639001][T21653]  handle_mm_fault+0x2ada/0x5ff0
[ 2667.643935][T21653]  do_user_addr_fault+0x589/0xaf0
[ 2667.648960][T21653]  __do_page_fault+0xd3/0x1f0
[ 2667.653686][T21653]  do_page_fault+0x99/0xb0
[ 2667.658096][T21653]  page_fault+0x39/0x40
[ 2667.662232][T21653] RIP: 0033:0x40f6c8
[ 2667.666105][T21653] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 64 fe 4b 00 31 c0 e8 13 27 ff ff 31 ff e8 5c 23 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 2f 66 00
[ 2667.685698][T21653] RSP: 002b:00007fffe25b9740 EFLAGS: 00010246
[ 2667.691754][T21653] RAX: 00000000569eb2b4 RBX: 00000000e8da5323 RCX: 0000001b2e820000
[ 2667.699707][T21653] RDX: 0000000000000000 RSI: 00000000000012b4 RDI: ffffffff569eb2b4
[ 2667.707661][T21653] RBP: 0000000000000002 R08: 00000000569eb2b4 R09: 00000000569eb2b8
[ 2667.715612][T21653] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c0f8
[ 2667.723566][T21653] R13: 0000000080000000 R14: 00007f4c19335008 R15: 000000000000000d
[ 2667.732197][T21653] memory: usage 307036kB, limit 307200kB, failcnt 59240
[ 2667.739445][T21653] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2667.746434][T21653] Memory cgroup stats for /syz1:
[ 2667.746513][T21653] anon 259448832
[ 2667.746513][T21653] file 36864
[ 2667.746513][T21653] kernel_stack 7733248
[ 2667.746513][T21653] slab 15196160
[ 2667.746513][T21653] sock 0
[ 2667.746513][T21653] shmem 0
[ 2667.746513][T21653] file_mapped 0
[ 2667.746513][T21653] file_dirty 0
[ 2667.746513][T21653] file_writeback 0
[ 2667.746513][T21653] anon_thp 230686720
[ 2667.746513][T21653] inactive_anon 135168
[ 2667.746513][T21653] active_anon 259469312
[ 2667.746513][T21653] inactive_file 16384
[ 2667.746513][T21653] active_file 110592
[ 2667.746513][T21653] unevictable 0
[ 2667.746513][T21653] slab_reclaimable 3244032
[ 2667.746513][T21653] slab_unreclaimable 11952128
[ 2667.746513][T21653] pgfault 250635
[ 2667.746513][T21653] pgmajfault 0
[ 2667.746513][T21653] workingset_refault 132
[ 2667.746513][T21653] workingset_activate 33
[ 2667.746513][T21653] workingset_nodereclaim 0
[ 2667.746513][T21653] pgrefill 85846
[ 2667.746513][T21653] pgscan 161844
[ 2667.746513][T21653] pgsteal 74758
[ 2667.841190][T21653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10741,uid=0
[ 2667.856855][T21653] Memory cgroup out of memory: Killed process 10741 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2667.879046][ T1035] oom_reaper: reaped process 10741 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB
03:29:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:20 executing program 5:

03:29:20 executing program 4:

03:29:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:20 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:20 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:20 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:20 executing program 4:

03:29:20 executing program 5:

03:29:20 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2668.082921][T21689] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2668.118051][T21689] debugfs: File 'msg' in directory 'loop0' already present!
[ 2668.125605][T21689] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:21 executing program 4:

03:29:21 executing program 5:

[ 2668.175479][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2668.195551][T21695] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:21 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:21 executing program 4:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup2(r0, 0xffffffffffffff9c)
lseek(r1, 0x0, 0x0)

03:29:21 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:21 executing program 5:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup2(r0, 0xffffffffffffff9c)
dup3(r1, 0xffffffffffffff9c, 0x100)

03:29:21 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2668.981511][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2668.995666][T21720] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:21 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:21 executing program 4:
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x4)

[ 2669.103459][T21723] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2669.135114][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2669.136609][T21723] debugfs: File 'msg' in directory 'loop0' already present!
03:29:22 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:22 executing program 5:
open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x18)

03:29:22 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2669.147631][T21929] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2669.228190][T21937] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 2669.240173][T21937] CPU: 1 PID: 21937 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2669.248500][T21937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2669.256587][T21723] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2669.258549][T21937] Call Trace:
[ 2669.258572][T21937]  dump_stack+0x1fb/0x318
[ 2669.258594][T21937]  dump_header+0xd8/0x960
[ 2669.278030][T21937]  oom_kill_process+0xee/0x3a0
[ 2669.282773][T21937]  out_of_memory+0x5da/0x900
[ 2669.287345][T21937]  try_charge+0x1223/0x18d0
[ 2669.291848][T21937]  __memcg_kmem_charge+0x146/0x510
[ 2669.296955][T21937]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2669.302310][T21937]  copy_process+0x57e/0x5c00
[ 2669.306886][T21937]  ? __might_fault+0xf9/0x160
[ 2669.311548][T21937]  _do_fork+0x13e/0x660
[ 2669.315680][T21937]  ? check_preemption_disabled+0xb4/0x260
[ 2669.321372][T21937]  ? debug_smp_processor_id+0x9/0x20
[ 2669.326633][T21937]  ? debug_smp_processor_id+0x1c/0x20
[ 2669.331986][T21937]  __x64_sys_clone+0x20b/0x250
[ 2669.336743][T21937]  do_syscall_64+0xf7/0x1c0
[ 2669.341233][T21937]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2669.347105][T21937] RIP: 0033:0x45a679
[ 2669.350998][T21937] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2669.370580][T21937] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2669.378971][T21937] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2669.386917][T21937] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2669.394875][T21937] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2669.402823][T21937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2669.410782][T21937] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2669.419831][T21937] memory: usage 307188kB, limit 307200kB, failcnt 59279
[ 2669.426840][T21937] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2669.433685][T21937] Memory cgroup stats for /syz1:
[ 2669.433762][T21937] anon 259719168
[ 2669.433762][T21937] file 36864
[ 2669.433762][T21937] kernel_stack 7667712
[ 2669.433762][T21937] slab 15196160
[ 2669.433762][T21937] sock 0
[ 2669.433762][T21937] shmem 0
[ 2669.433762][T21937] file_mapped 0
[ 2669.433762][T21937] file_dirty 0
[ 2669.433762][T21937] file_writeback 0
[ 2669.433762][T21937] anon_thp 230686720
[ 2669.433762][T21937] inactive_anon 135168
[ 2669.433762][T21937] active_anon 259604480
[ 2669.433762][T21937] inactive_file 16384
[ 2669.433762][T21937] active_file 110592
[ 2669.433762][T21937] unevictable 0
[ 2669.433762][T21937] slab_reclaimable 3244032
[ 2669.433762][T21937] slab_unreclaimable 11952128
[ 2669.433762][T21937] pgfault 250800
[ 2669.433762][T21937] pgmajfault 0
[ 2669.433762][T21937] workingset_refault 132
[ 2669.433762][T21937] workingset_activate 33
[ 2669.433762][T21937] workingset_nodereclaim 0
[ 2669.433762][T21937] pgrefill 85978
[ 2669.433762][T21937] pgscan 161943
[ 2669.433762][T21937] pgsteal 74758
[ 2669.496825][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2669.528481][T21937] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10725,uid=0
[ 2669.528576][T21937] Memory cgroup out of memory: Killed process 10725 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2669.576298][T21937] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 2669.579276][T21943] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2669.588197][T21937] CPU: 1 PID: 21937 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2669.588205][T21937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2669.588209][T21937] Call Trace:
[ 2669.588239][T21937]  dump_stack+0x1fb/0x318
[ 2669.588256][T21937]  dump_header+0xd8/0x960
[ 2669.588268][T21937]  oom_kill_process+0xee/0x3a0
[ 2669.588279][T21937]  out_of_memory+0x5da/0x900
[ 2669.588295][T21937]  try_charge+0x1223/0x18d0
[ 2669.588330][T21937]  __memcg_kmem_charge+0x146/0x510
[ 2669.597105][ T1035] oom_reaper: reaped process 10725 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB
[ 2669.604736][T21937]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2669.661939][T21937]  copy_process+0x57e/0x5c00
[ 2669.666522][T21937]  ? __might_fault+0xf9/0x160
[ 2669.671184][T21937]  _do_fork+0x13e/0x660
[ 2669.675321][T21937]  ? check_preemption_disabled+0xb4/0x260
[ 2669.681014][T21937]  ? debug_smp_processor_id+0x9/0x20
[ 2669.686280][T21937]  ? debug_smp_processor_id+0x1c/0x20
[ 2669.691634][T21937]  __x64_sys_clone+0x20b/0x250
[ 2669.696393][T21937]  do_syscall_64+0xf7/0x1c0
[ 2669.700882][T21937]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2669.706755][T21937] RIP: 0033:0x45a679
[ 2669.710640][T21937] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2669.730225][T21937] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2669.738722][T21937] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2669.746673][T21937] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2669.754715][T21937] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2669.762665][T21937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2669.770638][T21937] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2669.778714][T21937] memory: usage 307088kB, limit 307200kB, failcnt 59295
[ 2669.785665][T21937] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2669.792556][T21937] Memory cgroup stats for /syz1:
[ 2669.792629][T21937] anon 259584000
[ 2669.792629][T21937] file 36864
[ 2669.792629][T21937] kernel_stack 7667712
[ 2669.792629][T21937] slab 15196160
[ 2669.792629][T21937] sock 0
[ 2669.792629][T21937] shmem 0
[ 2669.792629][T21937] file_mapped 0
[ 2669.792629][T21937] file_dirty 0
[ 2669.792629][T21937] file_writeback 0
[ 2669.792629][T21937] anon_thp 230686720
[ 2669.792629][T21937] inactive_anon 135168
[ 2669.792629][T21937] active_anon 259469312
[ 2669.792629][T21937] inactive_file 16384
[ 2669.792629][T21937] active_file 110592
[ 2669.792629][T21937] unevictable 0
[ 2669.792629][T21937] slab_reclaimable 3244032
[ 2669.792629][T21937] slab_unreclaimable 11952128
[ 2669.792629][T21937] pgfault 250833
[ 2669.792629][T21937] pgmajfault 0
[ 2669.792629][T21937] workingset_refault 132
[ 2669.792629][T21937] workingset_activate 33
[ 2669.792629][T21937] workingset_nodereclaim 0
[ 2669.792629][T21937] pgrefill 86077
[ 2669.792629][T21937] pgscan 162042
[ 2669.792629][T21937] pgsteal 74758
[ 2669.887361][T21937] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10716,uid=0
[ 2669.902883][T21937] Memory cgroup out of memory: Killed process 10716 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2669.921477][ T1035] oom_reaper: reaped process 10716 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB
[ 2669.948240][T21717] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[ 2669.978983][T21717] CPU: 0 PID: 21717 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2669.987345][T21717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2669.997396][T21717] Call Trace:
[ 2670.000686][T21717]  dump_stack+0x1fb/0x318
[ 2670.005078][T21717]  dump_header+0xd8/0x960
[ 2670.009410][T21717]  oom_kill_process+0xee/0x3a0
[ 2670.014165][T21717]  out_of_memory+0x5da/0x900
[ 2670.018756][T21717]  try_charge+0x1223/0x18d0
[ 2670.023358][T21717]  __memcg_kmem_charge+0x146/0x510
[ 2670.028454][T21717]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2670.033852][T21717]  copy_process+0x57e/0x5c00
[ 2670.038430][T21717]  ? __lock_acquire+0xc75/0x1be0
[ 2670.043447][T21717]  _do_fork+0x13e/0x660
[ 2670.047585][T21717]  ? debug_smp_processor_id+0x9/0x20
[ 2670.052854][T21717]  __x64_sys_clone+0x20b/0x250
[ 2670.057617][T21717]  do_syscall_64+0xf7/0x1c0
[ 2670.062106][T21717]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2670.068038][T21717] RIP: 0033:0x45d049
[ 2670.071911][T21717] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[ 2670.091510][T21717] RSP: 002b:00007fffe25b96d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 2670.099930][T21717] RAX: ffffffffffffffda RBX: 00007f4c176d1700 RCX: 000000000045d049
[ 2670.107888][T21717] RDX: 00007f4c176d19d0 RSI: 00007f4c176d0db0 RDI: 00000000003d0f00
[ 2670.115933][T21717] RBP: 00007fffe25b98f0 R08: 00007f4c176d1700 R09: 00007f4c176d1700
[ 2670.123887][T21717] R10: 00007f4c176d19d0 R11: 0000000000000202 R12: 0000000000000000
[ 2670.132071][T21717] R13: 00007fffe25b978f R14: 00007f4c176d19c0 R15: 000000000075c124
[ 2670.141987][T21717] memory: usage 306816kB, limit 307200kB, failcnt 59296
[ 2670.149113][T21717] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2670.165872][T21717] Memory cgroup stats for /syz1:
[ 2670.166058][T21717] anon 259440640
[ 2670.166058][T21717] file 36864
[ 2670.166058][T21717] kernel_stack 7733248
[ 2670.166058][T21717] slab 15196160
[ 2670.166058][T21717] sock 0
[ 2670.166058][T21717] shmem 0
[ 2670.166058][T21717] file_mapped 0
[ 2670.166058][T21717] file_dirty 0
[ 2670.166058][T21717] file_writeback 0
[ 2670.166058][T21717] anon_thp 230686720
[ 2670.166058][T21717] inactive_anon 135168
[ 2670.166058][T21717] active_anon 259469312
[ 2670.166058][T21717] inactive_file 16384
[ 2670.166058][T21717] active_file 110592
[ 2670.166058][T21717] unevictable 0
[ 2670.166058][T21717] slab_reclaimable 3244032
[ 2670.166058][T21717] slab_unreclaimable 11952128
[ 2670.166058][T21717] pgfault 250833
[ 2670.166058][T21717] pgmajfault 0
[ 2670.166058][T21717] workingset_refault 132
[ 2670.166058][T21717] workingset_activate 33
[ 2670.166058][T21717] workingset_nodereclaim 0
[ 2670.166058][T21717] pgrefill 86077
[ 2670.166058][T21717] pgscan 162042
[ 2670.166058][T21717] pgsteal 74791
[ 2670.260959][T21717] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10602,uid=0
[ 2670.276525][T21717] Memory cgroup out of memory: Killed process 10602 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2670.297854][ T1035] oom_reaper: reaped process 10602 (syz-executor.1), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB
03:29:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:23 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r1 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8943, &(0x7f0000000080)={'batadv0\x00', 0x1})

03:29:23 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:23 executing program 4:
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="dfd2cd80"], 0x4}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e2c21f9b61f2833f7cebad02000014cf2e1c9d4984680d20858337f825600b1880b4ce234b5efe30f744e96f14e1bf5122f9e905006742df0000000100000001c155cc460593e3bf00cce8fd907f03788af042c7d22f148d476dbed492b0603b9479e5fa45551a0000500000009b29b9a550bb4384130e703a0000000000003267446f90ab19765d321eb0fdd9425a75da711f454d18013e30a7ffa4d1ad00253d54b2eaab85dd16f7dc52deddaf97c5cb76910000000000000000"], 0x0, 0xbb}, 0x20)
tkill(r0, 0x3b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

03:29:23 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:23 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, r19)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r18, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2670.469606][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2670.485180][T21954] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:23 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0xff0b, 0x0, 0x0, 0x800e003e1)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/14, 0xe}], 0x1)
shutdown(r0, 0x0)

03:29:23 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

[ 2670.511174][T21953] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2670.520600][T21953] debugfs: File 'msg' in directory 'loop0' already present!
[ 2670.545588][T21953] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:23 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2670.610196][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2670.621432][T22024] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:23 executing program 5:
socket$inet6(0xa, 0x80003, 0x6b)

03:29:23 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2670.774084][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2670.782707][T22113] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2670.787454][T22104] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2670.868357][T22113] debugfs: File 'msg' in directory 'loop0' already present!
[ 2670.882691][T22113] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:24 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:24 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)

03:29:24 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:24 executing program 5:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
pipe(0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x75)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r2}]]}}}]}, 0x38}}, 0x0)
socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)

03:29:24 executing program 4:
clone(0x400000eca5dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

03:29:24 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:24 executing program 2:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r1)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:29:24 executing program 2:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r1)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

03:29:24 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\r\xc2\x00\t\x00\x00\x00\x80\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2}, 0x30)

[ 2671.461763][T22194] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2671.463555][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2671.486213][T22193] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:24 executing program 0:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:24 executing program 2:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r1)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0)

[ 2671.553004][T22194] debugfs: File 'msg' in directory 'loop0' already present!
[ 2671.613676][T22196] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2671.629769][T22194] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2671.669412][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2671.680910][T22308] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2671.689808][T22196] CPU: 1 PID: 22196 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2671.698148][T22196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2671.708199][T22196] Call Trace:
[ 2671.711483][T22196]  dump_stack+0x1fb/0x318
[ 2671.715807][T22196]  dump_header+0xd8/0x960
[ 2671.720120][T22196]  oom_kill_process+0xee/0x3a0
[ 2671.724862][T22196]  out_of_memory+0x5da/0x900
[ 2671.729435][T22196]  try_charge+0x1223/0x18d0
[ 2671.733931][T22196]  mem_cgroup_try_charge+0x20c/0x680
[ 2671.739194][T22196]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2671.744802][T22196]  wp_page_copy+0x349/0x1890
[ 2671.749376][T22196]  ? do_raw_spin_unlock+0x136/0x260
[ 2671.754551][T22196]  do_wp_page+0x5e5/0x1cc0
[ 2671.758946][T22196]  ? __kasan_check_write+0x14/0x20
[ 2671.764040][T22196]  handle_mm_fault+0x2ada/0x5ff0
[ 2671.768969][T22196]  do_user_addr_fault+0x589/0xaf0
[ 2671.773987][T22196]  __do_page_fault+0xd3/0x1f0
[ 2671.778643][T22196]  do_page_fault+0x99/0xb0
[ 2671.783036][T22196]  page_fault+0x39/0x40
[ 2671.787167][T22196] RIP: 0033:0x40f6c8
[ 2671.791039][T22196] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 64 fe 4b 00 31 c0 e8 13 27 ff ff 31 ff e8 5c 23 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 2f 66 00
[ 2671.810621][T22196] RSP: 002b:00007fffe25b9740 EFLAGS: 00010246
03:29:24 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

[ 2671.816661][T22196] RAX: 00000000569eb2b4 RBX: 00000000e8da5323 RCX: 0000001b2e820000
[ 2671.824611][T22196] RDX: 0000000000000000 RSI: 00000000000012b4 RDI: ffffffff569eb2b4
[ 2671.832559][T22196] RBP: 0000000000000002 R08: 00000000569eb2b4 R09: 00000000569eb2b8
[ 2671.840515][T22196] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c0f8
[ 2671.848470][T22196] R13: 0000000080000000 R14: 00007f4c19335008 R15: 000000000000000d
[ 2671.948676][T22196] memory: usage 307200kB, limit 307200kB, failcnt 59338
[ 2671.963801][T22196] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2671.982848][T22196] Memory cgroup stats for /syz1:
[ 2671.983096][T22196] anon 259575808
[ 2671.983096][T22196] file 36864
[ 2671.983096][T22196] kernel_stack 7667712
[ 2671.983096][T22196] slab 15196160
[ 2671.983096][T22196] sock 0
[ 2671.983096][T22196] shmem 0
[ 2671.983096][T22196] file_mapped 0
[ 2671.983096][T22196] file_dirty 0
[ 2671.983096][T22196] file_writeback 0
[ 2671.983096][T22196] anon_thp 230686720
[ 2671.983096][T22196] inactive_anon 135168
[ 2671.983096][T22196] active_anon 259469312
[ 2671.983096][T22196] inactive_file 16384
[ 2671.983096][T22196] active_file 110592
[ 2671.983096][T22196] unevictable 0
[ 2671.983096][T22196] slab_reclaimable 3244032
[ 2671.983096][T22196] slab_unreclaimable 11952128
[ 2671.983096][T22196] pgfault 251031
[ 2671.983096][T22196] pgmajfault 0
[ 2671.983096][T22196] workingset_refault 165
[ 2671.983096][T22196] workingset_activate 33
[ 2671.983096][T22196] workingset_nodereclaim 0
[ 2671.983096][T22196] pgrefill 86308
[ 2671.983096][T22196] pgscan 162240
[ 2671.983096][T22196] pgsteal 74791
[ 2672.080462][T22196] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15792,uid=0
[ 2672.097721][T22196] Memory cgroup out of memory: Killed process 15792 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:25 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:25 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:25 executing program 5:

03:29:25 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

03:29:25 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:25 executing program 4:

03:29:25 executing program 4:

03:29:25 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2672.333698][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2672.344935][T22427] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:25 executing program 4:

03:29:25 executing program 5:

03:29:25 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)

[ 2672.408331][T22433] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2672.446017][T22433] debugfs: File 'msg' in directory 'loop0' already present!
03:29:25 executing program 5:

[ 2672.459733][T22433] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2672.472266][T22438] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2672.514386][T22432] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2672.552842][T22432] CPU: 0 PID: 22432 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2672.561203][T22432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2672.571263][T22432] Call Trace:
[ 2672.574569][T22432]  dump_stack+0x1fb/0x318
[ 2672.578914][T22432]  dump_header+0xd8/0x960
[ 2672.583250][T22432]  oom_kill_process+0xee/0x3a0
[ 2672.588012][T22432]  out_of_memory+0x5da/0x900
[ 2672.592593][T22432]  try_charge+0x1223/0x18d0
[ 2672.597129][T22432]  mem_cgroup_try_charge+0x20c/0x680
[ 2672.602420][T22432]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2672.608061][T22432]  wp_page_copy+0x349/0x1890
[ 2672.612658][T22432]  ? do_raw_spin_unlock+0x136/0x260
[ 2672.617844][T22432]  do_wp_page+0x5e5/0x1cc0
[ 2672.622244][T22432]  ? __kasan_check_write+0x14/0x20
[ 2672.627340][T22432]  handle_mm_fault+0x2ada/0x5ff0
[ 2672.632271][T22432]  do_user_addr_fault+0x589/0xaf0
[ 2672.637281][T22432]  __do_page_fault+0xd3/0x1f0
[ 2672.641936][T22432]  do_page_fault+0x99/0xb0
[ 2672.646332][T22432]  page_fault+0x39/0x40
[ 2672.650474][T22432] RIP: 0033:0x40f6c8
[ 2672.654348][T22432] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 64 fe 4b 00 31 c0 e8 13 27 ff ff 31 ff e8 5c 23 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 2f 66 00
[ 2672.673944][T22432] RSP: 002b:00007fffe25b9740 EFLAGS: 00010246
[ 2672.680002][T22432] RAX: 00000000e2e30ac7 RBX: 00000000775da242 RCX: 0000001b2e820000
[ 2672.687968][T22432] RDX: 0000000000000000 RSI: 0000000000000ac7 RDI: ffffffffe2e30ac7
[ 2672.695920][T22432] RBP: 0000000000000000 R08: 00000000e2e30ac7 R09: 00000000e2e30acb
[ 2672.703868][T22432] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c0f8
[ 2672.711818][T22432] R13: 0000000080000000 R14: 00007f4c19335008 R15: 000000000000000b
[ 2672.720118][T22432] memory: usage 307200kB, limit 307200kB, failcnt 59375
[ 2672.727133][T22432] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2672.745874][T22432] Memory cgroup stats for /syz1:
[ 2672.745952][T22432] anon 259575808
[ 2672.745952][T22432] file 36864
[ 2672.745952][T22432] kernel_stack 7667712
[ 2672.745952][T22432] slab 15196160
[ 2672.745952][T22432] sock 0
[ 2672.745952][T22432] shmem 0
[ 2672.745952][T22432] file_mapped 0
[ 2672.745952][T22432] file_dirty 0
[ 2672.745952][T22432] file_writeback 0
[ 2672.745952][T22432] anon_thp 230686720
[ 2672.745952][T22432] inactive_anon 135168
[ 2672.745952][T22432] active_anon 259469312
[ 2672.745952][T22432] inactive_file 16384
[ 2672.745952][T22432] active_file 110592
[ 2672.745952][T22432] unevictable 0
[ 2672.745952][T22432] slab_reclaimable 3244032
[ 2672.745952][T22432] slab_unreclaimable 11952128
[ 2672.745952][T22432] pgfault 251097
[ 2672.745952][T22432] pgmajfault 0
[ 2672.745952][T22432] workingset_refault 165
[ 2672.745952][T22432] workingset_activate 33
[ 2672.745952][T22432] workingset_nodereclaim 0
[ 2672.745952][T22432] pgrefill 86308
[ 2672.745952][T22432] pgscan 162273
[ 2672.745952][T22432] pgsteal 74791
[ 2672.840735][T22432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15779,uid=0
[ 2672.856369][T22432] Memory cgroup out of memory: Killed process 15779 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2672.875252][ T1035] oom_reaper: reaped process 15779 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
03:29:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:26 executing program 0:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:26 executing program 4:
r0 = socket$inet6(0xa, 0x802, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0xcc8a1a17658d1f54)
syz_emit_ethernet(0x382, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0)

03:29:26 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f0000000500)="00abe6d2006101cb8b41eea5cf2e67fea541e9b7b65fed2e517d961a084791cfb37362381ac05b567354263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb54bc7a77f71069b464ad07fa61d8067debad910236d7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87", 0xfffffffffffffe95, 0x40, 0x0, 0xfffffffffffffeda)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'})
recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x203be9be0e639dd, 0x0, 0x0, 0xffffffffffffffd7)

03:29:26 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

03:29:26 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32=r19, @ANYPTR, @ANYRES64, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:26 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

03:29:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2673.252238][ T2513] print_req_error: 1 callbacks suppressed
[ 2673.252253][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2673.272625][T22461] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2673.370073][T22612] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2673.382178][T22612] CPU: 0 PID: 22612 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2673.390508][T22612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2673.399665][T22615] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2673.400561][T22612] Call Trace:
[ 2673.400584][T22612]  dump_stack+0x1fb/0x318
[ 2673.400603][T22612]  dump_header+0xd8/0x960
[ 2673.415226][T22615] debugfs: File 'msg' in directory 'loop0' already present!
[ 2673.415809][T22612]  oom_kill_process+0xee/0x3a0
[ 2673.415823][T22612]  out_of_memory+0x5da/0x900
[ 2673.415842][T22612]  try_charge+0x1223/0x18d0
[ 2673.427497][T22615] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2673.432203][T22612]  __memcg_kmem_charge+0x146/0x510
[ 2673.432221][T22612]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2673.452096][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2673.453930][T22612]  alloc_pages_current+0x2db/0x500
[ 2673.453951][T22612]  get_zeroed_page+0x17/0x40
[ 2673.453961][T22612]  __pud_alloc+0x37/0x210
[ 2673.453976][T22612]  copy_page_range+0x2502/0x2840
[ 2673.459572][T22618] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2673.470262][T22612]  ? anon_vma_fork+0x4a5/0x540
[ 2673.470289][T22612]  ? vma_gap_callbacks_rotate+0x1ee/0x230
[ 2673.470305][T22612]  ? init_admin_reserve+0xc0/0xc0
[ 2673.470328][T22612]  dup_mmap+0xa01/0xe00
[ 2673.470347][T22612]  dup_mm+0x9e/0x340
[ 2673.470357][T22612]  copy_process+0x23d9/0x5c00
[ 2673.470391][T22612]  _do_fork+0x13e/0x660
[ 2673.529634][T22612]  ? check_preemption_disabled+0xb4/0x260
[ 2673.535328][T22612]  ? debug_smp_processor_id+0x9/0x20
[ 2673.540591][T22612]  ? debug_smp_processor_id+0x1c/0x20
[ 2673.545946][T22612]  __x64_sys_clone+0x20b/0x250
[ 2673.550697][T22612]  do_syscall_64+0xf7/0x1c0
[ 2673.555179][T22612]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2673.561051][T22612] RIP: 0033:0x45a679
[ 2673.564936][T22612] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2673.584518][T22612] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2673.592904][T22612] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2673.600851][T22612] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2673.608797][T22612] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2673.616746][T22612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2673.624694][T22612] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2673.632919][T22612] memory: usage 307200kB, limit 307200kB, failcnt 59404
[ 2673.639945][T22612] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2673.646854][T22612] Memory cgroup stats for /syz1:
[ 2673.646945][T22612] anon 259575808
[ 2673.646945][T22612] file 36864
[ 2673.646945][T22612] kernel_stack 7733248
[ 2673.646945][T22612] slab 15196160
[ 2673.646945][T22612] sock 0
[ 2673.646945][T22612] shmem 0
[ 2673.646945][T22612] file_mapped 0
[ 2673.646945][T22612] file_dirty 0
[ 2673.646945][T22612] file_writeback 0
[ 2673.646945][T22612] anon_thp 230686720
[ 2673.646945][T22612] inactive_anon 135168
[ 2673.646945][T22612] active_anon 259469312
[ 2673.646945][T22612] inactive_file 16384
[ 2673.646945][T22612] active_file 110592
[ 2673.646945][T22612] unevictable 0
[ 2673.646945][T22612] slab_reclaimable 3244032
[ 2673.646945][T22612] slab_unreclaimable 11952128
[ 2673.646945][T22612] pgfault 251196
[ 2673.646945][T22612] pgmajfault 0
03:29:26 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000f5"], 0x5)
close(r2)
socket$netlink(0x10, 0x3, 0x4)
bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0)
splice(r0, 0x0, r2, 0x0, 0x0, 0x0)

03:29:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2673.646945][T22612] workingset_refault 165
[ 2673.646945][T22612] workingset_activate 66
[ 2673.646945][T22612] workingset_nodereclaim 0
[ 2673.646945][T22612] pgrefill 86374
[ 2673.646945][T22612] pgscan 162339
[ 2673.646945][T22612] pgsteal 74791
[ 2673.742445][T22612] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15774,uid=0
[ 2673.758292][T22612] Memory cgroup out of memory: Killed process 15774 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2673.777064][ T1035] oom_reaper: reaped process 15774 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 2673.809522][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
03:29:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:26 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$VT_DISALLOCATE(r0, 0x5608)
modify_ldt$write(0x1, 0x0, 0x0)
accept4$packet(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x84460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)

[ 2673.820836][T22677] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2673.875978][T22686] cgroup: fork rejected by pids controller in /syz0
[ 2673.894734][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2673.914958][T22686] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:26 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:26 executing program 4:
open(0x0, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a9890000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204b8de607a25340b579ac761976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914fb6ee79d501a7aa400000080000000d4bf66e8d85cc74a00"/143], 0x10}}, 0x0)

03:29:26 executing program 5:
syz_emit_ethernet(0x13e, &(0x7f00000001c0)={@local, @random="d2e9cb2a0b7c", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x108, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x83, 0x0, [], "1dbfaf0f00bf5a157dfde918ed46d672cec31772391d302543cb1cfdbc9c853d1ac1e9f15a91636ad775f43abcca939686ddb881e56957addb24c2b6071bb9ec74a584bfbbc603bc76b45ce6f9363084ee50aadf972f74f1ea82221e8c9247de1cece12183991227006c435fd488504e0223f3c6923ecd21f00e56abc2546c48caca7e"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "a3d7b6e744de15b95579e8a84e6970998f0f18852f58a8115fd3db9371ea53"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "f4526d07d345b68c"}, {}, {}, {0x8, 0x6558, 0x0, "da6f2271cd2b19d9ff06a70965fafe89c346269d39cb374ddf64"}}}}}}}, 0x0)

03:29:26 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32=r19, @ANYPTR, @ANYRES64, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:26 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2674.109862][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2674.123917][T22701] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:27 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:27 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2, 'sed\x00', 0x0, 0x10000, 0x30}, 0x2c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$assume_authority(0x10, 0x0)
r2 = dup3(r0, 0xffffffffffffffff, 0x100000)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0x0, 0x3ff})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket(0x11, 0x2, 0x0)

[ 2674.154117][T22702] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2674.166389][T22702] debugfs: File 'msg' in directory 'loop0' already present!
[ 2674.189632][T22702] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2674.226966][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2674.238660][T22736] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2674.278576][T22704] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2674.290545][T22704] CPU: 1 PID: 22704 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2674.298894][T22704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2674.308943][T22704] Call Trace:
[ 2674.312242][T22704]  dump_stack+0x1fb/0x318
[ 2674.316579][T22704]  dump_header+0xd8/0x960
[ 2674.320933][T22704]  oom_kill_process+0xee/0x3a0
[ 2674.325703][T22704]  out_of_memory+0x5da/0x900
[ 2674.330282][T22704]  try_charge+0x1223/0x18d0
[ 2674.334780][T22704]  mem_cgroup_try_charge+0x20c/0x680
[ 2674.340049][T22704]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2674.345760][T22704]  wp_page_copy+0x349/0x1890
[ 2674.350335][T22704]  ? do_raw_spin_unlock+0x136/0x260
[ 2674.355512][T22704]  do_wp_page+0x5e5/0x1cc0
[ 2674.361191][T22704]  ? __kasan_check_write+0x14/0x20
[ 2674.366288][T22704]  handle_mm_fault+0x2ada/0x5ff0
[ 2674.371216][T22704]  do_user_addr_fault+0x589/0xaf0
[ 2674.376231][T22704]  __do_page_fault+0xd3/0x1f0
[ 2674.380883][T22704]  do_page_fault+0x99/0xb0
[ 2674.385279][T22704]  page_fault+0x39/0x40
[ 2674.389410][T22704] RIP: 0033:0x40f6c8
[ 2674.393294][T22704] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 64 fe 4b 00 31 c0 e8 13 27 ff ff 31 ff e8 5c 23 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 2f 66 00
[ 2674.412877][T22704] RSP: 002b:00007fffe25b9740 EFLAGS: 00010246
[ 2674.418920][T22704] RAX: 00000000569eb2b4 RBX: 00000000e8da5323 RCX: 0000001b2e820000
03:29:27 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2674.426872][T22704] RDX: 0000000000000000 RSI: 00000000000012b4 RDI: ffffffff569eb2b4
[ 2674.434818][T22704] RBP: 0000000000000002 R08: 00000000569eb2b4 R09: 00000000569eb2b8
[ 2674.442779][T22704] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c0f8
[ 2674.450737][T22704] R13: 0000000080000000 R14: 00007f4c19335008 R15: 000000000000000d
[ 2674.480233][T22704] memory: usage 307200kB, limit 307200kB, failcnt 59469
[ 2674.525485][T22704] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2674.556849][T22704] Memory cgroup stats for /syz1:
[ 2674.556970][T22704] anon 259710976
[ 2674.556970][T22704] file 36864
[ 2674.556970][T22704] kernel_stack 7733248
[ 2674.556970][T22704] slab 15196160
[ 2674.556970][T22704] sock 0
[ 2674.556970][T22704] shmem 0
[ 2674.556970][T22704] file_mapped 0
[ 2674.556970][T22704] file_dirty 0
[ 2674.556970][T22704] file_writeback 0
[ 2674.556970][T22704] anon_thp 230686720
[ 2674.556970][T22704] inactive_anon 135168
[ 2674.556970][T22704] active_anon 259604480
[ 2674.556970][T22704] inactive_file 16384
[ 2674.556970][T22704] active_file 110592
[ 2674.556970][T22704] unevictable 0
[ 2674.556970][T22704] slab_reclaimable 3244032
[ 2674.556970][T22704] slab_unreclaimable 11952128
[ 2674.556970][T22704] pgfault 251295
[ 2674.556970][T22704] pgmajfault 0
[ 2674.556970][T22704] workingset_refault 165
[ 2674.556970][T22704] workingset_activate 66
[ 2674.556970][T22704] workingset_nodereclaim 0
[ 2674.556970][T22704] pgrefill 86539
[ 2674.556970][T22704] pgscan 162505
[ 2674.556970][T22704] pgsteal 74791
[ 2674.565275][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2674.664377][T22819] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:27 executing program 5:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20002200b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))

03:29:27 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(0x0, 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:27 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$VT_DISALLOCATE(r0, 0x5608)
modify_ldt$write(0x1, 0x0, 0x0)
accept4$packet(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x84460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x0, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)

[ 2674.880285][T22704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15766,uid=0
[ 2674.903655][T22704] Memory cgroup out of memory: Killed process 15766 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:27 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r20 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r20)
r21 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r21)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
dup(r22)
r23 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r21, @ANYRES32=r19, @ANYPTR, @ANYRES64, @ANYRESDEC=r23, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r22, @ANYRESHEX=r24])
r25 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r25, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r26)
r27 = socket$inet_udp(0x2, 0x2, 0x0)
close(r27)
setsockopt(r27, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
r29 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r30 = socket$inet_udp(0x2, 0x2, 0x0)
close(r30)
setsockopt(r30, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r31 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r28}}}, @rights={{0x2c, 0x1, 0x1, [r29, 0xffffffffffffffff, r2, r30, 0xffffffffffffffff, r31, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2674.926738][T22704] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2674.928997][ T1035] oom_reaper: reaped process 15766 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 2674.937948][T22704] CPU: 0 PID: 22704 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2674.956984][T22704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2674.967071][T22704] Call Trace:
[ 2674.970362][T22704]  dump_stack+0x1fb/0x318
[ 2674.974711][T22704]  dump_header+0xd8/0x960
[ 2674.979056][T22704]  oom_kill_process+0xee/0x3a0
[ 2674.983830][T22704]  out_of_memory+0x5da/0x900
[ 2674.988426][T22704]  try_charge+0x1223/0x18d0
[ 2674.992956][T22704]  mem_cgroup_try_charge+0x20c/0x680
[ 2674.998251][T22704]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2675.003891][T22704]  wp_page_copy+0x349/0x1890
[ 2675.008491][T22704]  ? do_raw_spin_unlock+0x136/0x260
[ 2675.013744][T22704]  do_wp_page+0x5e5/0x1cc0
[ 2675.018165][T22704]  ? __kasan_check_write+0x14/0x20
[ 2675.023288][T22704]  handle_mm_fault+0x2ada/0x5ff0
[ 2675.028253][T22704]  do_user_addr_fault+0x589/0xaf0
[ 2675.033288][T22704]  __do_page_fault+0xd3/0x1f0
[ 2675.037965][T22704]  do_page_fault+0x99/0xb0
[ 2675.042377][T22704]  page_fault+0x39/0x40
[ 2675.046532][T22704] RIP: 0033:0x40f6c8
[ 2675.050413][T22704] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 64 fe 4b 00 31 c0 e8 13 27 ff ff 31 ff e8 5c 23 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 2f 66 00
[ 2675.070023][T22704] RSP: 002b:00007fffe25b9740 EFLAGS: 00010246
[ 2675.076083][T22704] RAX: 0000000098beecbf RBX: 0000000021395a8f RCX: 0000001b2e820000
[ 2675.084030][T22704] RDX: 0000000000000000 RSI: 0000000000000cbf RDI: ffffffff98beecbf
[ 2675.091997][T22704] RBP: 0000000000000004 R08: 0000000098beecbf R09: 0000000098beecc3
[ 2675.099966][T22704] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c0f8
[ 2675.107922][T22704] R13: 0000000080000000 R14: 00007f4c19335008 R15: 000000000000000f
[ 2675.128090][T22704] memory: usage 307092kB, limit 307200kB, failcnt 59478
[ 2675.149572][T22704] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2675.157766][T22704] Memory cgroup stats for /syz1:
[ 2675.157927][T22704] anon 259710976
[ 2675.157927][T22704] file 36864
[ 2675.157927][T22704] kernel_stack 7733248
[ 2675.157927][T22704] slab 15196160
[ 2675.157927][T22704] sock 0
[ 2675.157927][T22704] shmem 0
[ 2675.157927][T22704] file_mapped 0
[ 2675.157927][T22704] file_dirty 0
[ 2675.157927][T22704] file_writeback 0
[ 2675.157927][T22704] anon_thp 230686720
[ 2675.157927][T22704] inactive_anon 135168
[ 2675.157927][T22704] active_anon 259604480
[ 2675.157927][T22704] inactive_file 16384
[ 2675.157927][T22704] active_file 110592
[ 2675.157927][T22704] unevictable 0
[ 2675.157927][T22704] slab_reclaimable 3244032
[ 2675.157927][T22704] slab_unreclaimable 11952128
[ 2675.157927][T22704] pgfault 251295
[ 2675.157927][T22704] pgmajfault 0
[ 2675.157927][T22704] workingset_refault 165
[ 2675.157927][T22704] workingset_activate 66
[ 2675.157927][T22704] workingset_nodereclaim 0
[ 2675.157927][T22704] pgrefill 86539
[ 2675.157927][T22704] pgscan 162505
[ 2675.157927][T22704] pgsteal 74791
[ 2675.253835][T22704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15761,uid=0
[ 2675.270357][T22704] Memory cgroup out of memory: Killed process 15761 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2675.289440][ T1035] oom_reaper: reaped process 15761 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
03:29:28 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0), 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:28 executing program 5:
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
r1 = memfd_create(&(0x7f0000000740)='\x00\x9aF\aM\xe0~\x1e5\t\xe7@\xe7\x1a\xb3#\x84\xd0g^\xb0\xe0L\xcd\x84/\xbcho\xdeq\xe4\xf5\x85\x18R\xef\xc8\x8bg\x7f~r\xc5\xde\r\x86\\g\xef-\x02\xa4\x94\xd6=+1\xbb\x8a\xde\xec\xfa&\xd6\"\xa9\x8c\xbctJ\v)!\x9c\x98\xa5\x9b\x8f\n\"\xa2h\xf44\xa3K<\xa9\x02\x87\xb6\xef\xcd\xe7\x12\xcf|5\xd3\xd4\r\xd6#1\xa7\xf7\x1a\x00\xb4\x16;\xa2\xab\xc6\xc1\xbd&\xc9\xf7u\xac\x0e\xfdP\xa2\x91\x86\xf9\xc8S/\x94\x93\xd2\fI\x1e\xa4>\xa3\x18\xddc\x95\x9an\nE\xedV\x06\x9cK\x0fO\xf8dV\xee\b\x80\xe8\xcf\x8f\'8\xb0\x03\x99s\xa0f\xb2\xeflgI\xe2\xad\xc0\x90\xff\a\xd75\x18\xdc\x9dva\xa1\xfc\xb9\xfe\xf2\xfcB\xfe\xb7\x06\x0eN\x13\xce\xfaQ\xf1\x9b\x15\xd0/sx\x97K2hz\x92~\xdd5$\x02\x12\xd5\xa6I>k\xa4\xb7\xaa\x95\a\x1f\x1f\xafd\xfd\xc2X>\bp&\xa6`3\"\x1fa\xdd*\x92d-C\x9cwJ\xbcE\xe8\xdf\x15\x01\x9b\xa1^f\xfb6\b\xd3\f.4\xa5\x17\x89\n\xb5\xb4\x7f\x97\xebnJB?\xdb\x9d\xe90k\xa9\xe7_[S\x9e\xbf\xf5~\xc6\xf6\xc8G+N\x1f\x1a\xb9<\xcaB^\xd2\x97\xf8\x0ej>p99-\x04\x9e(\x9b\xf3@yJj=\xde\xce\xa2', 0x2)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000000)

03:29:28 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(0x0, 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:28 executing program 4:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x28)
write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202d656d316e20212e2023127d037365766b90cb99c2e8611e86c759c3d80b933fe29bdf006f50d2c208af260611e08c4fa30c8ab69b1088ae75324dc55424551f30149a7e78dee2a08dff097c22d2a8f4f0ee2caa95a9b7a0ebf27e8d3e62fcbbe42c88d754b724ab83787f07"], 0x77)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)

03:29:28 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:28 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(0x0, 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2675.522320][T23050] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2675.553546][T23050] debugfs: File 'msg' in directory 'loop0' already present!
03:29:28 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:28 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x0, @rand_addr=0x3}})
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @loopback}})

[ 2675.589872][T23050] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:28 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500100000008157a977f507c7e54207050000000000009500000008000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

03:29:28 executing program 4:
getrandom(&(0x7f0000000140)=""/147, 0x93, 0x3)

03:29:28 executing program 2:

03:29:28 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:29 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0), 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:29 executing program 4:

03:29:29 executing program 2:

03:29:29 executing program 5:

03:29:29 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:29 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:29 executing program 2:

03:29:29 executing program 5:

03:29:29 executing program 4:

[ 2676.346548][T23486] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:29 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2676.395609][T23486] debugfs: File 'msg' in directory 'loop0' already present!
[ 2676.426536][T23486] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:29 executing program 2:

03:29:29 executing program 5:

[ 2676.478001][T23500] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2676.490171][T23500] CPU: 0 PID: 23500 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2676.498512][T23500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2676.508577][T23500] Call Trace:
[ 2676.508601][T23500]  dump_stack+0x1fb/0x318
[ 2676.508616][T23500]  dump_header+0xd8/0x960
[ 2676.508630][T23500]  oom_kill_process+0xee/0x3a0
[ 2676.508641][T23500]  out_of_memory+0x5da/0x900
[ 2676.508657][T23500]  try_charge+0x1223/0x18d0
[ 2676.508690][T23500]  __memcg_kmem_charge+0x146/0x510
[ 2676.534444][T23500]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2676.534468][T23500]  alloc_pages_current+0x2db/0x500
[ 2676.550032][T23500]  pte_alloc_one+0x1f/0x180
[ 2676.554545][T23500]  __pte_alloc+0x20/0x2f0
[ 2676.558883][T23500]  copy_page_range+0x2315/0x2840
[ 2676.563852][T23500]  ? vma_gap_callbacks_rotate+0x1fc/0x230
[ 2676.569620][T23500]  ? __vma_link_rb+0x839/0x860
[ 2676.574384][T23500]  dup_mmap+0xa01/0xe00
[ 2676.578562][T23500]  dup_mm+0x9e/0x340
[ 2676.582454][T23500]  copy_process+0x23d9/0x5c00
[ 2676.587172][T23500]  _do_fork+0x13e/0x660
[ 2676.591334][T23500]  ? check_preemption_disabled+0xb4/0x260
[ 2676.597058][T23500]  ? debug_smp_processor_id+0x9/0x20
[ 2676.602343][T23500]  ? debug_smp_processor_id+0x1c/0x20
[ 2676.607833][T23500]  __x64_sys_clone+0x20b/0x250
[ 2676.612600][T23500]  do_syscall_64+0xf7/0x1c0
[ 2676.617116][T23500]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2676.623026][T23500] RIP: 0033:0x45a679
[ 2676.626921][T23500] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2676.646543][T23500] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2676.652767][ T2513] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2676.655009][T23500] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2676.655016][T23500] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2676.655023][T23500] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2676.655029][T23500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2676.655035][T23500] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2676.655293][T23500] memory: usage 307200kB, limit 307200kB, failcnt 59504
[ 2676.672597][T23499] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[ 2676.674896][T23500] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2676.674901][T23500] Memory cgroup stats for /syz1:
[ 2676.675000][T23500] anon 259571712
[ 2676.675000][T23500] file 36864
[ 2676.675000][T23500] kernel_stack 7733248
[ 2676.675000][T23500] slab 15196160
[ 2676.675000][T23500] sock 0
[ 2676.675000][T23500] shmem 0
[ 2676.675000][T23500] file_mapped 0
[ 2676.675000][T23500] file_dirty 0
[ 2676.675000][T23500] file_writeback 0
[ 2676.675000][T23500] anon_thp 230686720
[ 2676.675000][T23500] inactive_anon 135168
[ 2676.675000][T23500] active_anon 259739648
[ 2676.675000][T23500] inactive_file 16384
[ 2676.675000][T23500] active_file 110592
[ 2676.675000][T23500] unevictable 0
[ 2676.675000][T23500] slab_reclaimable 3244032
[ 2676.675000][T23500] slab_unreclaimable 11952128
[ 2676.675000][T23500] pgfault 251493
[ 2676.675000][T23500] pgmajfault 0
[ 2676.675000][T23500] workingset_refault 165
[ 2676.675000][T23500] workingset_activate 66
[ 2676.675000][T23500] workingset_nodereclaim 0
[ 2676.675000][T23500] pgrefill 86605
[ 2676.675000][T23500] pgscan 162571
[ 2676.675000][T23500] pgsteal 74791
[ 2676.823515][T23500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15756,uid=0
[ 2676.823626][T23500] Memory cgroup out of memory: Killed process 15756 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2676.858568][T23500] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2676.870457][T23500] CPU: 0 PID: 23500 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2676.878774][T23500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2676.878780][T23500] Call Trace:
[ 2676.878802][T23500]  dump_stack+0x1fb/0x318
[ 2676.878821][T23500]  dump_header+0xd8/0x960
[ 2676.900785][T23500]  oom_kill_process+0xee/0x3a0
[ 2676.905566][T23500]  out_of_memory+0x5da/0x900
[ 2676.910170][T23500]  try_charge+0x1223/0x18d0
[ 2676.914715][T23500]  __memcg_kmem_charge+0x146/0x510
[ 2676.919841][T23500]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2676.925222][T23500]  alloc_pages_current+0x2db/0x500
[ 2676.930335][T23500]  pte_alloc_one+0x1f/0x180
[ 2676.934837][T23500]  __pte_alloc+0x20/0x2f0
[ 2676.939150][T23500]  copy_page_range+0x2315/0x2840
[ 2676.944076][T23500]  ? vma_gap_callbacks_rotate+0x1ee/0x230
[ 2676.949801][T23500]  ? __vma_link_rb+0x839/0x860
[ 2676.954559][T23500]  dup_mmap+0xa01/0xe00
[ 2676.958716][T23500]  dup_mm+0x9e/0x340
[ 2676.962639][T23500]  copy_process+0x23d9/0x5c00
[ 2676.967337][T23500]  _do_fork+0x13e/0x660
[ 2676.971561][T23500]  ? check_preemption_disabled+0xb4/0x260
[ 2676.977260][T23500]  ? debug_smp_processor_id+0x9/0x20
[ 2676.982525][T23500]  ? debug_smp_processor_id+0x1c/0x20
[ 2676.987896][T23500]  __x64_sys_clone+0x20b/0x250
[ 2676.992661][T23500]  do_syscall_64+0xf7/0x1c0
[ 2676.997149][T23500]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2677.003021][T23500] RIP: 0033:0x45a679
[ 2677.006904][T23500] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2677.026507][T23500] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2677.034916][T23500] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2677.042888][T23500] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2677.050851][T23500] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2677.058819][T23500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2677.066787][T23500] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2677.074871][T23500] memory: usage 306916kB, limit 307200kB, failcnt 59645
[ 2677.081842][T23500] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2677.088746][T23500] Memory cgroup stats for /syz1:
[ 2677.088827][T23500] anon 259571712
[ 2677.088827][T23500] file 36864
[ 2677.088827][T23500] kernel_stack 7667712
[ 2677.088827][T23500] slab 15196160
[ 2677.088827][T23500] sock 0
[ 2677.088827][T23500] shmem 0
[ 2677.088827][T23500] file_mapped 0
[ 2677.088827][T23500] file_dirty 0
[ 2677.088827][T23500] file_writeback 0
[ 2677.088827][T23500] anon_thp 230686720
[ 2677.088827][T23500] inactive_anon 135168
[ 2677.088827][T23500] active_anon 259604480
[ 2677.088827][T23500] inactive_file 16384
[ 2677.088827][T23500] active_file 110592
[ 2677.088827][T23500] unevictable 0
[ 2677.088827][T23500] slab_reclaimable 3244032
[ 2677.088827][T23500] slab_unreclaimable 11952128
[ 2677.088827][T23500] pgfault 251493
[ 2677.088827][T23500] pgmajfault 0
[ 2677.088827][T23500] workingset_refault 165
[ 2677.088827][T23500] workingset_activate 66
[ 2677.088827][T23500] workingset_nodereclaim 0
[ 2677.088827][T23500] pgrefill 86605
[ 2677.088827][T23500] pgscan 162571
[ 2677.088827][T23500] pgsteal 74791
[ 2677.183694][T23500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13751,uid=0
[ 2677.199277][T23500] Memory cgroup out of memory: Killed process 13751 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2677.218054][ T1035] oom_reaper: reaped process 13751 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
03:29:30 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0), 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:30 executing program 2:

03:29:30 executing program 5:

03:29:30 executing program 4:

03:29:30 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:30 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(0xffffffffffffffff, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:30 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_adjtime(0x0, &(0x7f0000000040)={0x18a})

03:29:30 executing program 5:

03:29:30 executing program 2:

[ 2677.439075][T23512] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2677.462518][T23512] debugfs: File 'msg' in directory 'loop0' already present!
03:29:30 executing program 2:

03:29:30 executing program 5:

[ 2677.507384][T23512] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:30 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2677.739770][ T2512] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2677.751079][T23736] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
03:29:31 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:31 executing program 4:

03:29:31 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
semget$private(0x0, 0x0, 0x0)

03:29:31 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, 0xffffffffffffffff)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r19, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:31 executing program 2:
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')

03:29:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:31 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c)
finit_module(r0, 0x0, 0x0)

03:29:31 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0))

03:29:31 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2678.323338][T23749] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:31 executing program 4:
open(0x0, 0x14103e, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
listen(0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080), 0xa)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
getsockname$inet(r2, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3, 0xff}}, 0xa)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00')
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffce9, 0x45, 0x0, 0x0)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000240))
io_setup(0x2005, &(0x7f0000000040))

03:29:31 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41)
recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)

[ 2678.395995][T23749] debugfs: File 'msg' in directory 'loop0' already present!
[ 2678.430494][T23749] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2678.447891][T23862] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0
[ 2678.459283][T23862] CPU: 0 PID: 23862 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2678.467624][T23862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2678.477704][T23862] Call Trace:
[ 2678.480993][T23862]  dump_stack+0x1fb/0x318
[ 2678.485323][T23862]  dump_header+0xd8/0x960
[ 2678.489634][T23862]  oom_kill_process+0xee/0x3a0
[ 2678.494378][T23862]  out_of_memory+0x5da/0x900
[ 2678.498952][T23862]  try_charge+0x1223/0x18d0
[ 2678.503450][T23862]  __memcg_kmem_charge_memcg+0x37/0xc0
[ 2678.508897][T23862]  kmem_getpages+0x449/0xa00
[ 2678.513462][T23862]  cache_grow_begin+0x7e/0x2c0
[ 2678.518201][T23862]  ? __cpuset_node_allowed+0x195/0x510
[ 2678.523984][T23862]  fallback_alloc+0x134/0x1c0
[ 2678.528637][T23862]  ____cache_alloc_node+0x22a/0x250
[ 2678.533826][T23862]  kmem_cache_alloc+0x163/0x2e0
[ 2678.538659][T23862]  ? anon_vma_clone+0x384/0x4b0
[ 2678.543485][T23862]  anon_vma_clone+0x384/0x4b0
[ 2678.548151][T23862]  ? rcu_read_lock_sched_held+0x10b/0x170
[ 2678.553848][T23862]  anon_vma_fork+0x91/0x540
[ 2678.558340][T23862]  ? dup_userfaultfd+0x99/0x680
[ 2678.563169][T23862]  ? dup_mmap+0x5b0/0xe00
[ 2678.567476][T23862]  dup_mmap+0x6b8/0xe00
[ 2678.571614][T23862]  dup_mm+0x9e/0x340
[ 2678.575486][T23862]  copy_process+0x23d9/0x5c00
[ 2678.580159][T23862]  _do_fork+0x13e/0x660
[ 2678.584292][T23862]  ? check_preemption_disabled+0xb4/0x260
[ 2678.589983][T23862]  ? debug_smp_processor_id+0x9/0x20
[ 2678.595252][T23862]  ? debug_smp_processor_id+0x1c/0x20
[ 2678.600603][T23862]  __x64_sys_clone+0x20b/0x250
[ 2678.605363][T23862]  do_syscall_64+0xf7/0x1c0
[ 2678.609847][T23862]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2678.615719][T23862] RIP: 0033:0x45a679
[ 2678.619599][T23862] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2678.639186][T23862] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2678.647580][T23862] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2678.655527][T23862] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2678.663476][T23862] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2678.671424][T23862] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2678.679374][T23862] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2678.687522][T23862] memory: usage 307200kB, limit 307200kB, failcnt 59694
[ 2678.694459][T23862] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2678.701370][T23862] Memory cgroup stats for /syz1:
[ 2678.701469][T23862] anon 259690496
[ 2678.701469][T23862] file 36864
[ 2678.701469][T23862] kernel_stack 7667712
[ 2678.701469][T23862] slab 15196160
[ 2678.701469][T23862] sock 0
[ 2678.701469][T23862] shmem 0
[ 2678.701469][T23862] file_mapped 0
[ 2678.701469][T23862] file_dirty 0
[ 2678.701469][T23862] file_writeback 0
[ 2678.701469][T23862] anon_thp 230686720
[ 2678.701469][T23862] inactive_anon 135168
[ 2678.701469][T23862] active_anon 259739648
03:29:31 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00')
write$FUSE_ATTR(r0, 0x0, 0x0)

[ 2678.701469][T23862] inactive_file 16384
[ 2678.701469][T23862] active_file 110592
[ 2678.701469][T23862] unevictable 0
[ 2678.701469][T23862] slab_reclaimable 3244032
[ 2678.701469][T23862] slab_unreclaimable 11952128
[ 2678.701469][T23862] pgfault 251691
[ 2678.701469][T23862] pgmajfault 0
[ 2678.701469][T23862] workingset_refault 165
[ 2678.701469][T23862] workingset_activate 66
[ 2678.701469][T23862] workingset_nodereclaim 0
[ 2678.701469][T23862] pgrefill 86770
[ 2678.701469][T23862] pgscan 162736
[ 2678.701469][T23862] pgsteal 74791
[ 2678.796962][T23862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13747,uid=0
[ 2678.812555][T23862] Memory cgroup out of memory: Killed process 13747 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2678.831499][ T1035] oom_reaper: reaped process 13747 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 2678.838064][T23862] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2678.854468][T23862] CPU: 0 PID: 23862 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2678.862793][T23862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2678.872844][T23862] Call Trace:
[ 2678.876136][T23862]  dump_stack+0x1fb/0x318
[ 2678.880478][T23862]  dump_header+0xd8/0x960
[ 2678.884823][T23862]  oom_kill_process+0xee/0x3a0
[ 2678.889593][T23862]  out_of_memory+0x5da/0x900
[ 2678.894197][T23862]  try_charge+0x1223/0x18d0
[ 2678.898744][T23862]  __memcg_kmem_charge+0x146/0x510
[ 2678.903861][T23862]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2678.909250][T23862]  alloc_pages_current+0x2db/0x500
[ 2678.914368][T23862]  __pmd_alloc+0x39/0x3d0
[ 2678.918702][T23862]  copy_page_range+0x248c/0x2840
[ 2678.923647][T23862]  ? anon_vma_fork+0x4a5/0x540
[ 2678.928422][T23862]  ? vma_gap_callbacks_rotate+0x1ee/0x230
[ 2678.934152][T23862]  ? init_admin_reserve+0xc0/0xc0
[ 2678.939194][T23862]  dup_mmap+0xa01/0xe00
[ 2678.943367][T23862]  dup_mm+0x9e/0x340
[ 2678.947258][T23862]  copy_process+0x23d9/0x5c00
[ 2678.951967][T23862]  _do_fork+0x13e/0x660
[ 2678.956124][T23862]  ? check_preemption_disabled+0xb4/0x260
[ 2678.961842][T23862]  ? debug_smp_processor_id+0x9/0x20
[ 2678.967130][T23862]  ? debug_smp_processor_id+0x1c/0x20
[ 2678.972513][T23862]  __x64_sys_clone+0x20b/0x250
[ 2678.977305][T23862]  do_syscall_64+0xf7/0x1c0
[ 2678.981950][T23862]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2678.987840][T23862] RIP: 0033:0x45a679
[ 2678.991729][T23862] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2679.011333][T23862] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2679.019782][T23862] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2679.027770][T23862] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2679.035755][T23862] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2679.043759][T23862] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2679.051734][T23862] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2679.059995][T23862] memory: usage 307036kB, limit 307200kB, failcnt 59730
[ 2679.067033][T23862] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2679.067038][T23862] Memory cgroup stats for /syz1:
[ 2679.067121][T23862] anon 259551232
[ 2679.067121][T23862] file 36864
[ 2679.067121][T23862] kernel_stack 7667712
[ 2679.067121][T23862] slab 15196160
[ 2679.067121][T23862] sock 0
[ 2679.067121][T23862] shmem 0
[ 2679.067121][T23862] file_mapped 0
[ 2679.067121][T23862] file_dirty 0
[ 2679.067121][T23862] file_writeback 0
[ 2679.067121][T23862] anon_thp 230686720
[ 2679.067121][T23862] inactive_anon 135168
[ 2679.067121][T23862] active_anon 259604480
[ 2679.067121][T23862] inactive_file 16384
[ 2679.067121][T23862] active_file 110592
[ 2679.067121][T23862] unevictable 0
[ 2679.067121][T23862] slab_reclaimable 3244032
[ 2679.067121][T23862] slab_unreclaimable 11952128
[ 2679.067121][T23862] pgfault 251691
[ 2679.067121][T23862] pgmajfault 0
[ 2679.067121][T23862] workingset_refault 165
[ 2679.067121][T23862] workingset_activate 66
[ 2679.067121][T23862] workingset_nodereclaim 0
[ 2679.067121][T23862] pgrefill 86836
[ 2679.067121][T23862] pgscan 162802
[ 2679.067121][T23862] pgsteal 74791
[ 2679.067136][T23862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13735,uid=0
[ 2679.067226][T23862] Memory cgroup out of memory: Killed process 13735 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:32 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:32 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0)

03:29:32 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))

03:29:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000ff9000/0x4000)=nil, 0x0)

03:29:32 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, 0xffffffffffffffff)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r19, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
getsockname$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
bind$bt_rfcomm(r1, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x45, 0x0, 0x0)
io_setup(0x2005, &(0x7f0000000040))

03:29:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:32 executing program 5:
socket$inet6(0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x2, 0x1ff}})
ftruncate(0xffffffffffffffff, 0x0)
getgroups(0x0, 0x0)
getgroups(0x0, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0}, 0x70)
exit(0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x2e]}}, &(0x7f00000002c0)=""/150, 0x1c, 0x96, 0x1}, 0x20)

03:29:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000005c0)=""/4096, 0x1000)

[ 2679.440249][T24127] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2679.473891][T24127] debugfs: File 'msg' in directory 'loop0' already present!
[ 2679.488206][T24089] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2679.517553][T24127] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2679.534418][T24089] CPU: 1 PID: 24089 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2679.542791][T24089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2679.552858][T24089] Call Trace:
[ 2679.556169][T24089]  dump_stack+0x1fb/0x318
[ 2679.560506][T24089]  dump_header+0xd8/0x960
[ 2679.564819][T24089]  oom_kill_process+0xee/0x3a0
[ 2679.569559][T24089]  out_of_memory+0x5da/0x900
[ 2679.574139][T24089]  try_charge+0x1223/0x18d0
[ 2679.578648][T24089]  mem_cgroup_try_charge+0x20c/0x680
[ 2679.583934][T24089]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2679.589547][T24089]  wp_page_copy+0x349/0x1890
[ 2679.594123][T24089]  ? do_raw_spin_unlock+0x136/0x260
[ 2679.599298][T24089]  do_wp_page+0x5e5/0x1cc0
[ 2679.603691][T24089]  ? __kasan_check_write+0x14/0x20
[ 2679.608795][T24089]  handle_mm_fault+0x2ada/0x5ff0
[ 2679.613738][T24089]  do_user_addr_fault+0x589/0xaf0
[ 2679.618745][T24089]  __do_page_fault+0xd3/0x1f0
[ 2679.623399][T24089]  do_page_fault+0x99/0xb0
[ 2679.627794][T24089]  page_fault+0x39/0x40
[ 2679.631927][T24089] RIP: 0033:0x4418f9
[ 2679.635800][T24089] Code: b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e 89 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e <48> 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40
[ 2679.655741][T24089] RSP: 002b:00007fffe25b9808 EFLAGS: 00010202
[ 2679.661787][T24089] RAX: 0000000020000080 RBX: 000000000075c9a0 RCX: 0030656c69662f2e
[ 2679.669758][T24089] RDX: 0000000000000008 RSI: 00000000007609d0 RDI: 0000000020000080
[ 2679.677706][T24089] RBP: 00000000007609b0 R08: 0000000098926c7f R09: 0000000098926c83
03:29:32 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2679.685653][T24089] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c070
[ 2679.693609][T24089] R13: 000000000028e292 R14: 00000000007609b8 R15: 000000000075c07c
[ 2679.704846][T24089] memory: usage 307200kB, limit 307200kB, failcnt 59750
[ 2679.712070][T24089] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2679.736321][T24089] Memory cgroup stats for /syz1:
[ 2679.736408][T24089] anon 259821568
[ 2679.736408][T24089] file 36864
[ 2679.736408][T24089] kernel_stack 7667712
[ 2679.736408][T24089] slab 15196160
[ 2679.736408][T24089] sock 0
[ 2679.736408][T24089] shmem 0
[ 2679.736408][T24089] file_mapped 0
[ 2679.736408][T24089] file_dirty 0
[ 2679.736408][T24089] file_writeback 0
[ 2679.736408][T24089] anon_thp 230686720
[ 2679.736408][T24089] inactive_anon 135168
[ 2679.736408][T24089] active_anon 259739648
[ 2679.736408][T24089] inactive_file 16384
[ 2679.736408][T24089] active_file 110592
03:29:32 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r20=>0xffffffffffffffff})
fcntl$dupfd(r20, 0x0, 0xffffffffffffffff)
r21 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r21)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r19, @ANYPTR, @ANYRES64=r20, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2679.736408][T24089] unevictable 0
[ 2679.736408][T24089] slab_reclaimable 3244032
[ 2679.736408][T24089] slab_unreclaimable 11952128
[ 2679.736408][T24089] pgfault 251823
[ 2679.736408][T24089] pgmajfault 0
[ 2679.736408][T24089] workingset_refault 165
[ 2679.736408][T24089] workingset_activate 66
[ 2679.736408][T24089] workingset_nodereclaim 0
[ 2679.736408][T24089] pgrefill 86869
[ 2679.736408][T24089] pgscan 162835
[ 2679.736408][T24089] pgsteal 74791
[ 2679.919960][T24089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13629,uid=0
[ 2679.940615][T24089] Memory cgroup out of memory: Killed process 13629 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2679.952739][T24418] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2679.966463][ T1035] oom_reaper: reaped process 13629 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 2679.972740][T24418] debugfs: File 'msg' in directory 'loop0' already present!
[ 2679.991821][T24418] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:33 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}})

03:29:33 executing program 5:
r0 = memfd_create(0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x10d)
close(0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e21}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80400001}, 0x14)
shutdown(r3, 0x1)
r4 = accept4$inet(r3, &(0x7f0000000480)={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x10, 0x1000)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0)
dup3(r1, r0, 0x0)
ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
r6 = memfd_create(&(0x7f0000000740)='\x00\x9aF\aM\xe0~\x1e5\t\xe7@\xe7\x1a\xb3#\x84\xd0g^\xb0\xe0L\xcd\x84/\xbcho\xdeq\xe4\xf5\x85\x18R\xef\xc8\x8bg\x7f~r\xc5\xde\r\x86\\g\xef-\x02\xa4\x94\xd6=+1\xbb\x8a\xde\xec\xfa&\xd6\"\xa9\x8c\xbctJ\v)!\x9c\x98\xa5\x9b\x8f\n\"\xa2h\xf44\xa3K<\xa9\x02\x87\xb6\xef\xcd\xe7\x12\xcf|5\xd3\xd4\r\xd6#1\xa7\xf7\x1a\x00\xb4\x16;\xa2\xab\xc6\xc1\xbd&\xc9\xf7u\xac\x0e\xfdP\xa2\x91\x86\xf9\xc8S/\x94\x93\xd2\fI\x1e\xa4>\xa3\x18\xddc\x95\x9an\nE\xedV\x06\x9cK\x0fO\xf8dV\xee\b\x80\xe8\xcf\x8f\'8\xb0\x03\x99s\xa0f\xb2\xeflgI\xe2\xad\xc0\x90\xff\a\xd75\x18\xdc\x9dva\xa1\xfc\xb9\xfe\xf2\xfcB\xfe\xb7\x06\x0eN\x13\xce\xfaQ\xf1\x9b\x15\xd0/sx\x97K2hz\x92~\xdd5$\x02\x12\xd5\xa6I>k\xa4\xb7\xaa\x95\a\x1f\x1f\xafd\xfd\xc2X>\bp&\xa6`3\"\x1fa\xdd*\x92d-C\x9cwJ\xbcE\xe8\xdf\x15\x01\x9b\xa1^f\xfb6\b\xd3\f.4\xa5\x17\x89\n\xb5\xb4\x7f\x97\xebnJB?\xdb\x9d\xe90k\xa9\xe7_[S\x9e\xbf\xf5~\xc6\xf6\xc8G+N\x1f\x1a\xb9<\xcaB^\xd2\x97\xf8\x0ej>p99-\x04\x9e(\x9b\xf3@yJj=\xde\xce\xa2', 0x2)
pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r5, 0x0, 0x24000000)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
close(r5)

03:29:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:33 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10)

03:29:33 executing program 2:
r0 = memfd_create(0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x10d)
close(0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80400001}, 0x14)
shutdown(r3, 0x1)
r4 = accept4$inet(r3, &(0x7f0000000480)={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x10, 0x1000)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), 0x0)
dup3(r1, r0, 0x0)
ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
r6 = memfd_create(&(0x7f0000000740)='\x00\x9aF\aM\xe0~\x1e5\t\xe7@\xe7\x1a\xb3#\x84\xd0g^\xb0\xe0L\xcd\x84/\xbcho\xdeq\xe4\xf5\x85\x18R\xef\xc8\x8bg\x7f~r\xc5\xde\r\x86\\g\xef-\x02\xa4\x94\xd6=+1\xbb\x8a\xde\xec\xfa&\xd6\"\xa9\x8c\xbctJ\v)!\x9c\x98\xa5\x9b\x8f\n\"\xa2h\xf44\xa3K<\xa9\x02\x87\xb6\xef\xcd\xe7\x12\xcf|5\xd3\xd4\r\xd6#1\xa7\xf7\x1a\x00\xb4\x16;\xa2\xab\xc6\xc1\xbd&\xc9\xf7u\xac\x0e\xfdP\xa2\x91\x86\xf9\xc8S/\x94\x93\xd2\fI\x1e\xa4>\xa3\x18\xddc\x95\x9an\nE\xedV\x06\x9cK\x0fO\xf8dV\xee\b\x80\xe8\xcf\x8f\'8\xb0\x03\x99s\xa0f\xb2\xeflgI\xe2\xad\xc0\x90\xff\a\xd75\x18\xdc\x9dva\xa1\xfc\xb9\xfe\xf2\xfcB\xfe\xb7\x06\x0eN\x13\xce\xfaQ\xf1\x9b\x15\xd0/sx\x97K2hz\x92~\xdd5$\x02\x12\xd5\xa6I>k\xa4\xb7\xaa\x95\a\x1f\x1f\xafd\xfd\xc2X>\bp&\xa6`3\"\x1fa\xdd*\x92d-C\x9cwJ\xbcE\xe8\xdf\x15\x01\x9b\xa1^f\xfb6\b\xd3\f.4\xa5\x17\x89\n\xb5\xb4\x7f\x97\xebnJB?\xdb\x9d\xe90k\xa9\xe7_[S\x9e\xbf\xf5~\xc6\xf6\xc8G+N\x1f\x1a\xb9<\xcaB^\xd2\x97\xf8\x0ej>p99-\x04\x9e(\x9b\xf3@yJj=\xde\xce\xa2', 0x2)
pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6)
sendfile(r5, r5, 0x0, 0x24000000)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
close(r5)

03:29:33 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, 0x0)
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:33 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080), 0xa)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffce9, 0x0, 0x0, 0x0)

03:29:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2680.342288][T24430] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2680.351111][T24430] debugfs: File 'msg' in directory 'loop0' already present!
[ 2680.363779][T24430] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:33 executing program 4:
socket$inet6(0xa, 0x0, 0x0)
getgroups(0x0, 0x0)
getgroups(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), 0x0)
keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x1})
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)

[ 2680.460303][T24643] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2680.470425][T24643] CPU: 0 PID: 24643 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2680.478757][T24643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2680.488815][T24643] Call Trace:
[ 2680.492130][T24643]  dump_stack+0x1fb/0x318
[ 2680.496479][T24643]  dump_header+0xd8/0x960
[ 2680.500830][T24643]  oom_kill_process+0xee/0x3a0
[ 2680.505617][T24643]  out_of_memory+0x5da/0x900
03:29:33 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, 0x0)
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2680.510224][T24643]  try_charge+0x1223/0x18d0
[ 2680.514751][T24643]  mem_cgroup_try_charge+0x20c/0x680
[ 2680.520046][T24643]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2680.525687][T24643]  wp_page_copy+0x349/0x1890
[ 2680.530291][T24643]  ? do_raw_spin_unlock+0x136/0x260
[ 2680.535496][T24643]  do_wp_page+0x5e5/0x1cc0
[ 2680.539919][T24643]  ? __kasan_check_write+0x14/0x20
[ 2680.545049][T24643]  handle_mm_fault+0x2ada/0x5ff0
[ 2680.550008][T24643]  do_user_addr_fault+0x589/0xaf0
[ 2680.555044][T24643]  __do_page_fault+0xd3/0x1f0
[ 2680.559729][T24643]  do_page_fault+0x99/0xb0
[ 2680.564154][T24643]  page_fault+0x39/0x40
[ 2680.568314][T24643] RIP: 0033:0x4041d9
[ 2680.572210][T24643] Code: 66 00 39 45 24 0f 84 a6 01 00 00 80 3d a8 e4 66 00 00 74 0e 48 8b 85 90 00 00 00 48 c7 00 00 00 00 00 e8 4a 0c 01 00 49 89 c4 <c7> 00 00 00 00 00 49 8b 46 10 48 85 c0 0f 84 3c 01 00 00 48 83 ec
[ 2680.591821][T24643] RSP: 002b:00007f4c176f1c90 EFLAGS: 00010207
[ 2680.597900][T24643] RAX: 00007f4c176f26d4 RBX: 0000000000000003 RCX: 0000000000000003
03:29:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2680.605883][T24643] RDX: 0000000000265cbd RSI: 0000000000000000 RDI: 00000000004bf10e
[ 2680.613864][T24643] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[ 2680.621843][T24643] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2680.629821][T24643] R13: 00000000004c9b54 R14: 00000000004e1d78 R15: 00000000ffffffff
[ 2680.638586][T24643] memory: usage 307200kB, limit 307200kB, failcnt 59781
[ 2680.645543][T24643] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2680.652505][T24643] Memory cgroup stats for /syz1:
[ 2680.652595][T24643] anon 259801088
[ 2680.652595][T24643] file 36864
[ 2680.652595][T24643] kernel_stack 7667712
[ 2680.652595][T24643] slab 15196160
[ 2680.652595][T24643] sock 0
[ 2680.652595][T24643] shmem 0
[ 2680.652595][T24643] file_mapped 0
[ 2680.652595][T24643] file_dirty 0
[ 2680.652595][T24643] file_writeback 0
[ 2680.652595][T24643] anon_thp 230686720
[ 2680.652595][T24643] inactive_anon 135168
[ 2680.652595][T24643] active_anon 259739648
[ 2680.652595][T24643] inactive_file 16384
[ 2680.652595][T24643] active_file 110592
[ 2680.652595][T24643] unevictable 0
[ 2680.652595][T24643] slab_reclaimable 3244032
[ 2680.652595][T24643] slab_unreclaimable 11952128
[ 2680.652595][T24643] pgfault 251922
[ 2680.652595][T24643] pgmajfault 0
[ 2680.652595][T24643] workingset_refault 165
[ 2680.652595][T24643] workingset_activate 66
[ 2680.652595][T24643] workingset_nodereclaim 0
[ 2680.652595][T24643] pgrefill 87034
[ 2680.652595][T24643] pgscan 163000
[ 2680.652595][T24643] pgsteal 74791
[ 2680.729902][T24762] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2680.747390][T24643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13602,uid=0
[ 2680.748805][T24643] Memory cgroup out of memory: Killed process 13602 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2680.792174][T24643] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2680.802201][T24643] CPU: 0 PID: 24643 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2680.810528][T24643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2680.820592][T24643] Call Trace:
[ 2680.823896][T24643]  dump_stack+0x1fb/0x318
[ 2680.828232][T24643]  dump_header+0xd8/0x960
[ 2680.832558][T24643]  oom_kill_process+0xee/0x3a0
[ 2680.837334][T24643]  out_of_memory+0x5da/0x900
[ 2680.841923][T24643]  try_charge+0x1223/0x18d0
[ 2680.846441][T24643]  mem_cgroup_try_charge+0x20c/0x680
[ 2680.851808][T24643]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2680.857436][T24643]  wp_page_copy+0x349/0x1890
[ 2680.862174][T24643]  ? do_raw_spin_unlock+0x136/0x260
[ 2680.867394][T24643]  do_wp_page+0x5e5/0x1cc0
[ 2680.871811][T24643]  ? __kasan_check_write+0x14/0x20
[ 2680.877045][T24643]  handle_mm_fault+0x2ada/0x5ff0
[ 2680.882005][T24643]  do_user_addr_fault+0x589/0xaf0
[ 2680.887219][T24643]  __do_page_fault+0xd3/0x1f0
[ 2680.891899][T24643]  do_page_fault+0x99/0xb0
[ 2680.896314][T24643]  page_fault+0x39/0x40
[ 2680.900462][T24643] RIP: 0033:0x4041d9
[ 2680.904347][T24643] Code: 66 00 39 45 24 0f 84 a6 01 00 00 80 3d a8 e4 66 00 00 74 0e 48 8b 85 90 00 00 00 48 c7 00 00 00 00 00 e8 4a 0c 01 00 49 89 c4 <c7> 00 00 00 00 00 49 8b 46 10 48 85 c0 0f 84 3c 01 00 00 48 83 ec
[ 2680.923936][T24643] RSP: 002b:00007f4c176f1c90 EFLAGS: 00010207
[ 2680.929990][T24643] RAX: 00007f4c176f26d4 RBX: 0000000000000003 RCX: 0000000000000003
[ 2680.937950][T24643] RDX: 0000000000265cbd RSI: 0000000000000000 RDI: 00000000004bf10e
[ 2680.945915][T24643] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[ 2680.953890][T24643] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2680.961857][T24643] R13: 00000000004c9b54 R14: 00000000004e1d78 R15: 00000000ffffffff
[ 2680.970062][T24643] memory: usage 307200kB, limit 307200kB, failcnt 59796
[ 2680.977066][T24643] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2680.983260][ T1035] oom_reaper: reaped process 13602 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 2680.983909][T24643] Memory cgroup stats for /syz1:
[ 2680.983987][T24643] anon 259661824
[ 2680.983987][T24643] file 36864
[ 2680.983987][T24643] kernel_stack 7667712
[ 2680.983987][T24643] slab 15196160
[ 2680.983987][T24643] sock 0
[ 2680.983987][T24643] shmem 0
[ 2680.983987][T24643] file_mapped 0
[ 2680.983987][T24643] file_dirty 0
[ 2680.983987][T24643] file_writeback 0
[ 2680.983987][T24643] anon_thp 230686720
[ 2680.983987][T24643] inactive_anon 135168
[ 2680.983987][T24643] active_anon 259739648
[ 2680.983987][T24643] inactive_file 16384
[ 2680.983987][T24643] active_file 110592
[ 2680.983987][T24643] unevictable 0
[ 2680.983987][T24643] slab_reclaimable 3244032
[ 2680.983987][T24643] slab_unreclaimable 11952128
[ 2680.983987][T24643] pgfault 251922
[ 2680.983987][T24643] pgmajfault 0
[ 2680.983987][T24643] workingset_refault 165
[ 2680.983987][T24643] workingset_activate 66
[ 2680.983987][T24643] workingset_nodereclaim 0
[ 2680.983987][T24643] pgrefill 87100
[ 2680.983987][T24643] pgscan 163099
[ 2680.983987][T24643] pgsteal 74791
[ 2681.046852][T24762] debugfs: File 'msg' in directory 'loop0' already present!
[ 2681.089964][T24643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13561,uid=0
[ 2681.090074][T24643] Memory cgroup out of memory: Killed process 13561 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2681.131448][ T1035] oom_reaper: reaped process 13561 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 2681.160443][T24434] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2681.179679][T24762] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2681.188128][T24434] CPU: 1 PID: 24434 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2681.196479][T24434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2681.206543][T24434] Call Trace:
[ 2681.209831][T24434]  dump_stack+0x1fb/0x318
[ 2681.214151][T24434]  dump_header+0xd8/0x960
[ 2681.218469][T24434]  oom_kill_process+0xee/0x3a0
[ 2681.223211][T24434]  out_of_memory+0x5da/0x900
[ 2681.227787][T24434]  try_charge+0x1223/0x18d0
[ 2681.232285][T24434]  __memcg_kmem_charge+0x146/0x510
[ 2681.237376][T24434]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2681.242731][T24434]  alloc_pages_current+0x2db/0x500
[ 2681.247825][T24434]  pte_alloc_one+0x1f/0x180
[ 2681.252306][T24434]  __pte_alloc+0x20/0x2f0
[ 2681.256611][T24434]  handle_mm_fault+0x543a/0x5ff0
[ 2681.261544][T24434]  do_user_addr_fault+0x589/0xaf0
[ 2681.266553][T24434]  __do_page_fault+0xd3/0x1f0
[ 2681.271204][T24434]  do_page_fault+0x99/0xb0
[ 2681.275602][T24434]  page_fault+0x39/0x40
[ 2681.279739][T24434] RIP: 0033:0x400644
[ 2681.283613][T24434] Code: 06 e9 49 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 1f 48 8b 14 24 48 8b 7c 24 20 be 04 00 00 00 e8 91 55 00 00 48 8b 74 24 08 <89> 06 e9 1e 01 00 00 48 8b 44 24 08 48 8b 14 24 be 04 00 00 00 8b
[ 2681.303195][T24434] RSP: 002b:00007fffe25b97d0 EFLAGS: 00010202
[ 2681.309239][T24434] RAX: 000000000000000c RBX: 000000000075c9a0 RCX: 0000000000000000
[ 2681.317185][T24434] RDX: 0000000000000000 RSI: 0000000020cab000 RDI: 000000000000000c
[ 2681.325135][T24434] RBP: 00000000007608c0 R08: 0000000000000000 R09: 0000000000000000
[ 2681.333083][T24434] R10: 00007fffe25b98e0 R11: 0000000000000246 R12: 000000000075c070
[ 2681.341032][T24434] R13: 000000000028e725 R14: 00000000007608c8 R15: 000000000075c07c
[ 2681.359290][T24434] memory: usage 306660kB, limit 307200kB, failcnt 59796
[ 2681.369126][T24434] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2681.376915][T24434] Memory cgroup stats for /syz1:
[ 2681.376993][T24434] anon 259526656
[ 2681.376993][T24434] file 36864
[ 2681.376993][T24434] kernel_stack 7667712
[ 2681.376993][T24434] slab 15196160
[ 2681.376993][T24434] sock 0
[ 2681.376993][T24434] shmem 0
[ 2681.376993][T24434] file_mapped 0
[ 2681.376993][T24434] file_dirty 0
[ 2681.376993][T24434] file_writeback 0
[ 2681.376993][T24434] anon_thp 230686720
[ 2681.376993][T24434] inactive_anon 135168
[ 2681.376993][T24434] active_anon 259604480
[ 2681.376993][T24434] inactive_file 16384
[ 2681.376993][T24434] active_file 110592
[ 2681.376993][T24434] unevictable 0
[ 2681.376993][T24434] slab_reclaimable 3244032
[ 2681.376993][T24434] slab_unreclaimable 11952128
[ 2681.376993][T24434] pgfault 251922
[ 2681.376993][T24434] pgmajfault 0
[ 2681.376993][T24434] workingset_refault 165
[ 2681.376993][T24434] workingset_activate 66
[ 2681.376993][T24434] workingset_nodereclaim 0
[ 2681.376993][T24434] pgrefill 87133
[ 2681.376993][T24434] pgscan 163099
[ 2681.376993][T24434] pgsteal 74791
[ 2681.473166][T24434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13531,uid=0
[ 2681.490822][T24434] Memory cgroup out of memory: Killed process 13531 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0)

03:29:34 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r2, 0x0)
sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808)

03:29:34 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)

03:29:34 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8, 0x0, 0x0, 0x1], 0x0, 0xe1bcd1212c3910f9})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:29:34 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, 0x0)
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:34 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:34 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0xa808)

03:29:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000030, 0x0, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000140)=@routing={0x88, 0xa, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, @ipv4={[], [], @multicast2}, @rand_addr="aa9aa574d61cd4e86a58db1abc828f5d", @mcast1]}, 0x58)

[ 2681.858009][T24882] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2681.897324][T24882] debugfs: File 'msg' in directory 'loop0' already present!
03:29:34 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write(r0, &(0x7f0000000100)="b63db85e1e8d290000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48)

03:29:34 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./fi'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2681.919677][T24882] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:34 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(0xffffffffffffffff)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

[ 2682.039234][T25008] sg_write: data in/out 2723066/24 bytes for SCSI command 0xff-- guessing data in;
[ 2682.039234][T25008]    program syz-executor.2 not setting count and/or reply_len properly
[ 2682.158778][T25179] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2682.170960][T25179] debugfs: File 'msg' in directory 'loop0' already present!
[ 2682.179044][T25179] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0)

03:29:35 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

03:29:35 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:35 executing program 5:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/na\x93/pfkey\x00', 0x101000, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x8, &(0x7f0000000180)={@remote}, 0x14)
getpid()
r1 = getpid()
sched_setscheduler(r1, 0x5, 0x0)
socket$packet(0x11, 0x0, 0x300)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, 0x0, 0x0)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$midi(0x0, 0x0, 0x0)

03:29:35 executing program 2:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncc?\x00', 0x0, 0x0)

03:29:35 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(0xffffffffffffffff)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:35 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
flistxattr(r0, 0x0, 0x0)

03:29:35 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
set_tid_address(&(0x7f0000000100))
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0)
sendfile(r0, r2, &(0x7f0000000040)=0x100060, 0xa808)

03:29:35 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2682.614282][T25216] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2682.628913][T25216] debugfs: File 'msg' in directory 'loop0' already present!
[ 2682.665035][T25216] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:35 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file'], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:35 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000500))

03:29:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$P9_RCLUNK(r1, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x2000402)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000002c0)={0x4, r1, 0x0, 0x8})
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

03:29:36 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0xe0f5}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
rmdir(0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000480)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket(0x10, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{0x0}], 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0)

03:29:36 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:29:36 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(0xffffffffffffffff)
r22 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r23=>0xffffffffffffffff})
dup(r23)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r22, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r23, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:36 executing program 5:
r0 = socket(0x2, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2}, 0x8)

03:29:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], 0x0, &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x1)
setresuid(0x0, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000032000)=""/102385)

[ 2683.473339][T25568] sctp: [Deprecated]: syz-executor.5 (pid 25568) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2683.473339][T25568] Use struct sctp_sack_info instead
03:29:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], 0x0, &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

03:29:36 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100000000000000000000000000000000000000000000000000000000000000000000000000580638432b3b9b87a26742c39ee8cd20845989078dc8730614393c766d2de39a7d4c12706cb823b5ab2ec0e4fe6f5f1526520b996a42507be84a5c18f06d0125f262697fe055e0175061791dc8c0e4b5efb75766c23363138d9f9b065d03700056e38f6f83ca6607c8babda355789ae46329063c38f8f96e8798fd741f39f9cc0dc5732be4cd5982533351135da929fa85abaa4a46cecc31433eb2870536f598edbf9c1ff6d282a1fd44de6d4861d551"], 0x58}}, 0x0)

[ 2683.527912][T25565] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2683.554408][T25565] debugfs: File 'msg' in directory 'loop0' already present!
03:29:36 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[ 2683.598728][T25565] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2683.625651][T25784] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2683.637921][T25784] CPU: 0 PID: 25784 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2683.646321][T25784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2683.656483][T25784] Call Trace:
[ 2683.659779][T25784]  dump_stack+0x1fb/0x318
[ 2683.664093][T25784]  dump_header+0xd8/0x960
[ 2683.668410][T25784]  oom_kill_process+0xee/0x3a0
[ 2683.673176][T25784]  out_of_memory+0x5da/0x900
[ 2683.677760][T25784]  try_charge+0x1223/0x18d0
[ 2683.682263][T25784]  __memcg_kmem_charge+0x146/0x510
[ 2683.687372][T25784]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2683.692727][T25784]  alloc_pages_current+0x2db/0x500
[ 2683.697831][T25784]  get_zeroed_page+0x17/0x40
[ 2683.702398][T25784]  __pud_alloc+0x37/0x210
[ 2683.706704][T25784]  copy_page_range+0x2502/0x2840
[ 2683.711637][T25784]  ? init_admin_reserve+0xc0/0xc0
[ 2683.716654][T25784]  dup_mmap+0xa01/0xe00
[ 2683.720795][T25784]  dup_mm+0x9e/0x340
[ 2683.724667][T25784]  copy_process+0x23d9/0x5c00
[ 2683.729342][T25784]  _do_fork+0x13e/0x660
[ 2683.733481][T25784]  ? check_preemption_disabled+0xb4/0x260
[ 2683.739173][T25784]  ? debug_smp_processor_id+0x9/0x20
[ 2683.744438][T25784]  ? debug_smp_processor_id+0x1c/0x20
[ 2683.749795][T25784]  __x64_sys_clone+0x20b/0x250
[ 2683.754551][T25784]  do_syscall_64+0xf7/0x1c0
[ 2683.759037][T25784]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2683.764907][T25784] RIP: 0033:0x45a679
[ 2683.768780][T25784] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2683.788361][T25784] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
03:29:36 executing program 5:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000086)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

[ 2683.796750][T25784] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2683.804709][T25784] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2683.812666][T25784] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2683.820617][T25784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2683.828564][T25784] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2683.837184][T25784] memory: usage 307200kB, limit 307200kB, failcnt 59820
[ 2683.844347][T25784] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2683.851307][T25784] Memory cgroup stats for /syz1:
[ 2683.851377][T25784] anon 259751936
[ 2683.851377][T25784] file 36864
[ 2683.851377][T25784] kernel_stack 7667712
[ 2683.851377][T25784] slab 15466496
[ 2683.851377][T25784] sock 0
[ 2683.851377][T25784] shmem 0
[ 2683.851377][T25784] file_mapped 0
[ 2683.851377][T25784] file_dirty 0
[ 2683.851377][T25784] file_writeback 0
[ 2683.851377][T25784] anon_thp 230686720
[ 2683.851377][T25784] inactive_anon 135168
[ 2683.851377][T25784] active_anon 259874816
03:29:36 executing program 2:

[ 2683.851377][T25784] inactive_file 16384
[ 2683.851377][T25784] active_file 110592
[ 2683.851377][T25784] unevictable 0
[ 2683.851377][T25784] slab_reclaimable 3379200
[ 2683.851377][T25784] slab_unreclaimable 12087296
[ 2683.851377][T25784] pgfault 252186
[ 2683.851377][T25784] pgmajfault 0
[ 2683.851377][T25784] workingset_refault 165
[ 2683.851377][T25784] workingset_activate 66
[ 2683.851377][T25784] workingset_nodereclaim 0
[ 2683.851377][T25784] pgrefill 87232
[ 2683.851377][T25784] pgscan 163231
[ 2683.851377][T25784] pgsteal 74791
[ 2683.946351][T25784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13523,uid=0
[ 2683.946443][T25784] Memory cgroup out of memory: Killed process 13523 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2683.980591][ T1035] oom_reaper: reaped process 13523 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
03:29:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], 0x0, &(0x7f0000000200)='iso9660\x00', 0x0, 0x0)

[ 2684.018385][T25784] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2684.030303][T25784] CPU: 0 PID: 25784 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2684.038634][T25784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2684.048693][T25784] Call Trace:
[ 2684.051996][T25784]  dump_stack+0x1fb/0x318
[ 2684.056340][T25784]  dump_header+0xd8/0x960
[ 2684.060691][T25784]  oom_kill_process+0xee/0x3a0
[ 2684.065474][T25784]  out_of_memory+0x5da/0x900
[ 2684.070089][T25784]  try_charge+0x1223/0x18d0
[ 2684.074638][T25784]  __memcg_kmem_charge+0x146/0x510
[ 2684.079768][T25784]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2684.085168][T25784]  alloc_pages_current+0x2db/0x500
[ 2684.090303][T25784]  get_zeroed_page+0x17/0x40
[ 2684.094906][T25784]  __pud_alloc+0x37/0x210
[ 2684.099261][T25784]  copy_page_range+0x2502/0x2840
[ 2684.104219][T25784]  ? anon_vma_fork+0x4a5/0x540
[ 2684.109016][T25784]  ? vma_gap_callbacks_rotate+0x1ee/0x230
[ 2684.114761][T25784]  ? init_admin_reserve+0xc0/0xc0
[ 2684.119810][T25784]  dup_mmap+0xa01/0xe00
[ 2684.123998][T25784]  dup_mm+0x9e/0x340
[ 2684.127897][T25784]  copy_process+0x23d9/0x5c00
[ 2684.127940][T25784]  _do_fork+0x13e/0x660
[ 2684.136763][T25784]  ? check_preemption_disabled+0xb4/0x260
[ 2684.142512][T25784]  ? debug_smp_processor_id+0x9/0x20
[ 2684.147810][T25784]  ? debug_smp_processor_id+0x1c/0x20
[ 2684.153193][T25784]  __x64_sys_clone+0x20b/0x250
[ 2684.158097][T25784]  do_syscall_64+0xf7/0x1c0
[ 2684.158116][T25784]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2684.158127][T25784] RIP: 0033:0x45a679
[ 2684.158138][T25784] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2684.158143][T25784] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2684.200409][T25784] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a679
[ 2684.200416][T25784] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[ 2684.200422][T25784] RBP: 000000000075c070 R08: ffffffffffffffff R09: 0000000000000000
[ 2684.200427][T25784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2684.200432][T25784] R13: 00000000004c0d71 R14: 00000000004d3d68 R15: 00000000ffffffff
[ 2684.200983][T25784] memory: usage 307036kB, limit 307200kB, failcnt 59994
[ 2684.247630][T25784] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2684.254475][T25784] Memory cgroup stats for /syz1:
[ 2684.254555][T25784] anon 259751936
[ 2684.254555][T25784] file 36864
[ 2684.254555][T25784] kernel_stack 7667712
[ 2684.254555][T25784] slab 15466496
[ 2684.254555][T25784] sock 0
[ 2684.254555][T25784] shmem 0
[ 2684.254555][T25784] file_mapped 0
[ 2684.254555][T25784] file_dirty 0
[ 2684.254555][T25784] file_writeback 0
[ 2684.254555][T25784] anon_thp 230686720
[ 2684.254555][T25784] inactive_anon 135168
[ 2684.254555][T25784] active_anon 259739648
[ 2684.254555][T25784] inactive_file 16384
[ 2684.254555][T25784] active_file 110592
[ 2684.254555][T25784] unevictable 0
[ 2684.254555][T25784] slab_reclaimable 3379200
[ 2684.254555][T25784] slab_unreclaimable 12087296
[ 2684.254555][T25784] pgfault 252186
[ 2684.254555][T25784] pgmajfault 0
[ 2684.254555][T25784] workingset_refault 165
[ 2684.254555][T25784] workingset_activate 66
[ 2684.254555][T25784] workingset_nodereclaim 0
[ 2684.254555][T25784] pgrefill 87232
[ 2684.254555][T25784] pgscan 163231
[ 2684.254555][T25784] pgsteal 74791
[ 2684.349811][T25784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13513,uid=0
[ 2684.365352][T25784] Memory cgroup out of memory: Killed process 13513 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2684.384584][ T1035] oom_reaper: reaped process 13513 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
03:29:37 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(0x0, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:37 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:29:37 executing program 2:

03:29:37 executing program 5:

03:29:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

03:29:37 executing program 1:

03:29:37 executing program 2:

[ 2684.533201][T26002] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2684.541327][T26002] debugfs: File 'msg' in directory 'loop0' already present!
[ 2684.549158][T26002] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:37 executing program 5:

03:29:37 executing program 4:

03:29:37 executing program 1:

03:29:37 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(0x0, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

03:29:37 executing program 2:

03:29:37 executing program 4:

03:29:37 executing program 5:

03:29:37 executing program 1:

03:29:37 executing program 2:

[ 2684.778895][T26017] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:37 executing program 4:

[ 2684.819728][T26017] debugfs: File 'msg' in directory 'loop0' already present!
[ 2684.836563][T26017] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:37 executing program 5:

03:29:37 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

03:29:37 executing program 1:

03:29:37 executing program 2:

03:29:37 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(0x0, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:37 executing program 4:

03:29:37 executing program 5:

03:29:37 executing program 2:

03:29:37 executing program 1:

03:29:37 executing program 5:

03:29:37 executing program 0:

03:29:38 executing program 1:

03:29:38 executing program 4:

03:29:38 executing program 2:

03:29:38 executing program 0:

[ 2685.173759][T26047] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2685.208764][T26047] debugfs: File 'msg' in directory 'loop0' already present!
03:29:38 executing program 1:

[ 2685.255116][T26047] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:38 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, 0x0)
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:38 executing program 5:

03:29:38 executing program 2:

03:29:38 executing program 4:

03:29:38 executing program 0:

03:29:38 executing program 1:

03:29:38 executing program 5:

03:29:38 executing program 0:

03:29:38 executing program 2:

03:29:38 executing program 4:

03:29:38 executing program 1:

03:29:38 executing program 0:

[ 2685.537649][T26067] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2685.574295][T26067] debugfs: File 'msg' in directory 'loop0' already present!
[ 2685.613874][T26067] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:38 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, 0x0)
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:38 executing program 2:

03:29:38 executing program 4:

03:29:38 executing program 5:

03:29:38 executing program 1:

03:29:38 executing program 0:

03:29:38 executing program 5:

03:29:38 executing program 0:

03:29:38 executing program 1:

03:29:38 executing program 4:

03:29:38 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffa)

03:29:38 executing program 5:

[ 2685.847017][T26085] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2685.854730][T26085] debugfs: File 'msg' in directory 'loop0' already present!
[ 2685.895088][T26085] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:38 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, 0x0)
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:38 executing program 1:

03:29:38 executing program 4:

03:29:38 executing program 0:

03:29:38 executing program 2:

03:29:38 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000000)='net/un8.|\x19\x1c\n}\x85FI\xacr\xfd;\xce\x82\x85\xd9\x84\xa2\x0f\t\x9d8\x93\xcfC~\xe6O\x18\xf7\xddoh\xdcg\xe4O\xdb+\xf2\x81\xb2r/\xcbl\xca\x1b\x99m\xce\x9ca')

03:29:38 executing program 5:
waitid(0x0, 0x0, 0x0, 0x4, 0x0)

03:29:38 executing program 4:
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)

03:29:38 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0x32, 0x4)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
sendmmsg$inet(r0, &(0x7f0000004940)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @dev, @multicast2}}}], 0x20}}], 0x1, 0x0)

03:29:38 executing program 0:
r0 = memfd_create(&(0x7f0000000080)='/dev/aut*Sofs\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r0, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000240))

03:29:38 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x4002)
io_setup(0xc32f, &(0x7f0000000440)=<r5=>0x0)
ftruncate(r4, 0x4827d)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])

03:29:39 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$getflags(r0, 0x401)

[ 2686.195415][T26107] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2686.251135][T26107] debugfs: File 'msg' in directory 'loop0' already present!
[ 2686.261205][T26107] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:39 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:39 executing program 1:
unshare(0x1700)

03:29:39 executing program 0:
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x0, 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_cancel(0x0, 0x0, &(0x7f00000017c0))
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac)
mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x8012, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

03:29:39 executing program 4:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, r0)

03:29:39 executing program 5:
futex(0x0, 0x81, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)

03:29:39 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ab", 0x1, 0xfffffffffffffffb)

03:29:39 executing program 5:
futex(0x0, 0x81, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)

03:29:39 executing program 2:
getrandom(&(0x7f0000000140)=""/147, 0x93, 0x2)

03:29:39 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000004c0))

[ 2686.443872][T26235] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2686.452495][T26235] debugfs: File 'msg' in directory 'loop0' already present!
[ 2686.465455][T26235] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:39 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x800006}]}, 0x10)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x28)
sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = fcntl$dupfd(r1, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

03:29:39 executing program 5:
futex(0x0, 0x81, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)

03:29:39 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:39 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sd\xf8', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$chown(0x4, r2, 0x0, 0x0)

03:29:39 executing program 1:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1)

03:29:39 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432})

03:29:39 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
close(r0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb15404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c582f016a33775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300), 0x4)
sendfile(r0, r2, 0x0, 0x8000fffffffe)

[ 2686.771478][T26455] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:39 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

03:29:39 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000004f00)=[{{&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0)

03:29:39 executing program 2:
socket(0x11, 0x800000003, 0x81)

[ 2686.827620][T26455] debugfs: File 'msg' in directory 'loop0' already present!
[ 2686.835132][T26455] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2686.855841][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2686.861708][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2686.956897][T26668] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2687.013913][T26668] CPU: 1 PID: 26668 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2687.022295][T26668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2687.032366][T26668] Call Trace:
[ 2687.035681][T26668]  dump_stack+0x1fb/0x318
[ 2687.040034][T26668]  dump_header+0xd8/0x960
[ 2687.044387][T26668]  oom_kill_process+0xee/0x3a0
[ 2687.049172][T26668]  out_of_memory+0x5da/0x900
[ 2687.053781][T26668]  try_charge+0x1223/0x18d0
[ 2687.058327][T26668]  mem_cgroup_try_charge+0x20c/0x680
[ 2687.063637][T26668]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2687.069282][T26668]  wp_page_copy+0x349/0x1890
[ 2687.073888][T26668]  ? do_raw_spin_unlock+0x136/0x260
[ 2687.079099][T26668]  do_wp_page+0x5e5/0x1cc0
[ 2687.083533][T26668]  ? __kasan_check_write+0x14/0x20
[ 2687.088652][T26668]  ? do_raw_spin_lock+0xea/0x2d0
[ 2687.093609][T26668]  handle_mm_fault+0x2ada/0x5ff0
[ 2687.098577][T26668]  do_user_addr_fault+0x589/0xaf0
[ 2687.103619][T26668]  __do_page_fault+0xd3/0x1f0
[ 2687.108302][T26668]  do_page_fault+0x99/0xb0
[ 2687.112726][T26668]  page_fault+0x39/0x40
[ 2687.116885][T26668] RIP: 0010:__put_user_4+0x1c/0x30
[ 2687.121995][T26668] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 1d 02 00 48 8b 9b 90 14 00 00 48 83 eb 03 48 39 d9 73 4a 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48
[ 2687.141596][T26668] RSP: 0018:ffff88805a037c58 EFLAGS: 00010293
[ 2687.141606][T26668] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000200092f8
[ 2687.141612][T26668] RDX: 00000000200092c0 RSI: ffff8880577d4978 RDI: 0000000000000286
[ 2687.141617][T26668] RBP: ffff88805a037ed8 R08: dffffc0000000000 R09: fffffbfff11bd5fd
[ 2687.141622][T26668] R10: fffffbfff11bd5fd R11: 0000000000000000 R12: 0000000000000000
[ 2687.141627][T26668] R13: 0000000000000001 R14: ffff88805a037d10 R15: 0000000000040000
[ 2687.141665][T26668]  ? __sys_sendmmsg+0x3fa/0x5b0
[ 2687.141704][T26668]  ? check_preemption_disabled+0xb4/0x260
[ 2687.155733][T26668]  ? debug_smp_processor_id+0x9/0x20
[ 2687.155750][T26668]  ? debug_smp_processor_id+0x1c/0x20
[ 2687.155764][T26668]  ? fpregs_assert_state_consistent+0xb7/0xe0
03:29:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000580)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

03:29:40 executing program 5:
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

[ 2687.155779][T26668]  ? prepare_exit_to_usermode+0x221/0x5b0
[ 2687.155790][T26668]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 2687.155800][T26668]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2687.155807][T26668]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 2687.155825][T26668]  __x64_sys_sendmmsg+0xa0/0xb0
[ 2687.155841][T26668]  do_syscall_64+0xf7/0x1c0
[ 2687.246841][T26668]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2687.252745][T26668] RIP: 0033:0x45a679
[ 2687.256650][T26668] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2687.276270][T26668] RSP: 002b:00007f4c17733c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2687.284753][T26668] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679
[ 2687.292713][T26668] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000003
[ 2687.300677][T26668] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 2687.308638][T26668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c177346d4
[ 2687.316601][T26668] R13: 00000000004c862c R14: 00000000004df318 R15: 00000000ffffffff
[ 2687.328958][T26668] memory: usage 307200kB, limit 307200kB, failcnt 60052
[ 2687.336145][T26668] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2687.342997][T26668] Memory cgroup stats for /syz1:
[ 2687.343098][T26668] anon 259616768
[ 2687.343098][T26668] file 36864
[ 2687.343098][T26668] kernel_stack 7536640
[ 2687.343098][T26668] slab 15872000
[ 2687.343098][T26668] sock 0
[ 2687.343098][T26668] shmem 0
[ 2687.343098][T26668] file_mapped 0
[ 2687.343098][T26668] file_dirty 0
[ 2687.343098][T26668] file_writeback 0
[ 2687.343098][T26668] anon_thp 230686720
[ 2687.343098][T26668] inactive_anon 135168
[ 2687.343098][T26668] active_anon 259604480
[ 2687.343098][T26668] inactive_file 16384
[ 2687.343098][T26668] active_file 110592
[ 2687.343098][T26668] unevictable 0
[ 2687.343098][T26668] slab_reclaimable 3514368
[ 2687.343098][T26668] slab_unreclaimable 12357632
[ 2687.343098][T26668] pgfault 252978
[ 2687.343098][T26668] pgmajfault 0
03:29:40 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/222)

03:29:40 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:40 executing program 5:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071")
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001e0001000000000000e9ff000700000014000000000000e40d72e40052159c602d512643dc0b0cf369876d7f646837e500"/68], 0x28}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

03:29:40 executing program 0:

03:29:40 executing program 2:
getpid()
write(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f0000000240)='./control\x00', 0x0)
rmdir(&(0x7f0000000080)='./control\x00')

[ 2687.343098][T26668] workingset_refault 165
[ 2687.343098][T26668] workingset_activate 66
[ 2687.343098][T26668] workingset_nodereclaim 0
[ 2687.343098][T26668] pgrefill 87232
[ 2687.343098][T26668] pgscan 163231
[ 2687.343098][T26668] pgsteal 74791
[ 2687.448420][T26668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13499,uid=0
03:29:40 executing program 0:
open(0x0, 0x0, 0x0)
creat(0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)='ppp1ppp1\x00')
tkill(0x0, 0x3c)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000500)={0x0, 0x0, 0xff, 0x6, 0x6, 0x800, 0x0, 0x0, 0x0, 0x5, 0xe7, 0x0, 0x80, 0xe7, 0x0, 0x0, 0x8})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext={0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000001f3300720d815a08434c676b194e25ec44c243537b76260883458e5a9952f926bf319b62f148529b03231a93f125ed4a2e6072139e736eff431fbe69edcbca5d59106cd154a9c18817908e22fe8ea4795d766ce25c57fe99776cadcb31de6bd3032b070675958bb23497b3a1b216c8053dd7b8fb4e23165ffdb884751dada2964cd073de66af1c7508b360dcbd52f96349f056ba09000000b46f2d9730297e7a661887a6fb5c94a4c61b6eb73001be14f0ba3035fde0092484874c221f972e525545da1a4a24c1c31bf23fc0042de9dba6c21cbe2c2774023cea7e06c3a2c9be209ff64c154b9f8de3f847f91ea42c212a4b43fdb8e8e6c8962e50cc3193871ee5a3775ad5973ce49ecb7300a08a041c39d647015d5d433cf7d349c4938ff535c33e7d1ce94214ab1d6927600728925404aa7f4d663989082bd4325a576c06869d8959745706fda5ff953c0e0c94c645a50b6145998f6ad1c3636080db0bc1d08d3dcd55a39760b29c393a43ef7d5c0b7a04d16f961be471d66eba2a9616bf328615bd"], 0x119)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
dup2(r5, r3)

[ 2687.553044][T26668] Memory cgroup out of memory: Killed process 13499 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:40 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a9890000007ba79554354cdddb4e767263a7192f6f0100000028db38a5668b145e6313f3ee41e2f28204b8de607a25340b579ac761976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914fb6ee79d501a7aa400000080000000d4bf66e8d85cc74a00"/143], 0x10}}, 0x0)

[ 2687.594555][T26896] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2687.607449][T26896] debugfs: File 'msg' in directory 'loop0' already present!
[ 2687.615604][T26896] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2687.630467][ T1035] oom_reaper: reaped process 13499 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
03:29:40 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

03:29:40 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:40 executing program 4:
clock_adjtime(0x0, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x800, 0x101, 0x0, 0x0, 0x6, 0x7105, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbfb1, 0x8000, 0x40, 0x0, 0x80000001, 0x6, 0x4})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r0, &(0x7f0000002dc0), 0x2d3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f0000000180)=@x25={0x9, @remote}, 0x19e, 0x0}}], 0x33c, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4)

03:29:40 executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x3, 0x5)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00')
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000880)='./file0\x00', 0x100)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r4 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x15<g8\xddGdF(\xeaN\xbcSoz\xe5.c\xdf\x8b\xd2m}\xc7D\x98\xd4p.e\x050,c9:\x95z\xe2\xa9\xcf\xd2\x90*\xaa\xc0W.\xcb|.F_\xf8(\xa4\x91\xc8\v\x9b>3\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0)
ftruncate(r4, 0x1000000)
sendfile(r3, r4, 0x0, 0xeefffdef)
clock_gettime(0x0, 0x0)
futimesat(r3, &(0x7f00000008c0)='./file0\x00', 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000006c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xce, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400006)
syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x416082)

03:29:40 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:29:41 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2688.147151][T27210] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))

[ 2688.192211][T27210] debugfs: File 'msg' in directory 'loop0' already present!
[ 2688.230814][T27210] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:41 executing program 4:
r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x802)
write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "b4aeccb8175d29b813cf46f83844147297790bb3b5582bb646ec61193dd208eaab50c15514b136b51f077d74950d25eb5d44fbe47bc30000005d0521caa5d2eedb29f82235b969332a08c099a5964924b7284959588b40a705502cc30333855712117e8432618fc086b0692a63f2"}, 0x79)

03:29:41 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:29:41 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:41 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:41 executing program 0:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3)
socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
close(0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x2000000000000c)
writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x188)
getpid()
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
ptrace$poke(0x5, 0x0, &(0x7f00000000c0), 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x1)
ioctl(r1, 0x1000008912, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f0000000200))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0)
dup3(r8, r9, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$KVM_GET_SREGS(r14, 0x8138ae83, &(0x7f0000000880))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
pipe(&(0x7f0000000140)={<r15=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x80000, 0x100)
dup3(r15, r3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:29:41 executing program 4:
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = creat(0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc)
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000005b00)="1213772e65e4075827a85fddef692ef3", 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
syz_open_pts(0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x7, 0x0, "f39dd3a36affe5e5f716d7df4512b10f179d2017e408d329996ea19266e6039d449ff9f4ee7ed8c6326c64e5946837894106eef44b7475620d2a2b22631e11821808dbabd4ed8e2c14ae396ba9dff37b"}, 0xd8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = getpid()
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@rand_addr="ea01ed8078daae0ee96d5c07b524ab84", 0x0, r2})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x3bf, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x20, 0x2, [@IFLA_GRE_LOCAL={0x14, 0xb, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r5}]]}}}]}, 0x54}}, 0x0)
tkill(r1, 0x9)

03:29:41 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:41 executing program 1:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0)

[ 2688.504770][T27630] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2688.528792][T27630] debugfs: File 'msg' in directory 'loop0' already present!
[ 2688.592657][T27630] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:41 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2688.658061][T27639] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2688.792549][T27639] batman_adv: Cannot find parent device
03:29:41 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:41 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:41 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
r0 = getpid()
tkill(r0, 0x9)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f00000000c0)=0x77, 0x4)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r2, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x32, 0x0, 0x27)

03:29:41 executing program 1:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4}}}]}, 0x38}}, 0x0)

03:29:41 executing program 4:
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = creat(0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc)
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000005b00)="1213772e65e4075827a85fddef692ef3", 0x10)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
syz_open_pts(0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x7, 0x0, "f39dd3a36affe5e5f716d7df4512b10f179d2017e408d329996ea19266e6039d449ff9f4ee7ed8c6326c64e5946837894106eef44b7475620d2a2b22631e11821808dbabd4ed8e2c14ae396ba9dff37b"}, 0xd8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = getpid()
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@rand_addr="ea01ed8078daae0ee96d5c07b524ab84", 0x0, r2})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x3bf, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x20, 0x2, [@IFLA_GRE_LOCAL={0x14, 0xb, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r5}]]}}}]}, 0x54}}, 0x0)
tkill(r1, 0x9)

03:29:41 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:29:41 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:42 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2689.110869][T27855] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2689.127457][T27855] debugfs: File 'msg' in directory 'loop0' already present!
[ 2689.135148][T27855] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:42 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
setpriority(0x1, r0, 0x0)

03:29:42 executing program 5:
pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7)

03:29:42 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
dup(0xffffffffffffffff)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:42 executing program 0:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000002180), 0x3c3)
socket$inet6(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
close(0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x2000000000000c)
writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff", 0x1c}], 0x1)
getpid()
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
ptrace$poke(0x5, 0x0, &(0x7f00000000c0), 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x1)
ioctl(r1, 0x1000008912, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff})
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0)
dup3(r9, r11, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r14, r15, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0xffffffffffffffbf, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c)
ioctl$KVM_RUN(r15, 0xae80, 0x0)
r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$KVM_GET_SREGS(r16, 0x8138ae83, &(0x7f0000000880))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
pipe(&(0x7f0000000140)={<r17=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x80000, 0x100)
dup3(r17, r3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

03:29:42 executing program 5:
pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7)

03:29:42 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 2689.370088][T27863] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
03:29:42 executing program 5:
pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7)

[ 2689.462210][T27863] batman_adv: Cannot find parent device
[ 2689.479043][T27987] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2689.515438][T27987] debugfs: File 'msg' in directory 'loop0' already present!
[ 2689.575321][T27987] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:42 executing program 5:
r0 = memfd_create(0x0, 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:42 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:29:42 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
dup(0xffffffffffffffff)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:42 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x200})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:29:42 executing program 5:
r0 = memfd_create(0x0, 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:42 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12)
write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

03:29:42 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xfffffffc}, {0x80000006}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[ 2690.011135][T28106] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2690.020037][T28106] debugfs: File 'msg' in directory 'loop0' already present!
[ 2690.028105][T28106] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2690.055869][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2690.061793][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2690.067689][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2690.073475][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2690.079404][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2690.085208][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 2690.091123][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 2690.096924][    C0] protocol 88fb is buggy, dev hsr_slave_1
03:29:43 executing program 5:
r0 = memfd_create(0x0, 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:43 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000000380)=0xc)
r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r4, r3, 0x0)

03:29:43 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
dup(0xffffffffffffffff)
r24 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r24, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT, @ANYRESHEX=r25])
r26 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r26, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r26, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r27)
r28 = socket$inet_udp(0x2, 0x2, 0x0)
close(r28)
setsockopt(r28, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
r30 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r31 = socket$inet_udp(0x2, 0x2, 0x0)
close(r31)
setsockopt(r31, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r32 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r29}}}, @rights={{0x2c, 0x1, 0x1, [r30, 0xffffffffffffffff, r2, r31, 0xffffffffffffffff, r32, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:43 executing program 4:
perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x4, 0x2, [@gre_common_policy]}}}]}, 0x38}}, 0x0)

03:29:43 executing program 1:

03:29:43 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2690.487022][T28347] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2690.494746][T28347] debugfs: File 'msg' in directory 'loop0' already present!
[ 2690.504687][T28347] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:43 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:29:43 executing program 1:

03:29:43 executing program 0:

03:29:43 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:43 executing program 4:

03:29:43 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(0xffffffffffffffff)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:43 executing program 0:

03:29:43 executing program 4:

03:29:43 executing program 1:

03:29:43 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2690.901737][T28535] debugfs: File 'dropped' in directory 'loop0' already present!
03:29:43 executing program 4:

03:29:43 executing program 1:

[ 2690.948521][T28535] debugfs: File 'msg' in directory 'loop0' already present!
[ 2690.991476][T28535] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:44 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100)

03:29:44 executing program 0:

03:29:44 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, 0x0, 0x0, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:44 executing program 1:

03:29:44 executing program 4:

03:29:44 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(0xffffffffffffffff)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:44 executing program 0:

03:29:44 executing program 1:

03:29:44 executing program 4:

03:29:44 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, 0x0, 0x0, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2691.787330][T28556] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2691.814685][T28556] debugfs: File 'msg' in directory 'loop0' already present!
03:29:44 executing program 1:

03:29:44 executing program 0:

[ 2691.840165][T28556] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:45 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100)

03:29:45 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, 0x0, 0x0, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:45 executing program 4:

03:29:45 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(0xffffffffffffffff)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:45 executing program 1:

03:29:45 executing program 0:

03:29:45 executing program 1:

03:29:45 executing program 4:

03:29:45 executing program 0:

03:29:45 executing program 4:

03:29:45 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90), 0x0, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:45 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
dup(0xffffffffffffffff)
setresuid(0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f00000002c0))
sched_setattr(0x0, 0x0, 0x0)
socket$packet(0x11, 0x297fb3cd43a6b508, 0x300)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x204, 0x400, 0x0, 0x0, 0x40000000000, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10000, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000240)={0x4, [0x0, 0x0, 0x0, 0x0]})

[ 2692.701260][T28581] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2692.733366][T28581] debugfs: File 'msg' in directory 'loop0' already present!
[ 2692.770927][T28581] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:46 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x9f)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100)

03:29:46 executing program 0:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x40000000008, &(0x7f0000000240)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])

03:29:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x364c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r5 = dup(0xffffffffffffffff)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000540)={0x44}, 0xffdf)
ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, 0x0)
fallocate(r4, 0x0, 0x0, 0x1000100)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0)
lseek(r4, 0x0, 0x3)
r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0)

03:29:46 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90), 0x0, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:46 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
fstatfs(r0, &(0x7f0000000080)=""/19)

[ 2693.459668][ T8221] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0
[ 2693.517037][ T8221] CPU: 1 PID: 8221 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2693.522093][T28599] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2693.525308][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2693.525314][ T8221] Call Trace:
[ 2693.525336][ T8221]  dump_stack+0x1fb/0x318
[ 2693.525359][ T8221]  dump_header+0xd8/0x960
[ 2693.554961][ T8221]  oom_kill_process+0xee/0x3a0
[ 2693.559740][ T8221]  out_of_memory+0x5da/0x900
[ 2693.564347][ T8221]  try_charge+0x1223/0x18d0
[ 2693.567420][T28599] debugfs: File 'msg' in directory 'loop0' already present!
[ 2693.568881][ T8221]  __memcg_kmem_charge+0x146/0x510
[ 2693.568900][ T8221]  __alloc_pages_nodemask+0x29a/0x5d0
[ 2693.586645][ T8221]  alloc_pages_current+0x2db/0x500
[ 2693.591776][ T8221]  pte_alloc_one+0x1f/0x180
[ 2693.592478][T28599] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2693.596283][ T8221]  __pte_alloc+0x20/0x2f0
[ 2693.596295][ T8221]  copy_page_range+0x2315/0x2840
[ 2693.596327][ T8221]  ? vma_gap_callbacks_rotate+0x1fc/0x230
[ 2693.596346][ T8221]  ? __vma_link_rb+0x839/0x860
[ 2693.596361][ T8221]  dup_mmap+0xa01/0xe00
[ 2693.596382][ T8221]  dup_mm+0x9e/0x340
[ 2693.596391][ T8221]  copy_process+0x23d9/0x5c00
[ 2693.596427][ T8221]  _do_fork+0x13e/0x660
[ 2693.596440][ T8221]  ? check_preemption_disabled+0xb4/0x260
[ 2693.596448][ T8221]  ? debug_smp_processor_id+0x9/0x20
[ 2693.596459][ T8221]  ? debug_smp_processor_id+0x1c/0x20
[ 2693.596472][ T8221]  __x64_sys_clone+0x20b/0x250
[ 2693.596494][ T8221]  do_syscall_64+0xf7/0x1c0
[ 2693.596511][ T8221]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2693.671892][ T8221] RIP: 0033:0x458c4a
[ 2693.675775][ T8221] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[ 2693.695367][ T8221] RSP: 002b:00007fffe25b9970 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2693.703760][ T8221] RAX: ffffffffffffffda RBX: 00007fffe25b9970 RCX: 0000000000458c4a
03:29:46 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90), 0x0, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2693.711710][ T8221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 2693.719658][ T8221] RBP: 00007fffe25b99b0 R08: 0000000000000001 R09: 0000000000e9f940
[ 2693.727607][ T8221] R10: 0000000000e9fc10 R11: 0000000000000246 R12: 0000000000000001
[ 2693.735558][ T8221] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffe25b9a00
[ 2693.749667][ T8221] memory: usage 307200kB, limit 307200kB, failcnt 60112
[ 2693.759072][ T8221] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2693.769830][ T8221] Memory cgroup stats for /syz1:
[ 2693.769917][ T8221] anon 259477504
[ 2693.769917][ T8221] file 36864
[ 2693.769917][ T8221] kernel_stack 7471104
[ 2693.769917][ T8221] slab 16007168
[ 2693.769917][ T8221] sock 0
[ 2693.769917][ T8221] shmem 0
[ 2693.769917][ T8221] file_mapped 0
[ 2693.769917][ T8221] file_dirty 0
[ 2693.769917][ T8221] file_writeback 0
[ 2693.769917][ T8221] anon_thp 230686720
[ 2693.769917][ T8221] inactive_anon 135168
[ 2693.769917][ T8221] active_anon 259604480
[ 2693.769917][ T8221] inactive_file 16384
03:29:46 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:46 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:46 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

[ 2693.769917][ T8221] active_file 110592
[ 2693.769917][ T8221] unevictable 0
[ 2693.769917][ T8221] slab_reclaimable 3649536
[ 2693.769917][ T8221] slab_unreclaimable 12357632
[ 2693.769917][ T8221] pgfault 254892
[ 2693.769917][ T8221] pgmajfault 0
[ 2693.769917][ T8221] workingset_refault 165
[ 2693.769917][ T8221] workingset_activate 66
[ 2693.769917][ T8221] workingset_nodereclaim 0
[ 2693.769917][ T8221] pgrefill 87265
[ 2693.769917][ T8221] pgscan 163231
[ 2693.769917][ T8221] pgsteal 74791
03:29:46 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_int(r0, 0x0, 0x17, 0x0, &(0x7f00000001c0))

03:29:46 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2693.879443][ T8221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13321,uid=0
[ 2693.947945][ T8221] Memory cgroup out of memory: Killed process 13321 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
03:29:47 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:29:47 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe)
syz_open_procfs(0x0, 0x0)

03:29:47 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:47 executing program 4:
rt_sigsuspend(&(0x7f00000002c0), 0x8)

03:29:47 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:47 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

03:29:47 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2694.511718][T28730] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2694.531573][T28730] debugfs: File 'msg' in directory 'loop0' already present!
[ 2694.544982][T28730] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:47 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2694.581651][T28729] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2694.627331][T28729] CPU: 0 PID: 28729 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2694.635877][T28729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2694.645935][T28729] Call Trace:
[ 2694.649238][T28729]  dump_stack+0x1fb/0x318
[ 2694.653581][T28729]  dump_header+0xd8/0x960
[ 2694.657922][T28729]  oom_kill_process+0xee/0x3a0
[ 2694.662710][T28729]  out_of_memory+0x5da/0x900
[ 2694.667306][T28729]  try_charge+0x1223/0x18d0
[ 2694.671834][T28729]  mem_cgroup_try_charge+0x20c/0x680
03:29:47 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2694.677130][T28729]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2694.682786][T28729]  wp_page_copy+0x349/0x1890
[ 2694.687391][T28729]  ? do_raw_spin_unlock+0x136/0x260
[ 2694.692592][T28729]  do_wp_page+0x5e5/0x1cc0
[ 2694.697011][T28729]  ? __kasan_check_write+0x14/0x20
[ 2694.702134][T28729]  handle_mm_fault+0x2ada/0x5ff0
[ 2694.707098][T28729]  do_user_addr_fault+0x589/0xaf0
[ 2694.712136][T28729]  __do_page_fault+0xd3/0x1f0
[ 2694.716815][T28729]  do_page_fault+0x99/0xb0
[ 2694.721237][T28729]  page_fault+0x39/0x40
[ 2694.725385][T28729] RIP: 0033:0x40d7fb
[ 2694.729279][T28729] Code: 50 80 60 20 01 48 89 48 10 48 8b 4c 24 60 48 89 48 18 8b 4c 24 68 89 48 24 8b 4c 24 28 89 48 28 31 c0 48 8b 8c 04 20 01 00 00 <48> 89 8c 02 50 bf 75 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f
[ 2694.748988][T28729] RSP: 002b:00007fffe25b9810 EFLAGS: 00010287
[ 2694.755068][T28729] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000020000100
[ 2694.763053][T28729] RDX: 00000000000000a8 RSI: 00007f4c17712db0 RDI: 000000000075bfd0
03:29:47 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r26)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:47 executing program 0:
setgroups(0x40000000000000e3, &(0x7f0000000000))

[ 2694.771039][T28729] RBP: 000000000075bfd4 R08: 0000000000000000 R09: 00007f4c17713700
[ 2694.779023][T28729] R10: 00007f4c177139d0 R11: 0000000000000202 R12: 000000000075bfc8
[ 2694.786999][T28729] R13: 0000000000000004 R14: 0000000000000001 R15: 000000000075bfd4
[ 2694.803506][T28729] memory: usage 307200kB, limit 307200kB, failcnt 60144
[ 2694.812237][T28729] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2694.819502][T28729] Memory cgroup stats for /syz1:
[ 2694.819585][T28729] anon 259612672
[ 2694.819585][T28729] file 36864
[ 2694.819585][T28729] kernel_stack 7471104
[ 2694.819585][T28729] slab 16007168
[ 2694.819585][T28729] sock 0
[ 2694.819585][T28729] shmem 0
[ 2694.819585][T28729] file_mapped 0
[ 2694.819585][T28729] file_dirty 0
[ 2694.819585][T28729] file_writeback 0
[ 2694.819585][T28729] anon_thp 230686720
[ 2694.819585][T28729] inactive_anon 135168
[ 2694.819585][T28729] active_anon 259469312
[ 2694.819585][T28729] inactive_file 16384
[ 2694.819585][T28729] active_file 110592
[ 2694.819585][T28729] unevictable 0
[ 2694.819585][T28729] slab_reclaimable 3649536
[ 2694.819585][T28729] slab_unreclaimable 12357632
[ 2694.819585][T28729] pgfault 254991
[ 2694.819585][T28729] pgmajfault 0
[ 2694.819585][T28729] workingset_refault 165
[ 2694.819585][T28729] workingset_activate 66
[ 2694.819585][T28729] workingset_nodereclaim 0
[ 2694.819585][T28729] pgrefill 87265
[ 2694.819585][T28729] pgscan 163231
[ 2694.819585][T28729] pgsteal 74791
03:29:47 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

[ 2694.824907][T28729] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13308,uid=0
[ 2694.986189][T28729] Memory cgroup out of memory: Killed process 13308 (syz-executor.1) total-vm:72584kB, anon-rss:160kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000
[ 2695.016665][T28849] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2695.041559][T28849] debugfs: File 'msg' in directory 'loop0' already present!
[ 2695.063224][T28849] debugfs: File 'trace0' in directory 'loop0' already present!
03:29:48 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffe33}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:29:48 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
dup(0xffffffffffffffff)
fallocate(r4, 0x0, 0x0, 0x1000100)
lseek(r4, 0x0, 0x3)
r5 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)

03:29:48 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0)
fallocate(r0, 0x0, 0x0, 0x7)

03:29:48 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0xc3, @local, 0x7f}, {0xa, 0x4e23, 0x9, @mcast2, 0xfff}, 0xfff, [0x3f, 0x18, 0x2, 0x8, 0x1, 0xffffffe8, 0x1e9c, 0x4]}, 0x5c)
r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'})
r6 = getpid()
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MIGRATE(r8, 0x6609)
fstat(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
r22 = syz_open_procfs(0x0, &(0x7f0000001300)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00[x\xab\xaa\xca#\xd9\xf5\xfe\xe8[\x1c\xae\xcf*\tdCW\t\xff\xe1\x1d\xf7\xf8\x1aP\x88\xad\xbc\vE~O)\xa1v\xb5\x17n\x99\x05L\x02\x81\xe4\x81\xb8VP\xda\x1b\xd3\xd2\xa1\xda\x05\xa2il\x1a\xf8\xa7\xa0V\xdb\x9bo\xa5A\xe3\xc578\x9f\x96\x1a\xfa;\xc8\xcb\x88\x00\xdb\x03\xb6><MBnN\xb7%m\xcfyCv\xa5\x81\x89c\xe3J\xe1\x85@\xbe\xa7\xd0\x8d;\xd8\x9a\xcf\xf7\xab\xf5\xefQ&NZ\xdc\x90\xc1%\xe2W&\x17\xe6(\xeao\x19/\xee\xe9\xf7\xc0g\xf4\xf07\x8b\x9bE\xe0\x82i\xad\xf6\xa51\xf9\x1bS\x82\xd9\xaacr\xde\x9f\x82\x9d\x94')
fchdir(r22)
r23 = syz_open_procfs(r6, &(0x7f0000001300)='netZ3\xe3\xa461_sTat')
fchdir(r23)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
dup(r24)
r25 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r25)
r26 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0/bus\x00', &(0x7f0000000240)='fuseblk\x00', 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES16=r23, @ANYRES32=r19, @ANYPTR, @ANYRES64=r21, @ANYRESDEC=r25, @ANYRES16], @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="30ff0f000030303030303030303366662c616c6c6f765f6f746865722c64656661536c745f7065726d697373696f6e732c7569643c2dfcff89bfe983b6f2d297ea9b9fd7f32a6cff80fd96f81e320e963b4915aef3072124d8dd8c3039def896eb60efdc09a68b850c267033aff4fe16353b6583a9dcffb2029220532cec7343d11c9edd408f88d0e0511d00af3786ce90cd103ac1aacea1b20867aff4ef89426099436da3bb", @ANYRESOCT=r24, @ANYRESHEX=r26])
r27 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r27, 0x400454ca, &(0x7f0000000100)={'bpq0\x00'})
fstat(r27, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', r9, r28)
r29 = socket$inet_udp(0x2, 0x2, 0x0)
close(r29)
setsockopt(r29, 0xff, 0x1, 0x0, 0x0)
fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
r31 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0)
r32 = socket$inet_udp(0x2, 0x2, 0x0)
close(r32)
setsockopt(r32, 0xff, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0)
r33 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00', 0x4)
sendmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="9524", 0x2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, r9, r30}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r2, r32, 0xffffffffffffffff, r33, r2]}}], 0x50, 0xc15331b0ee3b450f}, 0x48)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:29:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x364c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r5 = dup(0xffffffffffffffff)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000540)={0x44}, 0xffdf)
ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, 0x0)
fallocate(r4, 0x0, 0x0, 0x1000100)
openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0)
lseek(r4, 0x0, 0x3)
r6 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r6, 0x0)

03:29:48 executing program 4:
mount(0x0, 0x0, 0x0, 0x0, 0x0)
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)

03:29:48 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7)

[ 2695.513955][T28958] debugfs: File 'dropped' in directory 'loop0' already present!
[ 2695.544620][T28958] debugfs: File 'msg' in directory 'loop0' already present!
03:29:48 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
lookup_dcookie(0x0, 0x0, 0x0)

[ 2695.564839][T28958] debugfs: File 'trace0' in directory 'loop0' already present!
[ 2695.616290][T29080] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2695.626663][T29080] CPU: 1 PID: 29080 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2695.635022][T29080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2695.645092][T29080] Call Trace:
[ 2695.648406][T29080]  dump_stack+0x1fb/0x318
[ 2695.652755][T29080]  dump_header+0xd8/0x960
[ 2695.657099][T29080]  oom_kill_process+0xee/0x3a0
[ 2695.661870][T29080]  out_of_memory+0x5da/0x900
[ 2695.666475][T29080]  try_charge+0x1223/0x18d0
[ 2695.671011][T29080]  mem_cgroup_try_charge+0x20c/0x680
[ 2695.676312][T29080]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2695.681956][T29080]  wp_page_copy+0x349/0x1890
[ 2695.686565][T29080]  ? do_raw_spin_unlock+0x136/0x260
[ 2695.691772][T29080]  do_wp_page+0x5e5/0x1cc0
[ 2695.696198][T29080]  ? __kasan_check_write+0x14/0x20
[ 2695.701333][T29080]  ? do_raw_spin_lock+0xea/0x2d0
[ 2695.706297][T29080]  handle_mm_fault+0x2ada/0x5ff0
[ 2695.711282][T29080]  do_user_addr_fault+0x589/0xaf0
[ 2695.716327][T29080]  __do_page_fault+0xd3/0x1f0
[ 2695.721029][T29080]  do_page_fault+0x99/0xb0
[ 2695.725456][T29080]  page_fault+0x39/0x40
[ 2695.729618][T29080] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 2695.736203][T29080] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 2695.755820][T29080] RSP: 0018:ffff88805b277a18 EFLAGS: 00010206
[ 2695.761892][T29080] RAX: ffffffff8349a901 RBX: 0000000020031500 RCX: 0000000000000500
[ 2695.769868][T29080] RDX: 0000000000001000 RSI: ffff88802efc6b00 RDI: 0000000020031000
[ 2695.777842][T29080] RBP: ffff88805b277a48 R08: dffffc0000000000 R09: ffffed1005df8e00
[ 2695.785825][T29080] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000
[ 2695.793809][T29080] R13: 00007ffffffff000 R14: ffff88802efc6000 R15: 0000000020030500
[ 2695.801810][T29080]  ? _copy_to_iter+0xf41/0xf60
[ 2695.806601][T29080]  ? copyout+0xf3/0x140
[ 2695.810770][T29080]  copy_page_to_iter+0x3ed/0xcb0
[ 2695.815962][T29080]  pipe_to_user+0xb3/0x160
[ 2695.820454][T29080]  __splice_from_pipe+0x2f7/0x8a0
[ 2695.825513][T29080]  ? user_page_pipe_buf_steal+0xc0/0xc0
[ 2695.831084][T29080]  do_vmsplice+0x1d4/0xdf0
[ 2695.835524][T29080]  ? __kasan_check_write+0x14/0x20
[ 2695.840647][T29080]  ? _copy_from_user+0x11a/0x180
[ 2695.845601][T29080]  ? rw_copy_check_uvector+0x313/0x360
[ 2695.851075][T29080]  ? import_iovec+0x122/0x2a0
[ 2695.855772][T29080]  __se_sys_vmsplice+0x165/0x220
[ 2695.860740][T29080]  ? prepare_exit_to_usermode+0x221/0x5b0
[ 2695.866473][T29080]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 2695.872202][T29080]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2695.877670][T29080]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 2695.883403][T29080]  __x64_sys_vmsplice+0x9b/0xb0
[ 2695.888274][T29080]  do_syscall_64+0xf7/0x1c0
[ 2695.892792][T29080]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2695.898697][T29080] RIP: 0033:0x45a679
[ 2695.902595][T29080] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2695.922301][T29080] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 2695.930724][T29080] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679
[ 2695.938828][T29080] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004
[ 2695.946817][T29080] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[ 2695.954804][T29080] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2695.962787][T29080] R13: 00000000004ca80e R14: 00000000004e3110 R15: 00000000ffffffff
[ 2695.971171][T29080] memory: usage 307200kB, limit 307200kB, failcnt 60201
[ 2695.978354][T29080] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2695.985237][T29080] Memory cgroup stats for /syz1:
[ 2695.985636][T29080] anon 259604480
[ 2695.985636][T29080] file 36864
[ 2695.985636][T29080] kernel_stack 7471104
[ 2695.985636][T29080] slab 16007168
[ 2695.985636][T29080] sock 0
[ 2695.985636][T29080] shmem 0
[ 2695.985636][T29080] file_mapped 0
[ 2695.985636][T29080] file_dirty 0
[ 2695.985636][T29080] file_writeback 0
[ 2695.985636][T29080] anon_thp 230686720
[ 2695.985636][T29080] inactive_anon 135168
[ 2695.985636][T29080] active_anon 259604480
[ 2695.985636][T29080] inactive_file 16384
[ 2695.985636][T29080] active_file 110592
[ 2695.985636][T29080] unevictable 0
[ 2695.985636][T29080] slab_reclaimable 3649536
[ 2695.985636][T29080] slab_unreclaimable 12357632
[ 2695.985636][T29080] pgfault 255156
[ 2695.985636][T29080] pgmajfault 0
[ 2695.985636][T29080] workingset_refault 165
[ 2695.985636][T29080] workingset_activate 66
[ 2695.985636][T29080] workingset_nodereclaim 0
[ 2695.985636][T29080] pgrefill 87265
[ 2695.985636][T29080] pgscan 163231
[ 2695.985636][T29080] pgsteal 74791
[ 2696.082506][T29080] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=313,uid=0
[ 2696.099759][T29080] Memory cgroup out of memory: Killed process 313 (syz-executor.1) total-vm:72584kB, anon-rss:156kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000
[ 2696.120745][ T1035] oom_reaper: reaped process 313 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 2696.136683][T29080] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2696.146797][T29080] CPU: 1 PID: 29080 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[ 2696.155325][T29080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2696.165398][T29080] Call Trace:
[ 2696.168710][T29080]  dump_stack+0x1fb/0x318
[ 2696.173049][T29080]  dump_header+0xd8/0x960
[ 2696.177378][T29080]  oom_kill_process+0xee/0x3a0
[ 2696.182221][T29080]  out_of_memory+0x5da/0x900
[ 2696.186809][T29080]  try_charge+0x1223/0x18d0
[ 2696.191331][T29080]  mem_cgroup_try_charge+0x20c/0x680
[ 2696.196627][T29080]  mem_cgroup_try_charge_delay+0x25/0xa0
[ 2696.202274][T29080]  wp_page_copy+0x349/0x1890
[ 2696.206884][T29080]  ? do_raw_spin_unlock+0x136/0x260
[ 2696.212098][T29080]  do_wp_page+0x5e5/0x1cc0
[ 2696.216521][T29080]  ? __kasan_check_write+0x14/0x20
[ 2696.221624][T29080]  ? do_raw_spin_lock+0xea/0x2d0
[ 2696.226549][T29080]  handle_mm_fault+0x2ada/0x5ff0
[ 2696.231481][T29080]  do_user_addr_fault+0x589/0xaf0
[ 2696.236491][T29080]  __do_page_fault+0xd3/0x1f0
[ 2696.241145][T29080]  do_page_fault+0x99/0xb0
[ 2696.245551][T29080]  page_fault+0x39/0x40
[ 2696.249698][T29080] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x30
[ 2696.256266][T29080] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 f3 a4
[ 2696.276387][T29080] RSP: 0018:ffff88805b277a18 EFLAGS: 00010206
[ 2696.282431][T29080] RAX: ffffffff8349a901 RBX: 0000000020041500 RCX: 0000000000000500
[ 2696.290383][T29080] RDX: 0000000000001000 RSI: ffff88802efc6b00 RDI: 0000000020041000
[ 2696.298506][T29080] RBP: ffff88805b277a48 R08: dffffc0000000000 R09: ffffed1005df8e00
[ 2696.306454][T29080] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000
[ 2696.314412][T29080] R13: 00007ffffffff000 R14: ffff88802efc6000 R15: 0000000020040500
[ 2696.322411][T29080]  ? _copy_to_iter+0xf41/0xf60
[ 2696.327174][T29080]  ? copyout+0xf3/0x140
[ 2696.332443][T29080]  copy_page_to_iter+0x3ed/0xcb0
[ 2696.337373][T29080]  pipe_to_user+0xb3/0x160
[ 2696.341783][T29080]  __splice_from_pipe+0x2f7/0x8a0
[ 2696.346786][T29080]  ? user_page_pipe_buf_steal+0xc0/0xc0
[ 2696.352319][T29080]  do_vmsplice+0x1d4/0xdf0
[ 2696.356741][T29080]  ? __kasan_check_write+0x14/0x20
[ 2696.361841][T29080]  ? _copy_from_user+0x11a/0x180
[ 2696.366765][T29080]  ? rw_copy_check_uvector+0x313/0x360
[ 2696.372203][T29080]  ? import_iovec+0x122/0x2a0
[ 2696.376865][T29080]  __se_sys_vmsplice+0x165/0x220
[ 2696.381791][T29080]  ? prepare_exit_to_usermode+0x221/0x5b0
[ 2696.387488][T29080]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 2696.393182][T29080]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2696.398614][T29080]  ? trace_irq_disable_rcuidle+0x23/0x1e0
[ 2696.404310][T29080]  __x64_sys_vmsplice+0x9b/0xb0
[ 2696.409141][T29080]  do_syscall_64+0xf7/0x1c0
[ 2696.413634][T29080]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2696.424452][T29080] RIP: 0033:0x45a679
[ 2696.428326][T29080] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2696.447915][T29080] RSP: 002b:00007f4c176f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 2696.456304][T29080] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a679
[ 2696.464271][T29080] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004
[ 2696.472242][T29080] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
[ 2696.480200][T29080] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176f26d4
[ 2696.488166][T29080] R13: 00000000004ca80e R14: 00000000004e3110 R15: 00000000ffffffff
[ 2696.496470][T29080] memory: usage 307200kB, limit 307200kB, failcnt 60249
[ 2696.504829][T29080] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2696.511819][T29080] Memory cgroup stats for /syz1:
[ 2696.511913][T29080] anon 259604480
[ 2696.511913][T29080] file 36864
[ 2696.511913][T29080] kernel_stack 7536640
[ 2696.511913][T29080] slab 16007168
[ 2696.511913][T29080] sock 0
[ 2696.511913][T29080] shmem 0
[ 2696.511913][T29080] file_mapped 0
[ 2696.511913][T29080] file_dirty 0
[ 2696.511913][T29080] file_writeback 0
[ 2696.511913][T29080] anon_thp 230686720
[ 2696.511913][T29080] inactive_anon 135168
[ 2696.511913][T29080] active_anon 259604480
[ 2696.511913][T29080] inactive_file 16384
[ 2696.511913][T29080] active_file 110592
[ 2696.511913][T29080] unevictable 0
03:29:49 executing program 0:
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)
semget$private(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x41000)
creat(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_genetlink_get_family_id$team(0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7)
socket(0x1000000010, 0x400000400080803, 0xcd)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x1000000010, 0x400000400080803, 0x0)
dup(r3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket(0x0, 0x400000400080803, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000300))
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'})
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7)
socket(0x1000000010, 0x400000400080803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'})
r5 = socket(0x1000000010, 0x400000400080803, 0x0)
dup(r5)
r6 = socket(0x0, 0x0, 0x0)
dup(r6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, 0x0, &(0x7f0000000300))
socket(0x1000000010, 0x400000400080803, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8)
getsockname(0xffffffffffffffff, &(0x7f0000000540)=@hci, 0x0)
dup(0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0")
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000004800))
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)={@mcast1}, &(0x7f0000000540)=0x14)
socket$inet(0x10, 0x3, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
setuid(0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008380)={&(0x7f0000000080), 0xc, &(0x7f0000008340)={&(0x7f0000000100)=ANY=[@ANYBLOB="c2a103", @ANYRES16=0x0, @ANYBLOB="1faa288d00a40fb97e0100008000000000fef213e4cd6f73f2562c775ff2ccececac288459265264e0c6cf32f5ec68307fabaa5aa9988b1174fcb9e1a305de90d02201f6ddcac9339c1aebed884567f62fc4fa490d11b634e51356f3ff6d50293900000000d12df3820fb80764f27e495f38800c24db6c964081e39c1c69b600008c1b30cd43b2ad49c2c2bb18cc35b443b264e9bdc7e1ea5fccc1fa60fd65a0534318db2d07a4982661b1cdaa2c5b61b4e44f"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
r8 = socket(0x11, 0x0, 0x0)
bind(r8, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)

03:29:49 executing program 5:
r0 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7)

[ 2696.511913][T29080] slab_reclaimable 3649536
[ 2696.511913][T29080] slab_unreclaimable 12357632
[ 2696.511913][T29080] pgfault 255189
[ 2696.511913][T29080] pgmajfault 0
[ 2696.511913][T29080] workingset_refault 165
[ 2696.511913][T29080] workingset_activate 66
[ 2696.511913][T29080] workingset_nodereclaim 0
[ 2696.511913][T29080] pgrefill 87265
[ 2696.511913][T29080] pgscan 163231
[ 2696.511913][T29080] pgsteal 74791
[ 2696.607672][T29080] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=305,uid=0
[ 2696.623248][T29080] Memory cgroup out of memory: Killed process 305 (syz-executor.1) total-vm:72584kB, anon-rss:156kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000
[ 2696.641722][ T1035] oom_reaper: reaped process 305 (syz-executor.1), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB
[ 2801.525725][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 2801.532730][    C0] 	(detected by 0, t=10502 jiffies, g=312197, q=436)
[ 2801.539483][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10493 (4295217260-4295206767), jiffies_till_next_fqs=1, root ->qsmask 0x0
[ 2801.552829][    C0] syz-executor.1  R  running task    23480 29249   8221 0x80004000
[ 2801.560726][    C0] Call Trace:
[ 2801.564003][    C0]  <IRQ>
[ 2801.566943][    C0]  sched_show_task+0x40f/0x560
[ 2801.571710][    C0]  rcu_sched_clock_irq+0x1861/0x1ad0
[ 2801.577002][    C0]  update_process_times+0x12d/0x180
[ 2801.582199][    C0]  tick_sched_timer+0x263/0x420
[ 2801.587037][    C0]  ? tick_setup_sched_timer+0x3d0/0x3d0
[ 2801.592581][    C0]  __hrtimer_run_queues+0x403/0x840
[ 2801.597788][    C0]  hrtimer_interrupt+0x38c/0xda0
[ 2801.602734][    C0]  ? debug_smp_processor_id+0x9/0x20
[ 2801.608024][    C0]  smp_apic_timer_interrupt+0x109/0x280
[ 2801.613566][    C0]  apic_timer_interrupt+0xf/0x20
[ 2801.618486][    C0]  </IRQ>
[ 2801.621422][    C0] RIP: 0010:lock_acquire+0x1b2/0x250
[ 2801.626698][    C0] Code: c1 e8 03 42 80 3c 30 00 74 0c 48 c7 c7 28 96 aa 88 e8 32 3b 55 00 48 83 3d c2 cb 50 07 00 0f 84 9c 00 00 00 48 8b 7d c0 57 9d <0f> 1f 44 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 44 89
[ 2801.646298][    C0] RSP: 0000:ffff8880407aed18 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 2801.654697][    C0] RAX: 1ffffffff11552c5 RBX: 0000000000000000 RCX: ffffffff815aa172
[ 2801.662657][    C0] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: 0000000000000286
[ 2801.670617][    C0] RBP: ffff8880407aed70 R08: dffffc0000000000 R09: fffffbfff12fd1c3
[ 2801.678581][    C0] R10: fffffbfff12fd1c3 R11: 0000000000000000 R12: 0000000000000001
[ 2801.686542][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888099c283c8
[ 2801.694976][    C0]  ? validate_chain+0x92/0x7bc0
[ 2801.699846][    C0]  _raw_spin_lock+0x2d/0x40
[ 2801.704342][    C0]  ? vmpressure_prio+0x66/0x120
[ 2801.709181][    C0]  vmpressure_prio+0x66/0x120
[ 2801.713854][    C0]  do_try_to_free_pages+0x1f0/0x920
[ 2801.719068][    C0]  try_to_free_mem_cgroup_pages+0x344/0x680
[ 2801.724966][    C0]  try_charge+0x60d/0x18d0
[ 2801.729406][    C0]  mem_cgroup_try_charge+0x20c/0x680
[ 2801.734702][    C0]  __add_to_page_cache_locked+0x951/0xbf0
[ 2801.740408][    C0]  ? __alloc_pages_nodemask+0x2e3/0x5d0
[ 2801.745955][    C0]  ? workingset_activation+0x2b0/0x2b0
[ 2801.751410][    C0]  add_to_page_cache_lru+0x156/0x4a0
[ 2801.756698][    C0]  generic_file_read_iter+0x1279/0x21b0
[ 2801.762255][    C0]  ext4_file_read_iter+0x25b/0x3a0
[ 2801.767367][    C0]  __vfs_read+0x59e/0x730
[ 2801.771789][    C0]  integrity_kernel_read+0x113/0x190
[ 2801.777073][    C0]  ima_calc_file_hash+0xacf/0x1cc0
[ 2801.782179][    C0]  ? __kasan_check_read+0x11/0x20
[ 2801.787192][    C0]  ? __ext4_get_inode_loc+0x43e/0xe10
[ 2801.792604][    C0]  ? ext4_xattr_get+0x5aa/0x840
[ 2801.797453][    C0]  ? __kasan_check_write+0x14/0x20
[ 2801.802553][    C0]  ? __up_read+0x238/0x740
[ 2801.806956][    C0]  ? ext4_xattr_get+0x5aa/0x840
[ 2801.811806][    C0]  ? up_read+0x1d/0x20
[ 2801.815864][    C0]  ? ext4_xattr_get+0x5aa/0x840
[ 2801.820716][    C0]  ima_collect_measurement+0x250/0x4d0
[ 2801.826179][    C0]  process_measurement+0xdae/0x1800
[ 2801.831435][    C0]  ? rcu_lock_release+0x9/0x30
[ 2801.836199][    C0]  ? rcu_lock_release+0x21/0x30
[ 2801.841042][    C0]  ? smk_of_task_struct+0x1c5/0x1d0
[ 2801.846293][    C0]  ? smack_task_getsecid+0x26/0x90
[ 2801.851403][    C0]  ima_file_check+0x9b/0xe0
[ 2801.855903][    C0]  path_openat+0x1760/0x4420
[ 2801.860592][    C0]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2801.866057][    C0]  do_filp_open+0x192/0x3d0
[ 2801.870579][    C0]  do_sys_open+0x29f/0x560
[ 2801.874995][    C0]  __x64_sys_open+0x87/0x90
[ 2801.879490][    C0]  do_syscall_64+0xf7/0x1c0
[ 2801.883995][    C0]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2801.889875][    C0] RIP: 0033:0x45a679
[ 2801.894039][    C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2801.913638][    C0] RSP: 002b:00007f4c176d0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 2801.922040][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679
[ 2801.930002][    C0] RDX: 0000000000000000 RSI: 000000000014103e RDI: 0000000020000780
[ 2801.937963][    C0] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000
[ 2801.945927][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c176d16d4
[ 2801.953889][    C0] R13: 00000000004fc03f R14: 00000000004dd5f0 R15: 00000000ffffffff
[ 2801.961900][    C0] rcu: rcu_preempt kthread starved for 10535 jiffies! g312197 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 2801.973169][    C0] rcu: RCU grace-period kthread stack dump:
[ 2801.979051][    C0] rcu_preempt     R  running task    28864    10      2 0x80004000
[ 2801.986949][    C0] Call Trace:
[ 2801.990249][    C0]  __schedule+0x837/0xc50
[ 2801.994590][    C0]  schedule+0x181/0x210
[ 2801.998743][    C0]  schedule_timeout+0x14f/0x240
[ 2802.003597][    C0]  ? run_local_timers+0x120/0x120
[ 2802.008620][    C0]  rcu_gp_kthread+0xed8/0x1770
[ 2802.013388][    C0]  kthread+0x332/0x350
[ 2802.017451][    C0]  ? rcu_report_qs_rsp+0x140/0x140
[ 2802.022556][    C0]  ? kthread_blkcg+0xe0/0xe0
[ 2802.027139][    C0]  ret_from_fork+0x24/0x30